CVE-2026-99263

✕ Withdrawn — historical dataUNRATEDCVSS · not yet scored
—

In the Linux kernel, the following vulnerability has been resolved:

io_uring/poll: avoid retry wakeup loss when dropping ownership

If a wakeup sets IO_POLL_RETRY_FLAG between the owning task consuming the existing instance of IO_POLL_RETRY_FLAG and the loop check of io_poll_check_events(), then we stall on processing the request until an unrelated wakeup comes along.

Using atomic_cmpxchg instead of atomic_sub_return to guarantee both the count v and poll_refs are 0 and no wake-ups are missed.

CVSS v3
—
EchelonGraph score
Not yet assessedThis CVE record was withdrawn by its numbering authority, so there is no vulnerability to rate.
EPSS PROB
—
EPSS %ILE
—
KEV
—Not applicable: this CVE ID was withdrawn

Published

November 3, 2026

Last Modified

November 3, 2026

References (7)

Frequently asked(3)

What is CVE-2026-99263?
CVE-2026-99263 is a rejected CVE ID: its record was withdrawn on November 4, 2026 and no longer describes a vulnerability. Reason given: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
When was the CVE record for CVE-2026-99263 published?
The CVE record for CVE-2026-99263 was published on November 3, 2026. EchelonGraph's copy of the record carries a last-modified date of November 3, 2026; the record at its source may have been updated since.
How do I remediate CVE-2026-99263?
There is nothing to remediate under CVE-2026-99263: it is a rejected (withdrawn) CVE ID and no longer describes a vulnerability.