CVE-2026-46315

In the Linux kernel, the following vulnerability has been resolved: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields in struct io_waitid::info and later copies them to userspace siginfo. The prep path initializes the request arguments, but it does not initialize info itself. If the wait operation completes without reporting a child event, the common wait code can return without writing wo_info. In that case io_waitid_finish() still copies iw->info to userspace, exposing stale bytes from the reused io_kiocb command storage. Clear the result storage during prep so the io_uring path matches the regular waitid syscall, which uses a zero-initialized struct waitid_info.

• https://git.kernel.org/stable/c/4d2a0de611ab60d02fc768ae0cd5918b16bd5474Patch
• https://git.kernel.org/stable/c/93d93f5f8da791e98159795c6ef683f45bd95d13Patch
• https://git.kernel.org/stable/c/954518e5a4a5efc5033253f6e36fc7b9f98363a3Patch
• https://git.kernel.org/stable/c/b737c6612c60c23b40a9f31749b99e6f61943847Patch

Published

Jun 9, 2026

Last Modified

Jul 23, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4631Cockpit's remote login feature passes user-supplied hostname…9.8
• CVE-2026-46310In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46311In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-46312In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46313In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46314In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46316In the Linux kernel, the following vulnerability has been re…9.3
• CVE-2026-46317In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-46318In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-46319In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-4632A weakness has been identified in itsourcecode Online Enroll…7.3
• CVE-2026-46320In the Linux kernel, the following vulnerability has been re…7.4