[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Tue Nov 3 21:01:32 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
dc8bca17 by Salvatore Bonaccorso at 2026-11-03T22:00:57+01:00
Merge Linux CVEs from kernel-sec
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -13,28 +13,35 @@ CVE-2026-99268 [io_uring: wake ring pollers for local task_work]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/b88902d8745a701d24275d012f0830e3628e2a22 (7.4-rc1)
CVE-2026-99267 [io_uring/napi: make stale entries time out after 60s]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/9c151648780d89e5446e5f89f3fa2e416c3bb911 (7.4-rc1)
CVE-2026-99266 [io_uring/zcrx: fix buffer offsets in areas above 4GB]
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/ab4536bf2e5617b04f2d9396f06393c7bbfb071d (7.4-rc1)
CVE-2026-99265 [io_uring/openclose: keep the lock in io_pipe_fixed()]
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/a3d7ee11289f657aa9af826d8f0844221292a27a (7.4-rc1)
CVE-2026-99264 [io_uring/net: don't retry recv on uncommitted buffers]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/8444de681a179e41a4eb92d5bbe770a0677074a6 (7.4-rc1)
CVE-2026-99263 [io_uring/poll: avoid retry wakeup loss when dropping ownership]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/937d38dcacd675dc0572d6c9b6743960df3128ed (7.4-rc1)
CVE-2026-99262 [io_uring/timeout: don't lose a cancel as io-wq arms a timeout]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/89f193dc3ef462059387e9691bf6af4b1808379a (7.4-rc1)
CVE-2026-99259 [soc/tegra: pmc: Fix uninitialised clock rate]
- linux 7.2.13-1
[trixie] - linux <not-affected> (Vulnerable code not present)
@@ -52,9 +59,13 @@ CVE-2026-99257 [gpio: shared: gracefully handle no-device lookup of shared GPIOs
NOTE: https://git.kernel.org/linus/cf73c3fc03c43a8a86fd487c62390b4744eff9ec (7.3)
CVE-2026-99261 [drm/amdgpu: correct reservation fence slots for userq per-vm BOs eviction]
- linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/50b24a20be8c0d35f89f7d5c39533f69d84fe48e (7.3-rc1)
CVE-2026-99260 [ntfs: fix resident conversion in ntfs_new_attr_flags]
- linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
NOTE: https://git.kernel.org/linus/7ed0028126b5a19f278183abbae2b3166d3ca9ac (7.3-rc1)
CVE-2026-99256 [dm cache: fix issue with background work locking]
- linux 7.2.13-1
@@ -63,17 +74,21 @@ CVE-2026-99256 [dm cache: fix issue with background work locking]
CVE-2026-99255 [io_uring/io-wq: don't hide a link from cancellations]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/436d48a2ed13112d2d27085325838e5bce6b4507 (7.4-rc1)
CVE-2026-99254 [io_uring: don't flood a cancelling task with task_work]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/22e643e61b9b6299b42ff7d88bab48bccada8a5d (7.4-rc1)
CVE-2026-99253 [io_uring/cancel: rearm local work wake up before sleep]
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/76a82c666abf155ad52d5f41043eac77dd3e41d8 (7.4-rc1)
CVE-2026-99252 [io_uring/mpscq: disable preemption while pushing]
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/68a95c3968895cd198f42baadb23e635fecc5a66 (7.4-rc1)
CVE-2026-99250 [printk: Postpone kthread startup]
- linux 7.2.13-1
[trixie] - linux 6.12.115-1
@@ -103,12 +118,15 @@ CVE-2026-99246 [tipc: protect node reset trace dump with node lock]
CVE-2026-99245 [KEYS: Fix key_reject_and_link() race with keyring restriction]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/0b157166e612b70f98a332b6c7be7eac6f8e9593 (7.4-rc1)
CVE-2026-99244 [pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/5c0985dd3c32fc2bbd0e8beaf13cf52cd97376a2 (7.4-rc1)
CVE-2026-99243 [io-wq: order the exit bit against worker creation task work]
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/0e5663856b69219ef2f02e04bac9f5c5be19718a (7.4-rc1)
CVE-2026-114419
- phodav <unfixed>
NOTE: https://gitlab.gnome.org/GNOME/phodav/-/merge_requests/35 (v3.1)
@@ -913,79 +931,104 @@ CVE-2026-99241 (In the Linux kernel, the following vulnerability has been resolv
NOTE: https://git.kernel.org/linus/0fecc393f2060e6bc25138df32cb923ec7071c6b (7.3-rc2)
CVE-2026-99240 (In the Linux kernel, the following vulnerability has been resolved: m ...)
- linux 7.2.14-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/610c4438fb66e06d9e693c0ad3b2c1be54c0d61f (7.4-rc1)
CVE-2026-99239 (In the Linux kernel, the following vulnerability has been resolved: B ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/86b55991d3cd690e73c5ef8d20b75ae4905b357a (7.4-rc1)
CVE-2026-99238 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/66877a312ae3c2c3d849e82e882f642ffd4ec3e2 (7.4-rc1)
CVE-2026-99237 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/5a6bd62f09147b49b31fd19d4eba122cb5f941a1 (7.4-rc1)
CVE-2026-99236 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/1fdc4164e488916402badddbb1f51e9380dabb91 (7.4-rc1)
CVE-2026-99235 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/d5c42664fc094899af9aae5300b27fe8fdb658ef (7.4-rc1)
CVE-2026-99234 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/91c14d6c13096091c56304120aaa26e479130b8b (7.4-rc1)
CVE-2026-99233 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/3403d9bb27ebc3572bd048620746b4414e073bf9 (7.4-rc1)
CVE-2026-99232 (In the Linux kernel, the following vulnerability has been resolved: t ...)
- linux 7.2.14-1
[trixie] - linux <not-affected> (Vulnerable code not present)
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/097fd0050089df17b032f2b852b9b65e548e342a (7.4-rc1)
CVE-2026-99231 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c254eec4364b9f4b4cbdce43be3fb4df5a651a70 (7.4-rc1)
CVE-2026-99230 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/4c83e39f4d1944d7146fd06094f2c8053238d55c (7.4-rc1)
CVE-2026-99229 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/34f5a664c34d3cb62f6bec7f4156754594a7d25b (7.4-rc1)
CVE-2026-99228 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/63c103279a95e82280092f2f4232e91e8117a252 (7.4-rc1)
CVE-2026-99227 (In the Linux kernel, the following vulnerability has been resolved: i ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
[bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/98787d3fa4e99564d2b2bc21255b21f670c450d0 (7.4-rc1)
CVE-2026-99226 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/51409aaa01f8602552c336009fd22b226b0cdf1d (7.4-rc1)
CVE-2026-99225 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/0a0ec45bf577a9b4d4960567f20d3877ef480de9 (7.4-rc1)
CVE-2026-99224 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/fced7238b7e80cf8aa688d5af976e4aa6e33c329 (7.4-rc1)
CVE-2026-99223 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/de891c73c1cf41ac8de12c07fa2c84d6a912ad0c (7.4-rc1)
CVE-2026-99222 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/925c84e3cc21caf09de92d9bcafab0147790debf (7.4-rc1)
CVE-2026-99221 (In the Linux kernel, the following vulnerability has been resolved: k ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/f92d0ccb05bf9089072cb067dda0dffd5394c4ef (7.4-rc1)
CVE-2026-99220 (In the Linux kernel, the following vulnerability has been resolved: a ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/9695df3b1db4ac4534274d38ee16e3b9b0bf910e (7.4-rc1)
CVE-2026-99219 (In the Linux kernel, the following vulnerability has been resolved: f ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/e1f339ff3b83857b93baf8b88186275a413d445e (7.4-rc1)
CVE-2026-99218 (In the Linux kernel, the following vulnerability has been resolved: c ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
+ NOTE: https://git.kernel.org/linus/61d58591aa0188bf2463e263962256316ff8b576 (7.4-rc1)
CVE-2026-99217 (In the Linux kernel, the following vulnerability has been resolved: f ...)
- linux 7.2.14-1
[trixie] - linux 6.12.115-1
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc8bca170d5913ade44f07159b094edbee300167
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/dc8bca170d5913ade44f07159b094edbee300167
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261103/8601d319/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list