CVE record · CVE-2026-97619

io_uring/rw: end write accounting from ->ki_complete

No CVSS scoreEPSS 0.0021 · 11th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:22 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected ea2e6286e3e89a115ae554e20ba9aec2b2e1ddff to before aa4a3bec32ffe20ba1044db8211140edf7637310 git
  • affected 89a410dbd0f159ddd308f19d6eb682fc753e4771 to before 16840e3478c72ebbf093c52cbdcd8a1f12fad692 git
  • affected b000145e9907809406d8164c3b2b8861d95aecd1 to before ed1cead97afb9c398bd7ab344a3c1ee34ab73af9 git
  • affected b000145e9907809406d8164c3b2b8861d95aecd1 to before 696459029f3b65c070c91b729478475582f1dcdf git
  • affected b000145e9907809406d8164c3b2b8861d95aecd1 to before cc580cee4dfa2ec9099c30ecbd4d804cbb996432 git
  • affected b000145e9907809406d8164c3b2b8861d95aecd1 to before 055d43a1233edbd80e558889258105ce63051bcd git
  • affected b000145e9907809406d8164c3b2b8861d95aecd1 to before 796aa0547557e63338657ed1c487906f9fac4c73 git
  • affected 2a853c206e553dd9c0a55c22858fd6a446d93e15 git
  • affected 5.10.165 to before 5.10.273 semver
  • affected 5.15.90 to before 5.15.224 semver
  • affected 6.0.3 to before 6.1 semver
Other versions: unaffected
Linux Linux
  • affected 6.1
  • unaffected before 6.1 semver
  • unaffected 5.10.273 to 5.10.*, inclusive semver
  • unaffected 5.15.224 to 5.15.*, inclusive semver
  • unaffected 6.6.160 to 6.6.*, inclusive semver
  • unaffected 6.12.112 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2.7 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-97619
CNA
Linux
Published
25 Sept 2026
Updated
30 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 11th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.