[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Fri Oct 23 16:47:17 BST 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
e3a74ca2 by Salvatore Bonaccorso at 2026-10-23T17:44:36+02:00
Merge Linux CVEs from kernel-sec
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,123 @@
+CVE-2026-98896 [thunderbolt: Keep the domain reference while processing hotplug]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/138ec65b2c761f065b19d115aed2b8246fc272f5 (7.2-rc1)
+CVE-2026-98892 [firmware: arm_scmi: Validate BASE_ERROR_EVENT payload size]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/56e7e64cdd0e7209a58c8ec66028d63387402919 (7.2-rc1)
+CVE-2026-98891 [wifi: mac80211: validate deauth frame length before reason access]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/4a360c6e18dfa9d70006c7247a6a8cc8dfe0d60f (7.2-rc4)
+CVE-2026-98890 [wifi: libertas: reject short monitor TX frames]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/13ff543e0b2c713aedeaadadde686686e949dc78 (7.2-rc4)
+CVE-2026-98888 [arm64: kprobes: Allow reentering kprobes while single-stepping]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/23f851ac0078a908bf3422d6467ebc1db5828c46 (7.2-rc5)
+CVE-2026-98887 [wifi: mac80211_hwsim: reject undersized HWSIM_ATTR_TX_INFO]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/3dc723ac78a6e4fa0fd49e27e487ed319da40a9f (7.2-rc5)
+CVE-2026-98886 [drm/gma500: return errors from Oaktrail HDMI I2C reads]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/9b5ce5c496efd20c1c662cedba88465d39ec1f93 (7.2-rc5)
+CVE-2026-98885 [ima: return error early if file xattr cannot be changed]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/69fc6474236d9edda6983623e4282f2bdfd8e3d8 (7.2-rc1)
+CVE-2026-98881 [net: bridge: remove stale rcu_barrier() in br_multicast_dev_del()]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/25ae123db10ba9ab890b56bcdb0a4363aee8529a (7.2-rc1)
+CVE-2026-98879 [isofs: handle set_blocksize failures]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/25ef4c4d9f0e96fb89c0ae0d7127c3f12a31bc32 (7.2-rc1)
+CVE-2026-98877 [irqchip/gic-v4: Don't advertise VLPIs if no ITS is probed]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/e61654fbc3bc5d07ec9fafe29f33e19b2b5d0fd5 (7.2-rc1)
+CVE-2026-98873 [netfilter: nf_conntrack_expect: zero at allocation time]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/241ccd2fed9051db443aadce248fc0ab30f55e97 (7.2-rc2)
+CVE-2026-98872 [freevxfs: don't BUG() on unknown typed-extent type]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/704d48d81dc41470e108811c32c577ada66192d4 (7.2-rc2)
+CVE-2026-98871 [crypto: ccp - Fix possible deadlock in SEV init failure path]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/b0e7ec0dab242c5e480121ba12400d0513e37ca2 (7.3-rc1)
+CVE-2026-98870 [ksmbd: remove stale channels from all sessions on teardown]
+ - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/b10665730fbf6b5e45fe422badcbbc3f0df96ef5 (7.2-rc4)
+CVE-2026-98895 [net/mlx5: HWS, Handle destroying table that has a miss table]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ NOTE: https://git.kernel.org/linus/60e9e82f162ab7399373ff2185119289e4f6dc06 (7.2-rc1)
+CVE-2026-98894 [drm/amd/ras: reset CPER ring on corrupt entry size]
+ - linux 7.2.6-1
+ NOTE: https://git.kernel.org/linus/4d695e66d7027a0c78302e47ac76293675fbbb4d (7.2-rc1)
+CVE-2026-98893 [firmware: arm_scmi: Validate SENSOR_UPDATE payload size]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/32bc5496b48174dbca1f187f710955ee4d9527a1 (7.2-rc1)
+CVE-2026-98889 [wifi: iwlwifi: mvm: fix sched scan IE sizing]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/4f155d262b31b9b17e0f9856bdabe0968eb4930f (7.2-rc5)
+CVE-2026-98884 [mmc: core: Add validation for host-provided max_segs]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/3e0483e93a8be320f70a1ff68d835f7f015af311 (7.2-rc1)
+CVE-2026-98883 [serial: 8250_port: recognize UPIO_AU]
+ - linux 7.2.6-1
+ NOTE: https://git.kernel.org/linus/49fa670efdfdd27e29145cbd2beef065c08717ef (7.2-rc1)
+CVE-2026-98882 [media: chips-media: wave5: Add range checks for dec_output_info]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ NOTE: https://git.kernel.org/linus/79aef69bb0903616f4867f0168aea717a11c439c (7.2-rc1)
+CVE-2026-98880 [ntfs3: handle set_blocksize failures]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ NOTE: https://git.kernel.org/linus/24f7d1824b7581ae3daf9d443c5dfeabd89df6d8 (7.2-rc1)
+CVE-2026-98878 [irqchip/gic-v5: Immediately exec priority drop following activate]
+ - linux 7.2.6-1
+ NOTE: https://git.kernel.org/linus/abf60331ebe9a9a7937a72aac7699c2907ab9307 (7.2-rc1)
+CVE-2026-98876 [host1x: bus: Fix missing ops null check in error teardown]
+ - linux 7.2.6-1
+ [trixie] - linux 6.12.111-1
+ [bookworm] - linux 6.1.190-1
+ NOTE: https://git.kernel.org/linus/71d25f668bc5c0f36ea843462e12307dea45aaa3 (7.2-rc1)
+CVE-2026-98875 [drm/nouveau/gsp: add SEC2 to GA100 chip table]
+ - linux 7.2.6-1
+ NOTE: https://git.kernel.org/linus/604d0efb17cc0dd197e089134736ac2698d5fca7 (7.2-rc1)
+CVE-2026-98874 [wifi: iwlwifi: mld: don't WARN on WoWLAN suspend w/o netdetect]
+ - linux 7.2.6-1
+ NOTE: https://git.kernel.org/linus/301b0dfa9db3f1e204de95e803bbd88fbd878c7c (7.2-rc1)
CVE-2026-97785 (Improper authentication in AAD App Proxy allows an unauthorized attack ...)
NOT-FOR-US: Microsoft
CVE-2026-97635 (The Agent Zero Web UI before 1.15 does not correctly sanitize user-pro ...)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3a74ca2ad3c61cb5a0f7b3653b2397eb034373c
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e3a74ca2ad3c61cb5a0f7b3653b2397eb034373c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/81e072ac/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list