A vulnerability in the Linux kernel's io_uring/napi subsystem causes stale entries to never time out due to an incorrect timeout calculation. The timeout intended to drop inactive NAPI IDs after 60 seconds is miscalculated, resulting in entries persisting indefinitely and causing unnecessary polling.