← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99053

23 October 2026

that reference on every caller exit after the last node access, including transmission in LINK_SET. Keep the existing link lookup order and locking so concurrent link removal still takes the existing error paths.

Introduced

4.196a939f365bdb03a74b4617bdb4402fc08da088b9

Fixed releases

6.12.113f17e70206a1e763fcca2578a8db3c4eed0f843a9

6.18.571428c5f1d346a2e1ac9156713975a72246957009

6.6.160b60259d4047fbb735476c729dcf9306a038b6110

7.2.113c3b308ee6e25729a6cf09b69cdd0e093220d40b

7.317e73bae400f6a434dc006e3bee92c94cf781954

View source announcement ↗