Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: fe0a4228 by Salvatore Bonaccorso at 2026-07-29T20:23:48+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,16 @@ +CVE-2026-64560 [posix-cpu-timers: Prevent UAF caused by non-leader exec() race] + - linux 7.1.5-1 + NOTE: https://git.kernel.org/linus/920f893f735e92ba3a1cd9256899a186b161928d (7.2-rc3) +CVE-2026-64559 [s390/pkey: Check length in PKEY_VERIFYPROTK ioctl] + - linux 7.1.5-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b3d4ab2d7df9426f7f1d3671d7e2108f2ca6e970 (7.2-rc1) +CVE-2026-64558 [s390/pkey: Check length in pkey_pckmo handler implementation] + - linux 7.1.5-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + [bullseye] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1ac287e2af9a9112fe271427ef45eceb26bce8b4 (7.2-rc1) CVE-2026-6881 (A SQL Injection in the Giving Reports functionality in Ellucian Advanc ...) NOT-FOR-US: Ellucian CVE-2026-66064 (goshs is a feature-rich single-binary file server for red teamers and ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe0a422875e6a99aa3eb8d2898566fb95a3d3775 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fe0a422875e6a99aa3eb8d2898566fb95a3d3775 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
