SECURITY ANNOUNCEMENT

CVE-2026-99040

23 October 2026

reached the same ordering and every add_key() call failed with -EPERM. The issue was found by manual concurrency analysis assisted by AI-based analysis and independently verified with a QEMU reproducer and kernel

Introduced

4.75ac7eace2d00eab5ae0e9fdee63e38aee6001f7c

Fixed releases

6.12.113f99399b48e3edd6851fac34cd329bab9f1f33baf

6.18.5711516a0c402a6c1fa52254aa70d8d65fb921e59e

6.6.160305f1828b871dd46bf41addeb6f11d2c162dcb25

7.2.11da0b595d8e6e2dd798f6e34e09dc51a13b888514

7.3dd3ea3fcba7c75493760cdbccd35f029597e8d5e

View source announcement ↗