SECURITY ANNOUNCEMENT

CVE-2026-99054

23 October 2026

v3 supersedes the narrower in-thread diff Tung Quang Nguyen posted on 2026-09-23. It keeps his teardown order and adds the lookup refusal and the empty-idr unlock.

Introduced

3.11c5fa7b3cf3cb22e4ac60485fc2dc187fe012910f

Fixed releases

6.12.113da9c16568bc79140a54c1f5fcf07a0305df47b37

6.18.570af8780bdfdfc91fb9127bddb9c48fab67dc9d9e

6.6.1607f796bb3b440d7f1b14c0e3b520462eb34f553af

7.2.11fb717c536af2aafeca520ff11d1e0f25f7ab8fa9

7.33acdd44385bc7e2e57605e073691ce69cc5a960d

View source announcement ↗