This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-71149
kernel: io_uring/poll: correctly handle io_poll_add() return value on update
Published Jan 23, 2026
CVSS 3.1 · 5.5 Medium
EPSS n/a
KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Analysis
Affected Products
-
CVE record
No data
-
NVD configurations
No data
-
Red Hat packages
No data
-
OpenCVE enrichment
No data
No data.
No data.
No data.
No data available yet.
Remediation
Tracking
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-4476-1 | linux-6.1 security update |
 Debian DSA |
DSA-6126-1 | linux security update |
| Debian DSA |
DSA-6127-1 | linux security update |
 Ubuntu USN |
USN-8177-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8179-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8177-2 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-8183-1 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-8184-1 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-8179-2 | Linux kernel (FIPS) vulnerabilities |
| Ubuntu USN |
USN-8185-1 | Linux kernel (NVIDIA) vulnerabilities |
| Ubuntu USN |
USN-8179-3 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8183-2 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8203-1 | Linux kernel (Oracle) vulnerabilities |
| Ubuntu USN |
USN-8204-1 | Linux kernel (Raspberry Pi Real-time) vulnerabilities |
| Ubuntu USN |
USN-8185-2 | Linux kernel (Low Latency NVIDIA) vulnerabilities |
| Ubuntu USN |
USN-8179-4 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-8245-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-8257-1 | Linux kernel (Raspberry Pi) vulnerabilities |
| Ubuntu USN |
USN-8258-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-8260-1 | Linux kernel (Azure FIPS) vulnerabilities |
| Ubuntu USN |
USN-8261-1 | Linux kernel (Xilinx) vulnerabilities |
| Ubuntu USN |
USN-8265-1 | Linux kernel (NVIDIA Tegra) vulnerabilities |
Metrics
No CVSS v4.0
Attack Vector Local
Attack Complexity Low
Privileges Required Low
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
User Interaction None
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
No EPSS score available.
Key SSVC decision points have not yet been added.
References
History
May 2, 2026 7:30 AM
Weaknesses updated. Affected versions updated. Affected vendors updated. References updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | NVD-CWE-noinfo | |
| CPEs | ||
| Vendors & Products |
Linux
Linux linux Kernel |
|
| References |
|
|
May 2, 2026 6:45 AM
Description updated. Title updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() return value on update When the core of io_uring was updated to handle completions consistently and with fixed return codes, the POLL_REMOVE opcode with updates got slightly broken. If a POLL_ADD is pending and then POLL_REMOVE is used to update the events of that request, if that update causes the POLL_ADD to now trigger, then that completion is lost and a CQE is never posted. Additionally, ensure that if an update does cause an existing POLL_ADD to complete, that the completion value isn't always overwritten with -ECANCELED. For that case, whatever io_poll_add() set the value to should just be retained. | This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. |
| Title | io_uring/poll: correctly handle io_poll_add() return value on update | kernel: io_uring/poll: correctly handle io_poll_add() return value on update |
Feb 26, 2026 8:30 PM
Weaknesses updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | NVD-CWE-noinfo |
Jan 24, 2026 12:15 AM
Added references. Scoring metrics updated
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Jan 23, 2026 2:30 PM
Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references
View changes
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: io_uring/poll: correctly handle io_poll_add() return value on update When the core of io_uring was updated to handle completions consistently and with fixed return codes, the POLL_REMOVE opcode with updates got slightly broken. If a POLL_ADD is pending and then POLL_REMOVE is used to update the events of that request, if that update causes the POLL_ADD to now trigger, then that completion is lost and a CQE is never posted. Additionally, ensure that if an update does cause an existing POLL_ADD to complete, that the completion value isn't always overwritten with -ECANCELED. For that case, whatever io_poll_add() set the value to should just be retained. | |
| Title | io_uring/poll: correctly handle io_poll_add() return value on update | |
| First Time appeared |
Linux
Linux linux Kernel |
|
| CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Linux
Linux linux Kernel |
|
| References |
|
|
Subscriptions
No data.
Weaknesses
No weakness.
