CVE Database›Document archive›CVE-2026-23113

CVE-2026-23113

kernel: io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · February 14, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's io_uring subsystem. When io-wq worker threads process extremely long-running I/O operations (such as large reads from /dev/msr* devices), the exit path may be delayed for an extended period because the IO_WQ_BIT_EXIT flag is only checked before the work loop begins. This can cause the io_wq_put_and_exit() function to block for over 140 seconds, triggering hung task warnings.

Statement

This is primarily a latency and responsiveness issue rather than a security vulnerability. The kernel continues to function correctly, and the delay only affects io_uring ring cleanup during process exit. No crash, memory corruption, or privilege escalation occurs.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-835 · Loop with Unreachable Exit Condition ('Infinite Loop')