CVE-2026-99185

The Linux kernel contains a race condition in the FireWire core 's split transaction handling. Specifically, both fw_core_handle_response() and split_transaction_timeout_callback() could simultaneously manipulate the same transaction entry in the pending transaction list if timer_delete() returns...