[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f55b421 by Salvatore Bonaccorso at 2026-10-14T20:19:37+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,81 @@
+CVE-2026-98397 [platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown]
+	- linux 7.2.7-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/144113b0a70fa18033a747ee5db6803308f7688c (7.3-rc3)
+CVE-2026-98396 [powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()]
+	- linux 7.2.7-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/c2549d749539487239475fbc8c614a1f9244d655 (7.3-rc3)
+CVE-2026-98395 [powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit]
+	- linux 7.2.7-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/63a7531ca31f9f097d9cc1cc3fe86ae683cdabdd (7.3-rc3)
+CVE-2026-98392 [Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/3dd1b41f96aad08444be1b7626c89de2b9f2abd4 (7.3-rc3)
+CVE-2026-98391 [drm/xe: Guard page-fault worker with runtime PM check]
+	- linux 7.2.7-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/20fce5b34b21a995839743b4917a1edd2fd503ba (7.3-rc3)
+CVE-2026-98390 [x86/amd_node: Avoid divide by zero on virtualized systems]
+	- linux 7.2.7-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/72bd92bd8190d7869ecb462649ca40f297822a33 (7.3-rc3)
+CVE-2026-98404 [drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/94579f24e2b526a04eb41050af0ba018c6f528e7 (7.3-rc2)
+CVE-2026-98403 [s390/boot: Avoid IPL parameter append past command line]
+	- linux 7.2.7-1
+	NOTE: https://git.kernel.org/linus/d76181dfabdaa720703167393704efacba343442 (7.3-rc2)
+CVE-2026-98402 [net: icmp: avoid invalid transport header access in icmp_send tracepoint]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/7fcc2fe39fed1cb98a7374a113ff3800e8f9af80 (7.3-rc2)
+CVE-2026-98401 [net: iptunnel: fix stale transport header during tunnel decapsulation]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/28a57fb2c5df4deb42a06e52fd36c14b37aa0034 (7.3-rc2)
+CVE-2026-98400 [s390/ipl: Fix NULL deref in kdump without re-IPL parm block]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/7f918871112e8e7c581e99eb8e545af4e59c8367 (7.3-rc2)
+CVE-2026-98399 [s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/37f61b71cbc0caefc01022a19ee56fc2510e2e6e (7.3-rc2)
+CVE-2026-98398 [locking/lockdep: Invalidate stale class_cache entries for zapped classes]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/02c6be7d675b21d81f0ba3a524346850a8c0e3bf (7.3-rc2)
+CVE-2026-98394 [af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/6e5ee08eb5858d175da6768d75d163817b6a9d4a (7.3-rc3)
+CVE-2026-98393 [net: ipv4: Fix UDP length overflow with PMTU discover and big MTU]
+	- linux 7.2.7-1
+	NOTE: https://git.kernel.org/linus/b83641e0ab8b20eefcc4cdc5a059f897375291a2 (7.3-rc3)
+CVE-2026-98389 [drm/amdgpu: skip gfx switch_power_profile during GPU reset]
+	- linux 7.2.7-1
+	NOTE: https://git.kernel.org/linus/1f1d43418d61c8511779e0f63a954a78b9433b43 (7.3-rc3)
+CVE-2026-98388 [exec: do_close_on_exec() before taking exec_update_lock]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/e780259b54e618ceb4763fbc21314acf3565e813 (7.3-rc3)
+CVE-2026-98387 [s390/crypto: Fix skcipher_walk return code handling in aes_s390]
+	- linux 7.2.7-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/15fa028589c3a2545f0bff355eff06d5844196bf (7.3-rc3)
+CVE-2026-98386 [scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot]
+	- linux 7.2.7-1
+	NOTE: https://git.kernel.org/linus/626e44f3d8a924a97a3848a9fd45833947e081e9 (7.3-rc1)
 CVE-2026-107350
 	- pgbouncer 1.26.1-1
 	NOTE: Fixed by: https://github.com/pgbouncer/pgbouncer/commit/55233b2124264c0617dc68686473db7124de1620 (pgbouncer_1_26_1)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55b4215fe7ba8f4caa2777ff4e444bd5f3e773

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55b4215fe7ba8f4caa2777ff4e444bd5f3e773
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/fe2b098d/attachment.htm>