Riskcovery

CVE-2026-53321

io_uring/napi: cap busy_poll_to 10 msec

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Oct 21, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

io_uring/napi: cap busy_poll_to 10 msec

Currently there's no cap on the maximum amount of time that napi is allowed to poll if no events are found, which can lead to kernel complaints on a task being stuck as there's no conditional rescheduling done within that loop.

Just cap it to 10 msec in total, that's already way above any kind of sane value that will reap any benefits, yet low enough that it's nowhere near being able to trigger preemption complaints.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5 to before 42785efe813e5a7d815f3b6be126e1bc0d12d2b6Affected
  • 8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5 to before 39767f944a8c9e696566c37ad5b20131406c4b8dAffected
  • 8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5 to before cb3af525f8dfb8930f0c123e5755fa967a12d5c1Affected
  • 8d0c12a80cdeb80d5e0510e96d38fe551ed8e9b5 to before df8599ee18c0e5fe343ffe0b4c379636b8bb839aAffected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.