SECURITY ANNOUNCEMENT

CVE-2026-99038

23 October 2026

The host_mutex drain in drv_remove is removed: handle_req always leaves host->req NULL when it finishes, so the drain never had anything to do, and it would now race with handle_req.

Introduced

3.1699451dceeb5fdd789f0a2eeb3ee029e80d2ccc40

Fixed releases

6.12.1135b599e28aeb3684772aef64f46cc6f25f4c67128

6.18.57d7e811c3a49cd5cff529c157df886719e09370ec

6.6.160f2c181e1d58e911804e14543b2f1cc6b23a0d4d6

7.2.115616da0f92339328fa1472876df51555e15ad340

7.3c96ca94425b076dc398d929366e378d1e22ec794

View source announcement ↗