SECURITY ANNOUNCEMENT

CVE-2026-99039

23 October 2026

Replace wait_for_completion_timeout() with wait_for_completion() in memstick_set_rw_addr() and memstick_alloc_card() so that the card structure is never freed while an asynchronous request is in flight.

Introduced

2.6.25baf8532a147d5b76681ce040e2c8f25a3f0e718d

Fixed releases

6.12.113810580cf60edc75c9891c2de3225e4cda78e4d9f

6.18.57f2795c50144d528dabc2cf2fd53c0f0c63a823a1

6.6.160c3ab92542475d59ae685cbb294e70ca4d0ba38e9

7.2.113af81770e2011c6ac7bb597a4af2e4f3591f928c

7.3aa0a37b5024d921e96ac4f8f487c8bfbf1f1a582

View source announcement ↗