SECURITY ANNOUNCEMENT

CVE-2026-99024

23 October 2026

mutexes and dereferences a NULL pointer. Fix it by moving both tee_device_register() calls down to the point where all of struct optee is set up.

Introduced

4.124fb0a5eb364d239722e745c02aef0dbd4e0f1ad2

6.12.1138cae1605be8a047ae3a62df07b9474d61462c4f6

6.18.57681adbc9c7a820279582a295e183fa6a1d1b4ec4

6.6.160262062c01f5a817104c88bf6eacb7c6ffdc7018d

7.2.112f7240f0a6fd83df274fc0a2abf0609b4e6bd388

7.3c108feca0a096f8db25d1b69130035025e9e936d