CVE-2026-80713

Received Received - Intake

Linux Kernel io_uring Task Restriction Bypass

Publication date: 2026-08-28

Last updated on: 2026-08-29

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: io_uring: preserve task restrictions across exec Per-task restrictions apply to all rings created by a task. Once installed, they should not be dropped across exec. For a task that has used io_uring, the exec cancellation path calls __io_uring_free(). This frees both the task context and the per-task restriction, so a ring created after exec is unrestricted. Split task context cleanup into io_uring_free_tctx(), and use it from the exec cancellation path. Keep __io_uring_free() for final task cleanup, where both the context and restriction are released.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-29

Generated

2026-09-17

AI Q&A

2026-08-28

EPSS Evaluated

2026-09-15

NVD

CVE-2026-80713

EUVD

EUVD-2026-67448

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of task restrictions in io_uring during process execution. When a task with io_uring restrictions executes a new program, the restrictions are incorrectly removed, allowing unrestricted io_uring operations after the exec call. This happens because the cleanup process frees both the task context and restrictions prematurely.

Detection Guidance

This vulnerability is specific to the Linux kernel's io_uring subsystem and may not have direct detection commands. Check kernel version for affected releases and monitor for unusual io_uring activity or privilege escalation attempts.

Impact Analysis

This vulnerability could allow an attacker to bypass security restrictions imposed by io_uring, potentially leading to unauthorized access or privilege escalation. If a restricted task executes a malicious program, the new program could perform io_uring operations without the intended restrictions, compromising system security.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel issue related to io_uring task restrictions being improperly preserved across exec calls, which could lead to unauthorized access or data leakage in affected systems. However, no specific compliance impact is mentioned in the provided context.

Mitigation Strategies

Update the Linux kernel to the latest patched version. If immediate patching is not possible, restrict io_uring usage via kernel parameters or disable it entirely if not required.

Hi! I’m here to help you understand CVE-2026-80713. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70