SECURITY ANNOUNCEMENT

CVE-2026-99026

23 October 2026

forced on by userspace. Free the original skb on the no-port path while leaving the existing drop accounting intact. Discovered by Sashiko during review of previous commit.

Introduced

3.65fc889911a99043a97da1daa0d010ad72cbc3042

Fixed releases

6.18.57961563117626f4681623077ec0cfd86f86da0d49

7.2.11f34b1bcac4581a5bd3daf9eff90f175e736b54aa

7.3489114c9ecae44e523361a4b3e610ee5ebd9189c

View source announcement ↗