SECURITY ANNOUNCEMENT

CVE-2026-98991

23 October 2026

queued already. mnt_notify() looks at the state the mount has when the list is drained so a single entry per mount is enough. The move event for a mount that is unmounted under the same hold is lost. That's fine.

Introduced

6.15bf630c40164162ba1d3933c2f5e3397d083e0948

Fixed releases

6.18.57acbe9e4418e2ef7bef1a12e62e0e7d6145a15190

7.2.11702ff3fe499876e09c45558a05366d21a5bc41ab

7.3bd2feb7796b6585938a4241e7b7c4148a6f7b762

View source announcement ↗