In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum… (CVE-2026-53321)
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum amount of time that napi is allowed to poll if no events are found, which can lead to kernel complaints on a task being stuck as there's no conditional rescheduling done within that loop. Just cap it to 10 msec in total, that's already way above any kind of sane value that will reap any benefits, yet low enough that it's nowhere near being able to trigger preemption complaints.
AI Analysis
Technical Summary
The Linux kernel's io_uring napi subsystem previously lacked a cap on the maximum duration that napi could busy poll when no events were found. This unbounded polling could cause the kernel to report tasks as stuck due to the absence of conditional rescheduling within the polling loop. The vulnerability was resolved by introducing a cap of 10 milliseconds on busy polling time, which is sufficiently long to maintain performance benefits but short enough to prevent preemption complaints.
Potential Impact
This vulnerability does not affect confidentiality or integrity but can impact availability by causing kernel complaints about tasks being stuck due to excessive busy polling without rescheduling. This may degrade system responsiveness or stability under certain workloads.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to cap the busy polling time to 10 milliseconds. Users should apply the official kernel update that includes this change to mitigate the issue. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum… (CVE-2026-53321)
Description
In the Linux kernel, the following vulnerability has been resolved: io_uring/napi: cap busy_poll_to 10 msec Currently there's no cap on the maximum amount of time that napi is allowed to poll if no events are found, which can lead to kernel complaints on a task being stuck as there's no conditional rescheduling done within that loop. Just cap it to 10 msec in total, that's already way above any kind of sane value that will reap any benefits, yet low enough that it's nowhere near being able to trigger preemption complaints.
CVSS v3.1
Score 5.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's io_uring napi subsystem previously lacked a cap on the maximum duration that napi could busy poll when no events were found. This unbounded polling could cause the kernel to report tasks as stuck due to the absence of conditional rescheduling within the polling loop. The vulnerability was resolved by introducing a cap of 10 milliseconds on busy polling time, which is sufficiently long to maintain performance benefits but short enough to prevent preemption complaints.
Potential Impact
This vulnerability does not affect confidentiality or integrity but can impact availability by causing kernel complaints about tasks being stuck due to excessive busy polling without rescheduling. This may degrade system responsiveness or stability under certain workloads.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to cap the busy polling time to 10 milliseconds. Users should apply the official kernel update that includes this change to mitigate the issue. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-g22f-3wv9-pgvj
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-53321"]
- Ecosystems
- []
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6a4c33fd27e9c797195f27d6
Added to database: 07/06/2026, 23:02:21 UTC
Last enriched: 07/06/2026, 23:08:55 UTC
Last updated: 07/31/2026, 19:24:47 UTC
Views: 8
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.