SECURITY ANNOUNCEMENT

CVE-2026-99069

23 October 2026

As a result, the callbacks still invoked to_usb_device() on a device pointer belonging to a struct usb_interface, producing an invalid Use to_usb_interface() directly in the attribute handlers to obtain the

Introduced

6.11b20d6bf8014b2d6fcf65c150453d95a6276fd1fa

Fixed releases

6.12.113e44ec6b6d3c0b8ea089b589fa0cce49a4da66b89

6.18.57d738e51bf2c21921df351f536147178ae3cbd38b

7.2.112caae9d1977beea0a7914b3d86639262801fd116

7.3f321cc430c49b6c1be0d53f2ef19d8342d8029cc

View source announcement ↗