[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3cb044e1 by Salvatore Bonaccorso at 2026-10-23T17:49:13+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,64 @@
+CVE-2026-98928 [KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/4f16c5fc8dc4c5596e3777ab9f449a54e3f85fd5 (7.3-rc5)
+CVE-2026-98927 [KVM: arm64: nv: Fix life cycle of the nested_mmus array]
+	- linux 7.2.9-1
+	[trixie] - linux 6.12.113-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/33346f8960c7bb6a3b4e273b5cfe25c5a8be349f (7.3-rc5)
+CVE-2026-98925 [bpf, sockmap: Fix self-redirect copied_seq double-counting]
+	- linux 7.2.9-1
+	[trixie] - linux 6.12.113-1
+	[bookworm] - linux 6.1.190-1
+	NOTE: https://git.kernel.org/linus/490a83d6386eec1d29f470c8d7331677fb46c3b7 (7.3-rc5)
+CVE-2026-98923 [arm64: io: Reject non-user protection in ioremap_prot()]
+	- linux 7.2.9-1
+	[trixie] - linux 6.12.113-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/bb756b11ad63832ebee58caf9e8f9381eaecff9f (7.3-rc5)
+CVE-2026-98922 [net: emac: move setting of netops to fix crash]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/7c9f391ec89cb621d7af375ace2eb9a6248e5b9d (7.3-rc5)
+CVE-2026-98921 [ovl: fix UAF in ovl_do_mkdir() debug print]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/ae146bc1abdeb4607abf2975b858c053024e8ac1 (7.3-rc5)
+CVE-2026-98919 [drm/xe: harden adjust_idledly() against divide-by-zero and overflow]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/90f467577ebc28c5bc4ba2f0f1b83a4419fb0740 (7.3-rc5)
+CVE-2026-98918 [mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/f166586f74dd5d9cbadaabf86ef81c8ddf6cafa7 (7.3-rc5)
+CVE-2026-98930 [KVM: s390: Fix IRQ injection with SIGP Stop and Store Status]
+	- linux 7.2.9-1
+	[trixie] - linux 6.12.113-1
+	NOTE: https://git.kernel.org/linus/d343407b728a80b74be3c24b59f15e60289ea527 (7.3-rc1)
+CVE-2026-98929 [macsec: initialize SecY before registering the netdevice]
+	- linux 7.2.9-1
+	NOTE: https://git.kernel.org/linus/c2de369c5c5b8599ca10fd5ca8d11fcd845c1331 (7.3-rc5)
+CVE-2026-98926 [drm/amd/display: Remove sink usage from DPMS]
+	- linux 7.2.9-1
+	NOTE: https://git.kernel.org/linus/8fa813b7fd1eccbed13e126166cf764f1f11a7d3 (7.3-rc1)
+CVE-2026-98924 [fs: avoid repeated scans in evict_inodes()]
+	- linux 7.2.9-1
+	NOTE: https://git.kernel.org/linus/7459c021874246c196f397686e100702f059b9e7 (7.3-rc5)
+CVE-2026-98920 [netfs: Fix missing alloc tagging of direct mempool allocations]
+	- linux 7.2.9-1
+	[trixie] - linux <not-affected> (Vulnerable code not present)
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/b78b728e21c32ec4c330b299f657fb1eb02dffc2 (7.3-rc5)
+CVE-2026-98917 [parisc: Increase kernel stack size to 32kb]
+	- linux 7.2.9-1
+	NOTE: https://git.kernel.org/linus/94b7e3a7e871ae27d4935c76959dfc61829f27f9 (7.3-rc5)
 CVE-2026-98912 [ALSA: seq: oss: Reject reads that cannot fit the next event]
 	- linux 7.2.6-1
 	[trixie] - linux 6.12.111-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cb044e1033997a04999bb876802156869df151d

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3cb044e1033997a04999bb876802156869df151d
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261023/9e9e305f/attachment-0001.htm>