CVE-2026-99254 is a Linux kernel vulnerability in the io_uring subsystem where cancelling tasks can be flooded with repeated task_work callbacks. This occurs because the cancellation process queues callbacks repeatedly without removing nodes properly, causing a task to consume excessive CPU and work item resources. The issue can cause tasks to become stuck for minutes, including during execve() calls, without requiring any privileges.