[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso (@carnil) carnil at debian.org
Thu Jul 2 16:45:17 BST 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ebb1c661 by Salvatore Bonaccorso at 2026-07-02T17:44:40+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,11 @@
+CVE-2026-53358 [Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen()]
+	- linux 7.0.12-1
+	[trixie] - linux 6.12.94-1
+	NOTE: https://git.kernel.org/linus/8c8e620467a7b51562dbcefbd1f09f288d7d710d (7.1-rc6)
+CVE-2026-53357 [Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del()]
+	- linux 7.0.12-1
+	[trixie] - linux 6.12.94-1
+	NOTE: https://git.kernel.org/linus/ab1513597c6cf17cd1ad2a21e3b045421b48e022 (7.1-rc5)
 CVE-2026-5821 (The Image Optimizer plugin for WordPress is vulnerable to arbitrary fi ...)
 	NOT-FOR-US: WordPress plugin
 CVE-2026-5348 (The Academy LMS \u2013 WordPress LMS Plugin for Complete eLearning Sol ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebb1c661d04774745f6f8d59686936074485f2ae

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ebb1c661d04774745f6f8d59686936074485f2ae
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260702/d558067e/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list