CVE-2026-99255 is a vulnerability in the Linux kernel's io_uring subsystem related to cancellation handling of linked requests. A timing window exists during the freeing of linked requests where the next request in the link is temporarily invisible to cancellation logic, causing tasks to sleep indefinitely and potentially hang during exit. This can lead to threads or processes being unable to terminate properly.