SECURITY ANNOUNCEMENT

CVE-2026-99036

23 October 2026

Note that this is not a security bug because only root can trigger it and the commonly used tools such as lvm or cryptsetup do not call the ioctls concurrently, so that they can't trigger it acceidentally.

Introduced

Unavailable in source

Fixed releases

6.12.1132c96d1a8324e7736e0f8a5790ecf39d36c2c4a82

6.18.57e3bf232c913b7e0103d323f15e6342d37cb1b357

6.6.160281f68d6cf8acb2547ebf0a849b8beae8fb0ec3c

7.2.11301691c32b8ad023e3316d5dbb6a8cf52d47b0dc

7.3c9417c1c5269e2bd0570fbe53e4ec03a8d31f008

View source announcement ↗