CVE-2026-23113
kernel: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 14, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's io_uring subsystem. When io-wq worker threads process extremely long-running I/O operations (such as large reads from /dev/msr* devices), the exit path may be delayed for an extended period because the IO_WQ_BIT_EXIT flag is only checked before the work loop begins. This can cause the io_wq_put_and_exit() function to block for over 140 seconds, triggering hung task warnings.
Statement
This is primarily a latency and responsiveness issue rather than a security vulnerability. The kernel continues to function correctly, and the delay only affects io_uring ring cleanup during process exit. No crash, memory corruption, or privilege escalation occurs.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')