Incorrect Conversion between Numeric Types in Linux kernel - CVE-2026-52933
Published: June 25, 2026
Vulnerability identifier: #VU135444
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2026-52933
CWE-ID: CWE-681
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Linux Foundation
Affected software:
Linux kernel
Linux kernel
Detailed vulnerability description
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper type conversion in io_poll_get_ownership() in io_uring/poll.c when handling poll ownership checks. A local user can trigger the affected code path to cause a denial of service.
How to mitigate CVE-2026-52933
Install security update from vendor's repository.
Sources
- https://git.kernel.org/stable/c/326941b22806cbf2df1fbfe902b7908b368cce42
- https://git.kernel.org/stable/c/81bf96b0abbfa4cd47ea32e12596aed3855fb2f3
- https://git.kernel.org/stable/c/c6d191164dc81838d8dbf452a6000f68c558d1ae
- https://git.kernel.org/stable/c/cf522703d4f194991615763697ae25a3f9539763
- https://git.kernel.org/stable/c/ea0697129807d718037f618221037aa0660ee3c5
- https://git.kernel.org/stable/c/fc47043f3d9af3efa407665b47f8378ec691ba18