SECURITY ANNOUNCEMENT

CVE-2026-99051

23 October 2026

They also use fsverity_info::inode to do the key comparison. Fix this by RCU-delaying the freeing of 'struct fsverity_info' after it's been removed from the rhashtable.

Introduced

7.0f77f281b61183a5c0b87e6a4d101c70bd32c1c79

Fixed releases

7.2.11fa84f091a8e7fc46fd29834496fab9739dd4c8dc

7.3e58c3805ed325fe2d4ae2dd467c0486cc860b733

View source announcement ↗