[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec
Salvatore Bonaccorso (@carnil)
carnil at debian.org
Wed Oct 28 16:07:47 GMT 2026
Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits:
eaa9bd10 by Salvatore Bonaccorso at 2026-10-28T17:06:14+01:00
Merge Linux CVEs from kernel-sec
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -1,3 +1,449 @@
+CVE-2026-99210 [accel/rocket: clear rdev on device init failure]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/4ac852419f0d317c7bd8db5b8acb3cc78be7fe33 (7.3)
+CVE-2026-99207 [scsi: target: Disable interrupts while holding delayed_cmd_lock]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/04a67a8b1a4460345d22fe75d93430cbf7e651d7 (7.3)
+CVE-2026-99205 [sched/core: Call wakeup_preempt() for queued tasks during class change]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/118a2cf4ced60777a2408001e2b4838fed1cea55 (7.3)
+CVE-2026-99200 [net: hisilicon: hisi_femac: Move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/444889dfa27b54b39026e962464b1f8f9093e1ea (7.3)
+CVE-2026-99199 [net: hisilicon: hip04_eth: Move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/0d9342701f14ec0a9465772b7cd5d515c1ecd818 (7.3)
+CVE-2026-99198 [net: ethernet: actions: Move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c2c4824319850c87e77d26aeb8f860bc310a64d7 (7.3)
+CVE-2026-99197 [net: mv643xx: move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/a3eef3d2cca032d8768b5eb07aab0f46b79bfd8a (7.3)
+CVE-2026-99196 [net: au1000: move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/beabbafdd0f6779813a7656baa1b412b19bda911 (7.3)
+CVE-2026-99195 [net: ethoc: move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c9f8ce62a5faa73515ff5457716bd7306d20fd93 (7.3)
+CVE-2026-99194 [net: ethernet: aeroflex: move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/d71483f0716e7ae98578817bfdc8a5b822d250f8 (7.3)
+CVE-2026-99193 [net: ti: icssm-prueth: Move setting of netops to fix crash]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/955bb7cf680d8699ce94c73539af882840a9be43 (7.3)
+CVE-2026-99188 [net: stmmac: dwmac1000: clear the RGMII status interrupt]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/aa07285705f8d5bac464eb1c5b7412f8e88b91e1 (7.3)
+CVE-2026-99186 [x86/insn-eval: Fix shadowed segment index in get_seg_reg_override_idx()]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/32c52ec87d6245ee2d12ed5dd509e40062939b50 (7.3)
+CVE-2026-99185 [firewire: core: fix race condition in split transaction handling]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/7f9f2d6abc40f79e802b4063859eda343043b85c (7.3)
+CVE-2026-99184 [accel/rocket: search every core slot when a core is removed]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/6eff1d69dae808a1518aee5a58d0853a8db3f1be (7.3)
+CVE-2026-99177 [KVM: SEV: Fix page dirtying in sev_gmem_post_populate()]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/97818b2fa7082e940ddd36dab12a68615300e798 (7.3)
+CVE-2026-99170 [namespace: a mount that copy_tree() leaves out can't take over a lock]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/69fbe94f80bc423613fa18dae6656757423732a2 (7.3)
+CVE-2026-99168 [mshv_vtl: Check per-CPU register page before mmap]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/874194a8de75fc2f4d1fb70c670b289b7e48f93e (7.3)
+CVE-2026-99164 [spi: imx: fix slab corruption from undersized DMA bounce buffers]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/59eb22641f0c526dd064390b11cff99ae87c2858 (7.3)
+CVE-2026-99162 [gpio: shared: fix use-after-free bug when adding shared proxies]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/bd22f7e63509fa758cf500d9af3e88a3d3df96be (7.3)
+CVE-2026-99151 [drm/amd/display: Fix NULL sink dereference in USB4 bandwidth functions]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/55a67aa89342545b89f469dea6f29bfb6fac6f3d (7.3)
+CVE-2026-99149 [drm/amdgpu: fix GEM object leak on ENOMEM in userptr ioctl]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/3c516a5646285442e1cd71dff2584b77eb4fc421 (7.3)
+CVE-2026-99148 [drm/amdgpu: keep the eviction fence until the last handle is closed]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/3c44cbcec5eb370713bbd2c315ed7c34d8ccec2b (7.3)
+CVE-2026-99145 [drm/xe: Don't transfer shrinker pages for pinned bos on purgeable state change]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/ffbfd3f98f4393e91dffce3a46ccb7cf5329cf2f (7.3)
+CVE-2026-99144 [sched_ext: Fix use-after-free of a destroyed user DSQ by a deferred reenqueue]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/069403dff337feb192bfc70fb28ddc8a171e20c1 (7.3)
+CVE-2026-99141 [tracing: Fix crash in print_graph_function_event()]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/3cc117514d69067a94d6c7479730dce41e678f50 (7.3)
+CVE-2026-99137 [cifs: don't update i_size in cifs_do_truncate without a cached handle]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/fe39cd9d48f2346605f3746e0cc19e89d5f373eb (7.3-rc2)
+CVE-2026-99129 [selinux: fix BPF token permission checks]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/77d499e61d36e883a6ad1f10afe05f556aa7e0cc (7.3-rc2)
+CVE-2026-99120 [KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/e90ab3669181c6469e3647ef2b30ae408275f496 (7.3)
+CVE-2026-99119 [drm/amdgpu/userq: actually validate userq BOs]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/32d0771ef4ca69c30a1db3aefa34dd177cd2a047 (7.3)
+CVE-2026-99116 [net: psp: do not inherit the Rx association on clone]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/1d2929d0850fff683b8aff051275945e65f082c8 (7.3-rc2)
+CVE-2026-99111 [smb: client: fix data corruption with concurrent writes and O_TRUNC]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/a8603b52b39f520ea8a34def74c23fba87396d3e (7.3-rc2)
+CVE-2026-99108 [ntfs: fix FITRIM range alignment]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/03c6ecc4b4b13a3901f207152451fdd2d82e40c4 (7.3-rc2)
+CVE-2026-99107 [ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/8d139e3635c86e2c97c78d55538ce0b00b6d9986 (7.3-rc2)
+CVE-2026-99104 [sched_ext: Fix the bypass dispatch claim for schedulers bypassed by an ancestor]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/5bdeca322a6f8d10acaf67cccab1f69747ee7be3 (7.3)
+CVE-2026-99102 [ntfs: take invalidate_lock in ntfs_setattr_size()]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/9cc5761b8f28f9cef72061094eb5e37e2cd44d97 (7.3-rc2)
+CVE-2026-99216 [Drivers: hv: Don't reset VMBus connection state on error/exit paths]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/ec31dc39e835ccde0930daccece8c492d28282fc (7.3)
+CVE-2026-99215 [power: supply: core: prevent unregistering a power supply while a callback runs]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/5b4bd13e0552926648a46c2c9a12a24dfaee3715 (7.3)
+CVE-2026-99214 [drm/vc4: hdmi: Move packet RAM enable to PM runtime]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/3f57b34485dc01e5a2db60a89a6ae5439a897e53 (7.3)
+CVE-2026-99213 [vsock: treat TCP_CLOSING as once-established]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/4f6ac74fa594a918d41255c941256e1d51592d3b (7.3)
+CVE-2026-99212 [net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/98d446b7c013254a8a7b49720557676a3a851fde (7.3)
+CVE-2026-99211 [netlink: reset skb headers before unicast and multicast filtering]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8bf659bd54e1f00e34cf5244b1d289c506fa47c0 (7.3)
+CVE-2026-99209 [drm/xe: skip eviction of a BO with no resource]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/448e76cbdc6652ccd3ba337b7a6e1f028859f2ed (7.3)
+CVE-2026-99208 [drm/xe/oa: Zero OA buffer at allocation]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/fd8662823caa114a63f07222d2aa448f6ac5e864 (7.3)
+CVE-2026-99206 [scsi: target: iscsi: Fix race in discovery auth updates]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/e15b81f602edbdee39c335546f25486a1747f3f0 (7.3)
+CVE-2026-99204 [ocfs2/dlm: Protect the recovery list during debugfs reads]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/4c435828932bf46f29860e4a0375bcae101b778a (7.3)
+CVE-2026-99203 [pipe: preserve existing fasync readers on writer setup failure]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/40bb03d3ea6f6a915218508819ecc4d7a7fa260d (7.3)
+CVE-2026-99202 [scsi: libsas: Fix SMP IO deadlock during HA resume]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/81e097a064b28b4a1f6ca1a8b433e659c1bd64c0 (7.3)
+CVE-2026-99201 [netlink: avoid hashing the network namespace pointer]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/f88bb3606e4bd11ee035b682cddc2999e604609a (7.3)
+CVE-2026-99192 [net: bcmgenet: unshare the skb before writing the control block]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/89771ce4f8f67dcffae561b2ccac95c0f6e3aa01 (7.3)
+CVE-2026-99191 [calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8070ed578b6b9134e045627fb745c887a806d46e (7.3)
+CVE-2026-99190 [gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c28846ca1ac6134881114d272314623c8433e372 (7.3)
+CVE-2026-99189 [gpio: mxc: fix race between chained IRQ handler install and probe completion]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/38d44f78f041ffe60c8e2443b99434a199e7541d (7.3)
+CVE-2026-99187 [perf: Fix perf_pmu_migrate_context() leaving events behind]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/e76b36b4be7160eaa14b416681e548b125702395 (7.3)
+CVE-2026-99183 [accel/rocket: search every core slot when looking up a scheduler]
+ - linux 7.2.13-1
+ [trixie] - linux <not-affected> (Vulnerable code not present)
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/89c2c777df17eb0201c8e22afabbf3691f2a28fe (7.3)
+CVE-2026-99182 [ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/746de48c3a250f0c264105dcbfcdf0c5001e970b (7.3)
+CVE-2026-99181 [autofs: ignore notification errors from a replaced pipe]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/65676cd4203c0e41a94caf54080a7f0a95434bda (7.3)
+CVE-2026-99180 [unicode: free the map after a grace period]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/a96c5299bd7305eb984377681eb3222a57376405 (7.3)
+CVE-2026-99179 [watch_queue: Fix note pool publication race in watch_queue_set_size()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/5e531d62f1f8834faf7a4eed0d41105cf6570a8f (7.3)
+CVE-2026-99178 [x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/81d99abe2bd81379abfb595e403bbbee6fbfc624 (7.3)
+CVE-2026-99176 [KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/c8f4cfe1cf93bce924e27f2abead7a4c4a487505 (7.3)
+CVE-2026-99175 [fsnotify: prevent mark additions during connector teardown]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/36ebddca56b9d8993d6dc984fdecc748ee1f5e06 (7.3)
+CVE-2026-99174 [ext4: free the sbi after a grace period]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/c17b44266a1f9fcb49b894d4611d1254bf1aa313 (7.3)
+CVE-2026-99173 [eventfs: Free the eventfs_inode after an rcu grace period too]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/2cd88c498ecff8e22bf4c397b8eb226db70ac343 (7.3)
+CVE-2026-99172 [ipc: drop the mqueue mount with kern_unmount() on setup failure]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/f0e48172a59e517e613b73f73cc35f24fd123aeb (7.3)
+CVE-2026-99171 [ntfs3: free the sbi after a grace period]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c01b091b06412d3b1b53d8c2925f6de586c8a2fc (7.3)
+CVE-2026-99169 [futex: Fix mm reuse handling for FUT_OFF_MMSHARED]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/3267512ad1c2cc0c7768c5b014dc2cceb398a801 (7.3)
+CVE-2026-99167 [net/sched: fix use-after-free in __tcf_action_put()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/7b16eb911091aae237a8673da94e4dfb9cd21d54 (7.3)
+CVE-2026-99166 [net: rds: fix uninitialized trans dereference in CM event handler]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/492ba6ac1b1ffb8a06ff52db0825c1af2cdb28c8 (7.3)
+CVE-2026-99165 [sctp: revalidate output stream after association connect wait]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/b7ad72414c673ce1fa1f463e807cd4f34f8be9bf (7.3)
+CVE-2026-99163 [tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/a244c241593b5b38a08f0df2cb43c26574efbdcb (7.3)
+CVE-2026-99161 [i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/aaabefc79b0ff0018e8e3832169bbe359d0551fc (7.3)
+CVE-2026-99160 [ring-buffer: Do not show buffer_meta for CPUs without a buffer]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/3f23cae09a4677a3f7c163a68388512cb231ff22 (7.3)
+CVE-2026-99159 [ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/25132363c723afc39aace8b098f547ab4a0ea759 (7.3)
+CVE-2026-99158 [ring-buffer: Fix false warning in ring_buffer_map_get_reader()]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/89bab1dba8a0167ef0d819e0f55b6bafa038e87f (7.3)
+CVE-2026-99157 [scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/ec6b083915e8146e147314a5f4f1285d07b57bfc (7.3)
+CVE-2026-99156 [scsi: st: Fix use-after-free race between st_remove() and st_open()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/71caf7f84bd62a4bf91cc95abd2de690afb8d15f (7.3)
+CVE-2026-99155 [scsi: xen/scsifront: Check for a NULL shadow entry on a backend response]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8c8222c255772713eb36cde695777a1fce224917 (7.3)
+CVE-2026-99154 [scsi: libiscsi: Reject a negative task index from parse_pdu_itt]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8ee2a09a1dbb257c9e828ad2497f8e4832dfb142 (7.3)
+CVE-2026-99153 [scsi: libiscsi: Validate the ITT reflected in a Reject PDU]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/c5958c770b2a0ee492414e26b07da9164a0d1f5d (7.3)
+CVE-2026-99152 [scsi: libiscsi: Validate the task named by a management response]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/11bffcd9cb346732eab2914ef44fe777a3f0b585 (7.3)
+CVE-2026-99150 [drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/de9f6bcdb44f0e410031002e2f103826ea6b6259 (7.3)
+CVE-2026-99147 [drm/exec: don't immediately add prelocked obj to array of locked objs]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/26401a4999f1596a515b2e704e7066ac09306488 (7.3)
+CVE-2026-99146 [drm/i915/dmc: Add sanity check for DMC load address]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/7dedc5bb11f95e96fe80757c924d8d9aa7327759 (7.3)
+CVE-2026-99143 [tracing: Keep the predicate limit separate from program capacity]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/803aa6fc2dbea25ab9d3ed19eca1c96d0ab17445 (7.3)
+CVE-2026-99142 [tracing: Check operator stack capacity before pushing]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c47a7b11bcb3d45e29723afcf6336866476b1d08 (7.3)
+CVE-2026-99140 [tracing: Fix hist trigger timestamps for buffered events]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/9414ca3b99e5a7f1f3bf51c2a01b383e1b355dd0 (7.3)
+CVE-2026-99139 [tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/5271b79b7ad68dcb222e893773f92bdabf7750f3 (7.3-rc2)
+CVE-2026-99138 [tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/385e474086c2e7e29e2dded690be40dc273e20ee (7.3-rc2)
+CVE-2026-99136 [dm-crypt: fix a tiny race condition in crypt_dec_pending]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/148845aa1921d95ef5dc851c76e6a284f6657df6 (7.3-rc2)
+CVE-2026-99135 [dm-integrity: fix infinite loop on discard with large tag size]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/18d80c77b4c7dd20699e81cedfbbff4e9d198f28 (7.3-rc2)
+CVE-2026-99134 [mac802154: fix data race and NULL deref on local->assoc_dev]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/c037915f80c4db47f7d061d68e703ffd551b1a34 (7.3-rc2)
+CVE-2026-99133 [net/iucv: fix the recvmsg window update]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/fa5acd038ea657ad5033713d6916214cbd349151 (7.3-rc2)
+CVE-2026-99132 [xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/41a28c865d1d5843f8cb9e0af17a8f4d9e2961ff (7.3-rc2)
+CVE-2026-99131 [xfs: fix capability check in xfs]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/e2f62a9744ebad3bcb6347a648e615026e9efeff (7.3-rc2)
+CVE-2026-99130 [io_uring/cancel: don't spin on local work the task can't run]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/fddcf4c5321b3ea5f72166c3fd36a9d1c34f80c7 (7.3-rc7)
+CVE-2026-99128 [sctp: validate chunk length in the inqueue parser]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/6cfc1b90cb86f4aabc69fb8e30128e07e2cdfa3a (7.3-rc2)
+CVE-2026-99127 [page_pool: keep frag_offset aligned for odd-sized requests]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/dc0df5a0c62ccea1d0e08d39a4dc9064de81d411 (7.3-rc2)
+CVE-2026-99126 [s390/ctcm: Prevent XID null dereference]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/b264d8422779d69febce914efc47a92a85cc382c (7.3-rc2)
+CVE-2026-99125 [s390/pai: Handle multiple PMU stop callback invocations]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/f3110e969ad226ffbb2d9b4bf5387e68d0d9ef40 (7.3-rc2)
+CVE-2026-99124 [s390/pci: Fix leak of uninitialized kernel data in SCLP report]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8ac60ae2a307a50b599bf5d300b448d638f3ba29 (7.3-rc2)
+CVE-2026-99123 [vsock/virtio: validate packet source for connected sockets]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/dee44f41f206becb41c492899c1996cfd7f82a1b (7.3-rc2)
+CVE-2026-99122 [vsock/vmci: validate packet source for connected sockets]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/ad9a7da3fa39c2d616ec0dd3cf6e30531d032fe7 (7.3-rc2)
+CVE-2026-99121 [ipv4: avoid divide by zero in fib_rebalance]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/5046d2880fec7d49ebed2fd2866747ee1d06ad71 (7.3-rc2)
+CVE-2026-99118 [drm/i915/dmc: Harden DMC firmware payload parsing]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/8bb1858db453cd4250e3b633f5d2d09206024ca6 (7.3)
+CVE-2026-99117 [net: bridge: mcast: don't truncate the port group walk on teardown]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/5a3f7a683aee56e1f15c9d53041f3236767eaae7 (7.3-rc2)
+CVE-2026-99115 [ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/db2267b27c054a6c2151ff7fbb67927e784f31d6 (7.3-rc2)
+CVE-2026-99114 [ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/c0cd3fc6824122014da2b3b0cb7ddeaa2946ec8e (7.3-rc2)
+CVE-2026-99113 [ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/399aa12450a61a5c73dc77e73f069ece9687c95d (7.3-rc2)
+CVE-2026-99112 [net/sched: cls_flower: validate mask pointer after nla_next()]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/fee10655709c5c597e8e9f722f3035d9ea31ff3a (7.3-rc2)
+CVE-2026-99110 [smb: client: fix heap overflow in cifs_do_set_acl()]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/1dac61e2c29d1a71784604b48cf3b1234a65ec29 (7.3-rc2)
+CVE-2026-99109 [smb: client: reject SetEA requests that do not fit the request buffer]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/4aa2c106aef4bf3dfd97c30842db0767b26e8428 (7.3-rc2)
+CVE-2026-99106 [drm/amdgpu: free the userptr ranges when a CS fails after parser_bos]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/1b4da805a0ba354a549ce07459c871c17dd94fe0 (7.3)
+CVE-2026-99105 [sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/7a9df76679633cf26e0fea882a684012c6ec245a (7.3)
+CVE-2026-99103 [workqueue: Fix unbound pool lifetime for pending pwqs]
+ - linux 7.2.13-1
+ [bookworm] - linux <not-affected> (Vulnerable code not present)
+ NOTE: https://git.kernel.org/linus/cf9c8aaea0d47410df8708bec195889f3a85cd3c (7.3-rc2)
+CVE-2026-99101 [ntfs: move attribute payload before shrinking its record]
+ - linux 7.2.13-1
+ NOTE: https://git.kernel.org/linus/0ab6dc1ac4601c8d79e5448a024daed6b0c5ef64 (7.3-rc1)
CVE-2026-XXXX [GHSA-chm5-8fg3-g6fw: The default email notification scripts may allow command injection from the recipient address]
- icinga2 2.16.6-1
NOTE: https://icinga.com/blog/icinga-2-v2-16-6-and-icinga-web-v2-14-1/
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaa9bd10c79c0a79668774710864dc3b43b70b21
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/eaa9bd10c79c0a79668774710864dc3b43b70b21
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261028/290d8533/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list