← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99017

23 October 2026

remains enabled, and sysfs reports "Not affected" on a vulnerable Select RISCV_ALTERNATIVE_EARLY from ERRATA_THEAD_GHOSTWRITE so that the vulnerability is detected in the early boot stage and the default

Introduced

6.144bf97069239bcfca9840936313c7ac35a6e04488

Fixed releases

6.18.57fa465a7819ecbe5801b78c088d3cadaf2664b8ca

7.2.117fee577a2fa78b9a76da015beec1ccf978746ebb

7.3298510bbc7c3017c0faf481c6ea66f1065b657b4

View source announcement ↗