← CVE announcements

SECURITY ANNOUNCEMENT

CVE-2026-99071

23 October 2026

legitimately return -EMSGSIZE, so the warning does not prove a sizing bug. Remove the warning. The existing error path still frees the skb and reports the error to listeners.

Introduced

5.12680aea08e78c003292415518ad270bc20f9c80b1

Fixed releases

6.12.11378a1cf5c54b2f795c81fedb530755a8d01cc84f0

6.18.577dfa7ca97f3ac46353edd4cc44f7733758e4535b

6.6.160088ba80eef85fa7a5ad8f9e7c82b403c99242b56

7.2.11221ef5e1e44a044790f0f54e6aa237883f475a4d

7.3e02a5b6588161673ef75a4bc5cdfb62bd493374d

View source announcement ↗