CVE-2026-99228

A flaw was found in the Linux kernel's io_uring subsystem. When an application thread exits while running asynchronous operations via internal worker queues, the signal intended to interrupt and terminate worker tasks can be lost. A local user could exploit this vulnerability by submitting asynchronous requests that block waiting for an external event, such as opening a named pipe without a peer, causing the exiting thread to hang indefinitely and leading to a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.