high7.8
CVE-2026-99264
In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't retry recv on uncommitted buffers Commit 41b70df5b38b ("io_uring/net: c…
Impact
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
An attacker can exploit this with local access to the system, with a regular user account, without any action by a user. If it succeeds: high risk of data being read, high risk of data or systems being changed, high risk of outages.
Affected products · Linux
| Product | Affected versions |
|---|---|
| Linux | from fe9da1812f8697a38f7e30991d568ec199e16059 before 21cb1770a56a51266ab96d4ed2a3b6979db59694 from 41b70df5b38bc80967d2e0ed55cc3c3896bba781 before fc8506eea4498ecba26ef8bf6dbbd74af3dc891d from 41b70df5b38bc80967d2e0ed55cc3c3896bba781 before 97b8dc36ba3cb176b74a7929140aeaeb40d5cdc0 Versions 3b53dc1c641f2884d4750fc25aaf6c36b90db606, 21a4ddb0f5e933f372808c10b9ac704505751bb1, 2eb7937b5fc7fcd90eab7bebb0181214b61b9283 |
References
- NVD record
- CVE.org record
- GitHub advisory
- https://git.kernel.org/stable/c/21cb1770a56a51266ab96d4ed2a3b6979db59694
- https://git.kernel.org/stable/c/fc8506eea4498ecba26ef8bf6dbbd74af3dc891d
- https://git.kernel.org/stable/c/97b8dc36ba3cb176b74a7929140aeaeb40d5cdc0
- https://github.com/advisories/GHSA-q4wp-8vpq-9rg3
- https://nvd.nist.gov/vuln/detail/CVE-2026-99264
- https://git.kernel.org/stable/c/8444de681a179e41a4eb92d5bbe770a0677074a6