CVE-2026-80713EPSS p5.0%
CVE-2026-80713CVE-2026-80713
Description
In the Linux kernel, the following vulnerability has been resolved:
io_uring: preserve task restrictions across exec
Per-task restrictions apply to all rings created by a task. Once
installed, they should not be dropped across exec.
For a task that has used io_uring, the exec cancellation path calls
__io_uring_free(). This frees both the task context and the per-task
restriction, so a ring created after exec is unrestricted.
Split task context cleanup into io_uring_free_tctx(), and use it from
the exec cancellation path. Keep __io_uring_free() for final task
cleanup, where both the context and restriction are released.
Scoring
| CVSS | 8.4 () |
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N |
| EPSS | 0.16% probability of exploitation · percentile 5.0% · 2026-10-05T12:00:23Z |
| Last modified | 2026-08-29 |