SECURITY ANNOUNCEMENT

CVE-2026-98999

23 October 2026

list_del_init() calls in xe_bo_unpin_external() and xe_bo_unpin(). - Rebased on changes to previous patch. (cherry picked from commit ca58d36a1f93af586ee93b340c9f9fd81312cc01)

Introduced

6.844e694958b95395bd1c41508c88c8ca141bf9bd7

Fixed releases

6.18.573a11adcfd9a2de74d405bd3e8c4d7a1b328e4684

7.2.11b3eaff982839e5c22912d604cd8e7748cece8d63

7.3cf238c067eaae1cbfb00738e29219b9568d2313e

View source announcement ↗