← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99014

23 October 2026

address before releasing the lock and use the copy for the existing RCU-protected connection lookup. Release the mutex before sending or waiting for commands, preserving the lookup and completion ordering.

Introduced

6.6.28de3c85d321bfb85b7742a6cfab95d680da3e26b1

Fixed releases

6.12.114119ba8070b3f112dd36c897f4f70ea5bb7d370b8

6.18.577db33b36213a3a1a40940c009ddac30670b55922

6.6.160f01cbddfb4273fcc9a786d13b0a2525029023605

7.2.11762850c203fab1190ad6a3de41cd51920b22236d

7.39af12272061d206af8bc3e40215cb694421ab73a

View source announcement ↗