SECURITY ANNOUNCEMENT

CVE-2026-99025

23 October 2026

the cursor only moves forward. The table grows on insert and shrinks only on flush, so the walk is bounded by the largest flow count the datapath has held. The softirq backlog the callback used to absorb has

Introduced

3.1663e7959c4b9bd6f791061c460a22d9ee32ae2240

Fixed releases

6.12.113b872de585edff534056c65ba30970b68499fca14

6.18.5755f12552b00a34ca7ab5cf2d2b5ed02f8f06a965

6.6.160c995c52eba1926a5e82823fa5573a6f1b1010e5d

7.2.1180db24f3c16fdeef85460d9d66a4aae7a9cb92b4

7.3aaaaf87ea99b8766c9a8aa0e71aa42e6bc8a5320

View source announcement ↗