SECURITY ANNOUNCEMENT

CVE-2026-99086

23 October 2026

through lowmem_page_address(NULL). Snapshot the validated superblock in the constructor and refuse to resume if any of the fields that describe the on-disk geometry changed.

Introduced

6.18.1638625191f32f77a9d5fc7cc15f4f9b78768bfb33

Fixed releases

6.18.58454b67fcc28c18502e47dfb9f067b04c28628ada

7.2.12e9ec5cbbaf4dd3a02ae3d81719f4fcb9b609aa8e

7.3fc79aeb86a2c244c1f1894e2d8f2966fe2b60fa2

View source announcement ↗