PT-2026-8106 · Linux · Linux Kernel
Syzbot
·
Published
2026-01-01
·
Updated
2026-05-20
·
CVE-2026-23113
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains an issue within the io uring/io-wq subsystem. Specifically, processing a large number of 2GB - 4096B reads from a /dev/msr* file using loop rw iter() can take an extended period (potentially exceeding the syzbot uninterruptible sleep timeout of 140 seconds). This occurs because each read returns 16MB of data, and processing a chain of these reads can be time-consuming. The issue does not represent a functional error, but rather a performance bottleneck that can lead to system complaints. The problem can be mitigated by checking the IO WQ BIT EXIT flag within the io worker handle work() loop, allowing for quicker exit and cancellation of remaining requests.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel