CVE-2026-52933

Name of the Vulnerable Software and Affected Versions Linux kernel versions from November 2022 through April 2026

Description An issue exists in the io poll get ownership() function within the io uring/poll component. The function uses a signed comparison to determine if poll refs has reached the threshold for the slowpath. Because atomic read() returns a signed integer, when the IO POLL CANCEL FLAG (BIT(31)) is set in poll refs, the value is interpreted as negative. This causes the comparison against the threshold to always evaluate to false, preventing the slowpath from being executed.

Recommendations Update the Linux kernel to the version released in April 2026 or later.