CVE-2026-81010

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the io uring/waitid component where the io waitid cb() function fails to honor task work cancellation. When task work add() cannot queue work to the originating task, the fallback path runs from a kworker, and io uring marks this work as canceled via tw.cancel. Because io waitid cb() ignores this cancellation and proceeds to call do wait(), it incorrectly performs child lookups relative to the kworker instead of the task that submitted the request. This occurs because waitid is task-context dependent and relies on current->signal->wait chldexit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.