← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99008

23 October 2026

rfcomm_dev_destruct() already copes with a NULL dev->tty_dev. Add the same check to rfcomm_dev_shutdown(), so the tty device is only moved when it was actually registered.

Introduced

3.12cad348a17e170451ea8688b532a6ca3e98c63b60

Fixed releases

6.12.1133fd5164bdb04635caa7942ddb554b0ec699a9433

6.18.57a661f401f83b8462f2d424e0a1a72b7681e92ea2

6.6.160d5c372ad03330f02962d4860df4d355ab25487df

7.2.11d0aef0b0374678153244f162df507106d728af39

7.308e90633377f1b2567ab5ad6810b74c552246a07

View source announcement ↗