A vulnerability in the Linux kernel's io_uring subsystem was fixed by ensuring the lock is held during the io_pipe_fixed() operation. The flaw allowed a race condition where slots in the fixed file table could be incorrectly removed due to the lock being dropped prematurely, potentially affecting unrelated files.