CVE-2026-80713 is a vulnerability in Linux Kernel
Published on August 28, 2026
io_uring: preserve task restrictions across exec
In the Linux kernel, the following vulnerability has been resolved:
io_uring: preserve task restrictions across exec
Per-task restrictions apply to all rings created by a task. Once
installed, they should not be dropped across exec.
For a task that has used io_uring, the exec cancellation path calls
__io_uring_free(). This frees both the task context and the per-task
restriction, so a ring created after exec is unrestricted.
Split task context cleanup into io_uring_free_tctx(), and use it from
the exec cancellation path. Keep __io_uring_free() for final task
cleanup, where both the context and restriction are released.
Products Associated with CVE-2026-80713
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version ed82f35b926b2e505c14b7006473614b8f58b4f4 and below fcef9325afeecced693a7438e975e4a3f8e2716f is affected.
- Version ed82f35b926b2e505c14b7006473614b8f58b4f4 and below bc0e8faf90e776a2f1f3967a04e8091e6bdb4977 is affected.
- Version 7.0 is affected.
- Before 7.0 is unaffected.
- Version 7.1.8, <= 7.1.* is unaffected.
- Version 7.2, <= * is unaffected.