CVE-2026-99264 is a vulnerability in the Linux kernel's io_uring/net subsystem related to how receive operations retry on uncommitted buffers. The issue involves improper handling of partial buffer commits during retries, which can cause data corruption by allowing multiple requests to write to the same memory buffers concurrently. The fix changes the behavior to complete the request with the data received so far instead of retrying, and MSG_WAITALL is no longer honored for incremental or multi-buffer bundles.