[Git][security-tracker-team/security-tracker][master] Merge Linux CVEs from kernel-sec

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
ddf7a626 by Salvatore Bonaccorso at 2026-09-04T21:24:07+02:00
Merge Linux CVEs from kernel-sec

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,48 @@
+CVE-2026-80911 [ASoC: SOF: sof-audio: Fix error path in sof_widget_setup_unlocked()]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/e780e4917d43683224812400fe3dc4816fceba75 (7.2-rc7)
+CVE-2026-80903 [drm/xe/oa: Fix sync entry leak on OA config emit failure]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	[bookworm] - linux <not-affected> (Vulnerable code not present)
+	NOTE: https://git.kernel.org/linus/8d33c4987cd162527375a3905017ae129ba7c3fe (7.2)
+CVE-2026-80913 [selinux: require every boolean value to be defined]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/a93d37a09b863810653f93d371fb197457d59deb (7.2-rc7)
+CVE-2026-80912 [selinux: reject an unclaimed class value in security_get_classes()]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/22b05fec62c0fe9864cfceb52f7d0f3a34d9b1dd (7.2-rc7)
+CVE-2026-80910 [ASoC: codecs: lpass-wsa-macro: Fix enum kcontrol accesses]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/56f24311fd5607588a47e44675195a9efb200f29 (7.2-rc7)
+CVE-2026-80909 [drm/amdgpu: Reject UVD message with invalid number of h265 refs]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/9fca434208f1f9ab977feac62df8ebb1cc7ce893 (7.2)
+CVE-2026-80908 [drm/amdgpu: Reject UVD message with dimensions above 4096]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/8c9aebcdd9f46f7a14b98d6ab18574b7a48fbb08 (7.2)
+CVE-2026-80907 [drm/amdgpu: Fix UVD dpb min size calculation for H264]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/21a8084cd76223a13493237e04d45f5226d7cee6 (7.2)
+CVE-2026-80906 [net: packet: fix wrong transport_header when sending VLAN-tagged frame]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/01fdecc0480d916c799dbee584833a4a37e94d06 (7.2)
+CVE-2026-80905 [net: tap: fix wrong transport_header when sending VLAN-tagged frame]
+	- linux 7.1.10-1
+	NOTE: https://git.kernel.org/linus/cbb35cbe8db268fefe34c23df15348cf99025298 (7.2)
+CVE-2026-80904 [net/tls: Fail tls_sw_splice_read() after a failed async decrypt]
+	- linux 7.1.10-1
+	[trixie] - linux 6.12.105-1
+	NOTE: https://git.kernel.org/linus/976df67f463db1fddaf2a32fb04f57ad2891a23d (7.2)
 CVE-2026-80900 [ASoC: SDCA: Make UMP message size check more robust]
 	- linux 7.1.8-1
 	[trixie] - linux <not-affected> (Vulnerable code not present)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddf7a626329208147045e0f7f10a0d8b735a726c

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/ddf7a626329208147045e0f7f10a0d8b735a726c
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260904/8aa7632c/attachment.htm>