[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
295f4461 by Salvatore Bonaccorso at 2026-05-05T19:30:16+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,24 @@
+CVE-2026-43059 [Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers]
+	- linux 6.19.10-1
+	[trixie] - linux 6.12.85-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	[bullseye] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/17f89341cb4281d1da0e2fb0de5406ab7c4e25ef (7.0-rc5)
+CVE-2026-43062 [Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp()]
+	- linux 6.19.10-1
+	[trixie] - linux 6.12.85-1
+	[bookworm] - linux 6.1.170-1
+	NOTE: https://git.kernel.org/linus/15145675690cab2de1056e7ed68e59cbd0452529 (7.0-rc5)
+CVE-2026-43061 [serial: 8250: Fix TX deadlock when using DMA]
+	- linux 6.19.10-1
+	[trixie] - linux 6.12.85-1
+	[bookworm] - linux 6.1.170-1
+	NOTE: https://git.kernel.org/linus/a424a34b8faddf97b5af41689087e7a230f79ba7 (7.0-rc5)
+CVE-2026-43060 [netfilter: nft_ct: drop pending enqueued packets on removal]
+	- linux 6.19.10-1
+	[trixie] - linux 6.12.85-1
+	[bookworm] - linux 6.1.170-1
+	NOTE: https://git.kernel.org/linus/36eae0956f659e48d5366d9b083d9417f3263ddc (7.0-rc5)
 CVE-2026-6502
 	- qemu 1:11.0.0+ds-2
 	[bookworm] - qemu <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/295f4461a5fe3e26f86c3af5f34705edade35682

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/295f4461a5fe3e26f86c3af5f34705edade35682
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260505/17e9cecd/attachment.htm>