SECURITY ANNOUNCEMENT

CVE-2026-99006

23 October 2026

To amend this problem, ensure that relocation cleanup uses the original exec object count, excluding the VMAs appended by the (cherry picked from commit 2a0158925fb943c7ba8f3216e2734952128defc9)

Introduced

5.108e4ba491b0ba6fef69270d3c4e48fc517096ef41

Fixed releases

6.12.113b1c357131fc467c579f65e9a9d1fdc1a6273ae1d

6.18.57152fb5083b9333a1cb8629572f9e0f276a404ba6

6.6.16024c04e80c35ff36947366f6deafddb522eea080c

7.2.1172d5cbb10d4916a3f8ef9da516c5c0634aca8439

7.3ebe162db655881a38de43301151ff7ac940602b5

View source announcement ↗