SECURITY ANNOUNCEMENT

CVE-2026-99035

23 October 2026

completed without a kernel diagnostic after this change. Call cancel_delayed_work_sync() after mmc_remove_host() has stopped new requests and before the driver releases the host resources.

Introduced

4.2208489032bdd8d4a7de50f3057c175058f271956

Fixed releases

6.12.113f37e0367ad6f2147a0b37564b442b7a25bec0d23

6.18.5746e75703ca3f00fb8c935b3ce35b90836e34e8af

6.6.1609e799f25c420e759641eb25102967ea091fc758f

7.2.11edef1355224c0799a502a46b71d3649fa0dd218e

7.3b38af5386a74416e898955443f2e26547b358cb2

View source announcement ↗