SECURITY ANNOUNCEMENT

CVE-2026-99057

23 October 2026

to it as frags, and the backend decides how many slots it sends. Put the skb back on tmpq before taking the error path, like the xennet_set_skb_gso() failure just above it does.

Introduced

4.19ad4f15dc2c70b1de5e0a64d27335962fbc9cf71c

Fixed releases

6.12.11399011a11c97340ef7290df7dc199305c73fab2f2

6.18.57086944c1c2cbb683543bc3ff08637847b03c8009

6.6.1605051df031144753d3e18862514969146b601d089

7.2.1184e3ea6502b5f14ce8d499d0b6e0e38386274cf0

7.393ccaf1c26e2133396173b76a071e59024daa622

View source announcement ↗