CVE-2026-53321

CVE-2026-53321

Medium · published June 27, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
5.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

io_uring/napi: cap busy_poll_to 10 msec

Currently there's no cap on the maximum amount of time that napi is

allowed to poll if no events are found, which can lead to kernel

complaints on a task being stuck as there's no conditional rescheduling

done within that loop.

Just cap it to 10 msec in total, that's already way above any kind of

sane value that will reap any benefits, yet low enough that it's

nowhere near being able to trigger preemption complaints.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.0th percentile
Published
2026-06-27T00:17Z
Affected products (3)
ProductVersionsFixed in
linux/linux_kernel≥ 6.9, < 6.18.336.18.33
linux/linux_kernel≥ 6.19, < 7.0.107.0.10
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 26 JUN 19:41Z
    io_uring/napi: cap busy_poll_to 10 msec
    cvelistv5