CVE-2026-53321 Details
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum amount of time that napi is allowed to poll if no events are found, which can lead to kernel complaints on a task being stuck as there's no conditional rescheduling done within that loop. Just cap it to 10 msec in total, that's already way above any kind of sane value that will reap any benefits, yet low enough that it's nowhere near being able to trigger preemption complaints.
A vulnerability in the Linux kernel's io_uring implementation allows NAPI (New API) to poll without a maximum time limit when no events are detected. This can cause the kernel to report a task as stuck, as there is no conditional rescheduling within that polling loop. The issue has been addressed by introducing a cap, limiting the busy polling duration to 10 milliseconds. This change ensures that the polling time is reasonable without triggering preemption-related complaints.
Users can update to the latest version of the Linux kernel where this vulnerability has been addressed. Instructions for downloading the patched version are available on the Linux kernel official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/39767f944a8c9e696566c37ad5b20131406c4b8d | kernel.org | Patch |
| https://git.kernel.org/stable/c/cb3af525f8dfb8930f0c123e5755fa967a12d5c1 | kernel.org | Patch |
| https://git.kernel.org/stable/c/df8599ee18c0e5fe343ffe0b4c379636b8bb839a | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.9, < 6.18.33 >= 6.19, < 7.0.10 7.1 rc1 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 6, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | New CVE Received | kernel.org |