CVE-2026-99130 is a Linux kernel vulnerability in the io_uring subsystem where an exiting task can spin indefinitely on local work it cannot run. This occurs when a disabled io_uring ring is enabled by another task, causing the exiting task to burn CPU cycles or potentially panic the kernel if configured. The issue arises because the exiting task assumes it is the submitter of the ring and refuses to sleep while local work is pending, but this assumption is invalid for disabled rings enabled by other tasks.