{"affected":[{"defaultStatus":"unaffected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"lessThan":"3fe820cf35f83534eab72ea73f1a83cfd3cd8079","status":"affected","version":"8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5","versionType":"git"},{"lessThan":"18c373f446068972788158c8c7de6e849b04ed98","status":"affected","version":"8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5","versionType":"git"},{"lessThan":"981621d6eadcd232d4ea748aaeb046337f10d3c1","status":"affected","version":"8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","source":"CNA: Linux","vendor":"Linux","versions":[{"status":"affected","version":"6.9"},{"lessThan":"6.9","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"}]}],"cveId":"CVE-2026-99267","cwes":[],"description":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/napi: make stale entries time out after 60s\n\nWith dynamic tracking a NAPI id that hasn't been seen for a minute is\nmeant to be dropped from the list the ring busy polls. The timeout is\nadded to jiffies, but it is defined as 60 * SEC_CONVERSION, and\nSEC_CONVERSION isn't the number of jiffies in a second. It is the\ninternal factor of __timespec64_to_jiffies(), HZ scaled up by\nSEC_JIFFIE_SC bits. For HZ=1000 that is 1000 << 22, which puts the\ntimeout at about eight years. On 32-bit the multiplication overflows.\n\nSo entries are never removed, and every id that a socket of the ring\never had keeps being polled on each wait.","epss":null,"exploits":[],"kev":null,"metrics":[],"modifiedAt":1793706497478,"publishedAt":1793706497478,"references":[{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/3fe820cf35f83534eab72ea73f1a83cfd3cd8079"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/18c373f446068972788158c8c7de6e849b04ed98"},{"source":"CNA: Linux","tags":[],"url":"https://git.kernel.org/stable/c/981621d6eadcd232d4ea748aaeb046337f10d3c1"}],"remediation":[],"revision":"c815c6dab19ade975b0b6962b557b341e9c9287d6c9bcb67ee7bb178b2df3c69","sources":[{"modifiedAt":1793706497478,"name":"CNA: Linux","retrievedAt":1793707757921,"url":"https://www.cve.org/CVERecord?id=CVE-2026-99267"}],"ssvc":null,"status":"published","title":"io_uring/napi: make stale entries time out after 60s","updatedAt":1793707757921}