{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"d1f6850086ac6f8b0fa44fb19aa2a468c73ee071","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"lessThan":"41fae2e9e1fa3bee86aee0a25ba90e59ce5024bf","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"lessThan":"4ef685b8505615729d75c875f52822238bf76ca6","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"lessThan":"afa407c02f3aa0fd872f86c9bf1b34502e0fa8f0","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"lessThan":"eb2a50d8235e4580fea9aa20f3fbe1a002c38cb1","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"lessThan":"521e8a65e9b45532295ba1082ef12be6e80c173b","status":"affected","version":"a26a35e9019fd70bf3cf647dcfdae87abc7bacea","versionType":"git"},{"status":"affected","version":"4b702b7d11ce1b9d26fc6d7c5a7ef4ac1d455048","versionType":"git"},{"status":"affected","version":"bc4e6ee16778149811333a969a7a893d4cc110c5","versionType":"git"},{"lessThan":"5.16","status":"affected","version":"5.15.82","versionType":"semver"},{"lessThan":"6.1","status":"affected","version":"6.0.11","versionType":"semver"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.1"},{"lessThan":"6.1","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.191","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.161","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"},{"lessThanOrEqual":"7.3.*","status":"unaffected","version":"7.3.1","versionType":"semver"}]}],"cveId":"CVE-2026-99263","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/poll: avoid retry wakeup loss when dropping ownership\n\nIf a wakeup sets IO_POLL_RETRY_FLAG between the owning task consuming\nthe existing instance of IO_POLL_RETRY_FLAG and the loop check\nof io_poll_check_events(), then we stall on processing the request\nuntil an unrelated wakeup comes along.\n\nUsing atomic_cmpxchg instead of atomic_sub_return to guarantee both the\ncount v and poll_refs are 0 and no wake-ups are missed.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793706495743,"publishedAt":1793706495743,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/d1f6850086ac6f8b0fa44fb19aa2a468c73ee071"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/41fae2e9e1fa3bee86aee0a25ba90e59ce5024bf"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/4ef685b8505615729d75c875f52822238bf76ca6"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/afa407c02f3aa0fd872f86c9bf1b34502e0fa8f0"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/eb2a50d8235e4580fea9aa20f3fbe1a002c38cb1"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/521e8a65e9b45532295ba1082ef12be6e80c173b"}],"remediation":[],"revision":"06743dc03f765af88bff81530fe09d9c5ff3a26ee1125338c923dfc12dce9b1a","sources":[{"modifiedAt":1793706495743,"name":"CNA: Linux","retrievedAt":1793707753351,"url":"https://www.cve.org/CVERecord?id=CVE-2026-99263"}],"ssvc":null,"status":"published","title":"io_uring/poll: avoid retry wakeup loss when dropping ownership","updatedAt":1793707753351}