[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

Salvatore Bonaccorso (@carnil) carnil at debian.org
Mon Nov 2 19:23:00 GMT 2026 


Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
eaf1ad4b by Salvatore Bonaccorso at 2026-11-02T20:22:16+01:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,115 @@
+CVE-2026-99242 [ntfs: fix race between fallocate and mmap reads]
+	- linux 7.2.14-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/67aded1da114dc44808315f249bd9e7e440f799d (7.3-rc2)
+CVE-2026-99241 [ntfs: take invalidate_lock in ntfs_filemap_page_mkwrite()]
+	- linux 7.2.14-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/0fecc393f2060e6bc25138df32cb923ec7071c6b (7.3-rc2)
+CVE-2026-99240 [mm/damon/core: error damos_commit_quota_goal() for zero target_value]
+	- linux 7.2.14-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99239 [Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99238 [tracing: Hold trace_types_lock when updating modules in persistent instances]
+	- linux 7.2.14-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99237 [tracing: Hold trace_types_lock when resetting last boot data from readers]
+	- linux 7.2.14-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99236 [tracing: Reject incomplete event filter expressions]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99235 [tracing: Save the event file instead of the compatible histogram]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99234 [tracing: Unregister field variable histograms when the command fails]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99233 [tracing/histograms: Verify event_call identity when updating synth_event refcount]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99232 [tracing/syscalls: Use copy_from_user for the faultable syscall buffer]
+	- linux 7.2.14-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99231 [io_uring/waitid: own the request before clearing ->head]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99230 [io_uring/cmd: don't leave list poison in ->hash_node]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99229 [io_uring/wait: don't spin on a stuck overflow list]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99228 [io_uring/io-wq: don't lose the signal that ends work]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99227 [io_uring/waitid: prevent cancel reference wrap]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99226 [keys: Avoid the owner account dereference in named keyring lookup]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99225 [keys: Check the authorization payload in process keyring searches]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99224 [keys: Protect the type name while describing a key]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99223 [keys: make keyring indexes independent of kernel addresses]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99222 [keys: Protect the read method check against type removal]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99221 [keys/trusted_keys: return immediately after TPM unseal failure]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99220 [asymmetric_keys: reject trust keys without IDs]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99219 [ftrace: Initialize modname and offset in print_rec()]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99218 [coredump: hold RCU while releasing parked threads]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
+CVE-2026-99217 [fork: release the files of a failed fork after sched_cancel_fork()]
+	- linux 7.2.14-1
+	[trixie] - linux 6.12.115-1
+	NOTE: https://git.kernel.org/linus/
 CVE-2026-65059
 	- libfurl-perl <unfixed>
 	NOTE: https://lists.security.metacpan.org/cve-announce/msg/44834406/



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaf1ad4b2c752e447277678bfc5224a9e7643525

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaf1ad4b2c752e447277678bfc5224a9e7643525
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261102/36ea7650/attachment-0001.htm>

More information about the debian-security-tracker-commits mailing list