[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d520a9c1 by Salvatore Bonaccorso at 2026-10-23T17:47:33+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,90 @@
+CVE-2026-98912 [ALSA: seq: oss: Reject reads that cannot fit the next event]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/611f538253d970f4d152003841544e875828d015 (7.2-rc1)
+CVE-2026-98909 [net: cpsw_new: unregister devlink on port registration failure]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/b64f763b607426ac97e44b114f0b8844ac3b86dd (7.2-rc1)
+CVE-2026-98902 [md/raid5: let stripe batch bm_seq comparison wrap-safe]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/00e93faf4cea9e8802ac5dfee0952d84fc95c40f (7.2-rc1)
+CVE-2026-98900 [xen/gntalloc: validate grant count before allocation]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/2299822f3f466b5dcad2377bf63986199f881a6b (7.2-rc2)
+CVE-2026-98899 [netfilter: ipset: mark the rcu locked areas properly]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/5d0c22e73656d050daffad10a2ba8765ce8441c8 (7.2-rc3)
+CVE-2026-98898 [drm/amd/pm/si: Don't schedule thermal work when queue isn't initialized]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/f8922d5a946699fc2bdc7660e6778bd6726bf8b8 (7.2-rc4)
+CVE-2026-98916 [wifi: nl80211: check link is beaconing for color change]
+	- linux 7.2.6-1
+	NOTE: https://git.kernel.org/linus/55308cee9c2196f39cd1ce8ee6c1fed9e12a00d4 (7.2-rc1)
+CVE-2026-98915 [media: video-i2c: use vb2_video_unregister_device on driver removal]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/56384b486b80ce4a2bc93689aae49995f908f90d (7.2-rc1)
+CVE-2026-98914 [drm/amdgpu: cap ATOM command table nesting depth]
+	- linux 7.2.6-1
+	NOTE: https://git.kernel.org/linus/27ef1795bc4e47cae838e0a3ced531c549f9b23d (7.2-rc1)
+CVE-2026-98913 [net: thunderx: fix PTP device ref leak in nicvf_probe()]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/2bcf59eefb9f00a2b1d426b639ee49c305a80695 (7.2-rc1)
+CVE-2026-98911 [dpaa2-switch: fix the error path in dpaa2_switch_rx()]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/74c1c9f5c0c30bbd0c2cf87b6e3507e7ea46c13d (7.2-rc1)
+CVE-2026-98910 [drm/amdkfd: Unwind debug trap enable on copy_to_user failure]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/01112e241e37f9ac98b6f418d93ce2e0b87b7ee0 (7.2-rc1)
+CVE-2026-98908 [net: microchip: sparx5: clean up PSFP resources on flower setup failure]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/46e50367338702abe3df661df7795bdada40fef7 (7.2-rc1)
+CVE-2026-98907 [btrfs: protect sb_write_pointer() with invalidate lock]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/123b9a545f4d0348e81f558a032bf2a93ee5722f (7.2-rc1)
+CVE-2026-98906 [net: lan966x: restore RX state on reload failure]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/aa97f11a76e545ed73cc455bcdd1ece4b480b507 (7.2-rc1)
+CVE-2026-98905 [drm/amdkfd: Properly acquire queue buffers in CRIU restore]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/20a5e7ffdfecddc34c60a6b4483f42acf3d8731d (7.2-rc1)
+CVE-2026-98904 [mailbox: imx: Use devm_pm_runtime_enable()]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/1f602619e408b6e9655ee76656a2a5ab6e89c5e4 (7.2-rc1)
+CVE-2026-98903 [mailbox: imx: Add a channel shutdown field]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/5ccea7eacb7786c358833634f45700365f6c1d99 (7.2-rc1)
+CVE-2026-98901 [ksmbd: fix lease break and ack state handling]
+	- linux 7.2.6-1
+	[trixie] - linux 6.12.111-1
+	NOTE: https://git.kernel.org/linus/5015191096db311759fef98769270336cd8b1324 (7.2-rc1)
+CVE-2026-98897 [ksmbd: don't hold ci->m_lock while waiting for a lease break ack]
+	- linux 7.2.6-1
+	NOTE: https://git.kernel.org/linus/27a9bc968d4ae809a3f5ca2f2b136856ee613cb4 (7.2-rc2)
 CVE-2026-98896 [thunderbolt: Keep the domain reference while processing hotplug]
 	- linux 7.2.6-1
 	[trixie] - linux 6.12.111-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d520a9c18fd4c63a903136c6300add3d46108e8a

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d520a9c18fd4c63a903136c6300add3d46108e8a
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/2072472a/attachment.htm>