# CVE-2026-99255: io_uring/io-wq: don't hide a link from cancellations

Status: published. Published: 2026-11-03. Updated: 2026-11-03.

In the Linux kernel, the following vulnerability has been resolved:

io_uring/io-wq: don't hide a link from cancellations

A task that exits cancels its tracked requests and waits until they are
gone. io_uring_cancel_generic() looks everywhere a request can be, and
goes to sleep if it found nothing to cancel. It is woken up each time
one of the requests of the task is completed by task work or freed.

When io-wq is done with a request that has a link, there is a time in which
the next request of the link can't be found:

  io_worker_handle_work()
    io_assign_current_work(worker, NULL)
    io_wq_free_work(work)
      io_req_find_next()           // takes the link off the request
      io_free_req()                // task work for the task
    io_assign_current_work(worker, linked)
      io_run_task_work()
      cond_resched()
      worker->cur_work = linked

It is not pending, it is not the current work of a worker, and it is not
yet on the list that it is about to be parked on. If the pass that the
exiting task makes because of io_free_req() falls into that time, it finds
nothing and the task goes to sleep. The worker then runs the link, which
IO_WQ_BIT_EXIT doesn't prevent for bounded work. If that parks the request
nothing is completed or freed, and nobody wakes up the task. If it is the
process that exits it can't be killed any more either.

  NOP, IOSQE_ASYNC | IOSQE_IO_LINK
  FUTEX_WAIT, FUTEX2_PRIVATE
  exit of the thread, or of the process, up to 63us later

With four of these per round 5 to 8 of 10,000 rounds hang (4 CPUs, KVM):

  io_uring_cancel_generic
  do_exit

Commit f8b632e89a10 ("io_uring: tighten task exit cancellations") is about
the same gap, and makes the task look again for whatever happens before
io_free_req().

Free the request once the link is the current work of the worker, or
pending. Whoever is woken up by that can find the link, until it is parked
where cancellations look as well. To do so split io_wq_free_work() in two.

## Remediation

No remediation reported in collected sources

## Affected products and versions

- Linux / Linux: ≥ 768134d4f48109b90f4248feecbeeb7d684e410c; < 98470f164286f7f62aaee519d4d11b9370ce6d7b (affected, git); ≥ 768134d4f48109b90f4248feecbeeb7d684e410c; < d39ebc7a583d650b1d6da9b45e2ce96ad4d877e4 (affected, git); ≥ 768134d4f48109b90f4248feecbeeb7d684e410c; < ebe8e97fb99d9f374c482902a00677cfd24a6c27 (affected, git); ≥ 768134d4f48109b90f4248feecbeeb7d684e410c; < 3e02b8df0e9fa1423ac2a4e03409a9329c30ac49 (affected, git); ≥ 768134d4f48109b90f4248feecbeeb7d684e410c; < 92e20e9c72bdf6cfa6f84eded7b33399bc7061da (affected, git). Source: CNA: Linux
- Linux / Linux: 5.5 (affected); ≥ 0; < 5.5 (unaffected, semver); ≥ 6.1.191; ≤ 6.1.* (unaffected, semver); ≥ 6.6.161; ≤ 6.6.* (unaffected, semver); ≥ 6.12.115; ≤ 6.12.* (unaffected, semver); ≥ 6.18.60; ≤ 6.18.* (unaffected, semver); ≥ 7.2.14; ≤ 7.2.* (unaffected, semver). Source: CNA: Linux

## Severity and prioritization

- CISA KEV: No listing in collected sources

- EPSS: Not available

- SSVC: Not available

- Weaknesses: Not reported

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://git.kernel.org/stable/c/98470f164286f7f62aaee519d4d11b9370ce6d7b (CNA: Linux)

- https://git.kernel.org/stable/c/d39ebc7a583d650b1d6da9b45e2ce96ad4d877e4 (CNA: Linux)

- https://git.kernel.org/stable/c/ebe8e97fb99d9f374c482902a00677cfd24a6c27 (CNA: Linux)

- https://git.kernel.org/stable/c/3e02b8df0e9fa1423ac2a4e03409a9329c30ac49 (CNA: Linux)

- https://git.kernel.org/stable/c/92e20e9c72bdf6cfa6f84eded7b33399bc7061da (CNA: Linux)

## Provenance

- CNA: Linux: https://www.cve.org/CVERecord?id=CVE-2026-99255; retrieved 2026-11-03; source updated 2026-11-03

Revision: b24505469ddb4f29ef874298124194281b87e95c631c2ffee77f1a06dd3c41b3

Canonical: https://y2.dev/cve/CVE-2026-99255

## Agent and API access

Public CVE pages, Markdown, and JSON are free to read without an account or API key.

- Public catalog: https://y2.dev/cve/index.json. Follow nextCursor with the same search, filters, sort, and limit (1–100). A null cursor marks the end.

- WebMCP: search_cve_disclosures, get_cve_disclosure, get_cve_page_markdown, get_y2_cve_access. Available in compatible browsers.

- Cyber API: https://api.y2.dev/api/v2/cyber/cves and https://api.y2.dev/api/v2/cyber/cves/{cveId}.

- Y2 Pro or Elite: create a workspace API key with the intel:cyber scope and send Authorization: Bearer <Y2_API_KEY>. Setup: https://y2.dev/docs/api/create-key.

- x402: Pay per request without an account or API key. Omit Authorization, read the HTTP 402 PAYMENT-REQUIRED challenge, validate its current requirements, and retry with PAYMENT-SIGNATURE through an authorized payment client. These browser tools never make payments. Guide: https://y2.dev/docs/api/x402.

- OpenAPI: https://y2.dev/api/openapi.yaml. Agent access metadata: https://y2.dev/cve/agent.json.

Collected public records only. Check source status for coverage and freshness.