CVE-2026-45995

A flaw was found in the Linux kernel's io_uring/zcrx subsystem. This use-after-free (UAF) vulnerability occurs because the io_free_rbuf_ring() function uses a struct user_struct that is prematurely freed by io_zcrx_ifq_free() before the ring is destroyed. A local attacker could potentially exploit this flaw to achieve privilege escalation or execute arbitrary code, leading to a compromise of the system.