SECURITY ANNOUNCEMENT

CVE-2026-99055

23 October 2026

DMABUF and IOURING net_iov types while leaving page-backed checks unchanged. With the guard, the same queue copied the readable prefix, returned a 4096-byte skip hint, and completed without a fault.

Introduced

6.129f6b619edf2e85746f261b42ae8f818a59d126f7

Fixed releases

6.12.113563d3564513496b9ce3b3ba7a5154427554d0f06

6.18.571c7463ac0e99cc91c4eecc1b69a740ef1a619932

7.2.113aa6f536a95eb0617c313ae2eb76fdfa85331f85

7.38b1f0af1fd5fd113432233ed8a3862ee7c30a84f

View source announcement ↗