Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 064ca08d by Salvatore Bonaccorso at 2026-10-18T18:09:06+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,1025 @@ +CVE-2026-98654 [drm/amd/display: Atomize IRQ register read/modify/write ops] + - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/63e19ef3ddab806c472748c825f4dc88dcd994e8 (7.3-rc4) +CVE-2026-98653 [KVM: s390: Fix _gaccess_shadow_fault()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/faff4c8ff3dbec6d71b89dd281a0d17c4478fa44 (7.3-rc5) +CVE-2026-98651 [KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/88e22ffd1e46b95e40a6afabe486deb1d31a3ae1 (7.3-rc1) +CVE-2026-98650 [KVM: s390: Fix potential races in dat skey functions] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/27554b9505ddfc0aeab466aeb60929dfa17284c7 (7.3-rc5) +CVE-2026-98649 [KVM: s390: Fix race in _destroy_pages_crste()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4ca00a9154f998116fba9a32cce5bd938d228065 (7.3-rc5) +CVE-2026-98648 [s390/uv: Prevent potential out-of-bounds read] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f47190b08b71e8482072978373ee88cb2dfbdaf4 (7.3-rc5) +CVE-2026-98646 [tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/eaab8cab451b9502ce224cd202550375b894a467 (7.3-rc5) +CVE-2026-98645 [HID: winwing: fix use-after-free in force feedback teardown] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a1a5ad37e50ceb192c07ac7e2d7143638cd4d110 (7.3-rc5) +CVE-2026-98643 [bpf: Fix out-of-bounds read of rtt_min in sock_ops] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/75f8cf22463d82bb1fb0239a3d485fc8f4c8ef03 (7.3-rc5) +CVE-2026-98641 [bpf, arm64: set up the frame pointer for the exception callback] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ef1fb82f12186dd26153b14d9fbcf4ec98db81b3 (7.3-rc5) +CVE-2026-98640 [HID: amd_sfh: Validate PCI BAR size before mapping] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/65bcc5f89704efe5b9d69d4ea2c1002d90c31382 (7.3-rc5) +CVE-2026-98639 [KVM: riscv: Fix NACL hfence entry update order] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b3d346838ec65fac7fd83f5dbcedd13cadfffddb (7.3-rc5) +CVE-2026-98638 [KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2a2eb10795a1e495aebc7f829ccecb72c05b4fd9 (7.3-rc5) +CVE-2026-98637 [KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a1b3c788ad31837e348075e93dbba3f447492776 (7.3-rc5) +CVE-2026-98636 [squashfs: Add dictionary size range check to prevent shift-out-of-bounds] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/1f7745fb3580152ca902ef181b605f33cabfb1d0 (7.3-rc5) +CVE-2026-98635 [scsi: block: Fix zones_cond out-of-bounds write on zone report] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/7c431d61b69a3fd0784c20aa4cd0b8fb501b5653 (7.3-rc5) +CVE-2026-98633 [Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f2bbb36426581045a8bf7793da5419b9375e4348 (7.3-rc5) +CVE-2026-98632 [Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/71af682ba4692c2ed9ace4c3d4ca462ae368c029 (7.3-rc5) +CVE-2026-98631 [xsk: Use a 32-bit compare in xsk_map_gen_lookup] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/70504de0bb627848667207bec7ccfd647deb8814 (7.3-rc5) +CVE-2026-98630 [eth: fbnic: Fix payload page pool error cleanup] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8e0b235bd918d06f54ba8fddd2c3ddc36ca59c15 (7.3-rc5) +CVE-2026-98629 [net/sched: cls_u32: fix manual hash table handle IDR aliasing] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/0a5f5d9e94dead312d32c366b917c64e552b72f7 (7.3-rc5) +CVE-2026-98627 [bpf: Preserve packet pointer class displacement in regsafe()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/fd16449a9b3b31a8f18944c2f0e29e4e218ca2cf (7.3-rc5) +CVE-2026-98625 [netfilter: flowtable: publish HW_DEAD after worker is done] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d644b23afe1ef509c9961a6d84a093c2587edf02 (7.3-rc5) +CVE-2026-98624 [netfilter: nfnetlink_queue: hold nfnl mutex in event notifier] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/9461613afc59acef44a0071b0dd5075f6e993ffe (7.3-rc5) +CVE-2026-98623 [drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/aff09d9e37e02dc60bde79035ac15b136d602259 (7.3-rc5) +CVE-2026-98622 [net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/47abe7a5c4eb53269aca3506446f851572a059a3 (7.3-rc5) +CVE-2026-98621 [net: gue: reject invalid REMCSUM offsets] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/2566866fc30965d915d0b52b5c3323b362619f0e (7.3-rc5) +CVE-2026-98619 [net: ethtool: keep rtnl_lock for the ioctl self test] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1b82958f3f035df5ccaab5430a2302f08a5d5351 (7.3-rc5) +CVE-2026-98618 [eth: fbnic: Handle maximum standalone channels] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1f4c73064a50f53d596c6f1d06d2d700f43c4b32 (7.3-rc5) +CVE-2026-98615 [eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8947f13e436a4ff5eed9f8f019b2865a07af4bb2 (7.3-rc5) +CVE-2026-98614 [sctp: avoid livelock while updating retransmit path] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d2c31b837406395e576afeb25958c98e9938f3f6 (7.3-rc5) +CVE-2026-98613 [bpf: Bound ownership depth through local kptrs and graph roots] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/bfc888f04588f591851e95c974954cfca58e6c19 (7.3-rc5) +CVE-2026-98612 [net: usb: catc: bound the RX packet length in catc_rx_done()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/9d565b6b72fe3f41fd43636e143072848105189f (7.3-rc5) +CVE-2026-98611 [bpf: Check params size before reading reserved fields] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a11212910cf09b2fe8db9afa41ef60c4f81879c5 (7.3-rc5) +CVE-2026-98610 [net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/8a60ade2277e1f0e0d0578d565354e52292fa46d (7.3-rc5) +CVE-2026-98609 [drm/virtio: fix object leak when drm_gem_handle_create() fails] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/36570ef2244cc4d7563b1f0157bc0f032498638c (7.3-rc5) +CVE-2026-98608 [drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/477bc3068fc3777b9d8ffd79e265b0dfdf2d3a6b (7.3-rc5) +CVE-2026-98607 [drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/24b6d5c7641412c9ebef0d4c8b888d49a0e6b880 (7.3-rc5) +CVE-2026-98606 [drm/virtio: release the GEM object on virtio_gpu_vram_create() errors] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/036d28db1818af2f9d80db771f5405da84d7732d (7.3-rc5) +CVE-2026-98605 [drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ada667890773e033d2f40dc94176e3beb930b516 (7.3-rc5) +CVE-2026-98604 [ovpn: replace bind when learning local endpoint] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/aea934a221ec6a867221e5b765f65f1857befd53 (7.3-rc5) +CVE-2026-98603 [ovpn: replace bind when clearing stale local source] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/7d8104988f423572df1f3347ce578037b1043f34 (7.3-rc5) +CVE-2026-98602 [Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/f0ca020cbb9bb7f3f4ea8ba1dfcf30a282aec91e (7.3-rc5) +CVE-2026-98601 [Bluetooth: btintel_pcie: validate device-supplied DMA indices] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/37a11129345337efd6eef8e62b03b6348cd0dd8b (7.3-rc5) +CVE-2026-98600 [Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6d91041bb38b97e2feb625123cc0529d7b83a0e1 (7.3-rc5) +CVE-2026-98597 [net: usb: sr9700: include receive overhead in the length check] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/c06bde80ae7a7b595732f7cabcb92cf08db9d56a (7.3-rc5) +CVE-2026-98596 [ipv6: Fix dst leak for uncached routes.] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/be31fe6333f534155e6b408f1ef6d77974bb41aa (7.3-rc5) +CVE-2026-98595 [udp: remove a disconnected socket from the 4-tuple hash table] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/9e95b1a94c9c49b4ba722251bbca2759b9c51737 (7.3-rc5) +CVE-2026-98594 [tg3: clean up PHYLIB resources on probe failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/a92e1a412c53dc0d9ad639e7abf8b3fc70a5b6ad (7.3-rc5) +CVE-2026-98593 [s390/debug: Fix NULL pointer dereference in debug_info_copy()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/012bfcd5a51082d5a65f096dfb9ca652b5267965 (7.3-rc5) +CVE-2026-98592 [net: spacemit: clear TX descriptor on fragment mapping failure] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2d14720beb58870b15a52b236c3ab0be0e06e915 (7.3-rc5) +CVE-2026-98591 [bpf: Fix bounds check for skb-backed dynptrs] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ed6eec97b534979dcf28b40c389cee57bd6561d4 (7.3-rc5) +CVE-2026-98590 [bpf: Fix bpf_sock context code generation] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/4a4852376e3a2727ea40e61143d6d7c22bb6dfad (7.3-rc5) +CVE-2026-98588 [bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/814a81c842bd88f6bd8a4ce550d560df071a5d03 (7.3-rc5) +CVE-2026-98587 [firewire: cdev: fix back-transition for iso_resource_auto client resource] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c6b51091cafff9ce6c03c1416aa13864d17ab97c (7.3-rc5) +CVE-2026-98585 [eth: fbnic: Avoid rounding zero ring sizes] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0160953d8eec75c3c55562158c46442ff1fd410b (7.3-rc5) +CVE-2026-98584 [net/sched: fix potential stack infoleak in em_text_dump()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/9c572a83037a7dcd653ba3a9cc468c16b857d0c9 (7.3-rc5) +CVE-2026-98583 [nfc: nfcmrvl: validate helper command length before pull] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/686f942332b1667f13f3b8d6a2f50bcfbf42e277 (7.3-rc5) +CVE-2026-98582 [nfc: st21nfca: validate received frame size] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/a653c01ce447f10c36b901646888c0330363af4f (7.3-rc5) +CVE-2026-98581 [nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/bf1460acdf8cf5a07c819f59785d40f20d113099 (7.3-rc5) +CVE-2026-98580 [nfc: llcp: Fix race condition in accept_queue lifecycle] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/c3eef2f988a3db9690369d7cef9a3344dd9788d3 (7.3-rc5) +CVE-2026-98579 [nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/66f4300206b82b0b143ef0d9be90cd8d29f23a47 (7.3-rc5) +CVE-2026-98578 [nfc: st21nfca: validate ISO15693 inventory length] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/7f2ea5ed588c03d481f0301e6c3d4240132383fb (7.3-rc5) +CVE-2026-98577 [nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/408cff6bd60636df201274d320edfdfde9ed41db (7.3-rc5) +CVE-2026-98576 [nfc: llcp: fix slab-out-of-bounds reads when logging service names] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/7dcf371a35632f035baf77bcf2c129165f772ce4 (7.3-rc5) +CVE-2026-98575 [nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/b61732f47316d45f27706db7812950145d3327b5 (7.3-rc5) +CVE-2026-98574 [net: bcmgenet: stop Tx NAPI before disabling the queues] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/7e87508b5c4d81210d0a736ed01962e52f5c4c56 (7.3-rc5) +CVE-2026-98573 [net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/3b4e0b0c008a8c1b474730248cd5b873026c74bd (7.3-rc5) +CVE-2026-98572 [bpf: Fix immediate JMP JEQ/JNE on MIPS32] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/db762fd96be225bd06161c9631160c755d891693 (7.3-rc5) +CVE-2026-98571 [net: stmmac: clear stale buf->page after recycling on skb build failure] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0a7822e34a0bfde31b194ac3da3253e5032b44cc (7.3-rc5) +CVE-2026-98569 [ip_gre: Reject enabling collect metadata through changelink] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/a3f315be9d30eeb6938d11fa17fd4b32d52f7c42 (7.3-rc5) +CVE-2026-98567 [net: xps: reject an out of range traffic class] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/4da3b7b8b50f3e2fde54a4c18a82a8e3f6223910 (7.3-rc5) +CVE-2026-98566 [drm/imagination: clamp freelist reconstruction requests] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/45585c3aa285854face65293acc95eff73063d6d (7.3-rc5) +CVE-2026-98564 [net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0d80ba0a204c6a16bd7778b50de578dff107c0fe (7.3-rc5) +CVE-2026-98563 [net: phylink: record the PHY only once bringup cannot fail] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a940003f44e7e441c228151dd212642152700ec8 (7.3-rc5) +CVE-2026-98561 [nfp: hold IPsec RX state under the XArray lock] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1a983a4e14c635c40354be110cd9a1a5c94e01e6 (7.3-rc5) +CVE-2026-98560 [net/rds: size a connection's path set by the transport it ends up with] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ba3d1f480c7a3fba963e7867ad6cc557c197acbc (7.3-rc5) +CVE-2026-98557 [gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/83769c23fb1879edc916a526ba424285033baf2d (7.3-rc5) +CVE-2026-98555 [llc: fix skb UAF and leaks on llc_mac_hdr_init() failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/72f9dd522f8d6c5a00be9695c7bb74631eb5069e (7.3-rc5) +CVE-2026-98554 [vlan: ensure sufficient headroom in vlan_dev_hard_header()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/cd5dd68267c4238795fadaf02b3575ca3f8a6500 (7.3-rc5) +CVE-2026-98553 [autofs: fix sbi->pipe file reference leak in autofs_kill_sb()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/aa5e44b29ffe4eaa08cc2237fd65bc2596bc023e (7.3-rc5) +CVE-2026-98552 [perf/core: Fix a refcount leak in attach_perf_ctx_data()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/cca4980630b3c7a85f53cb43c6018184ce5d4e37 (7.3-rc5) +CVE-2026-98550 [tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/99cc2a62e07a44a22254d7beca9ef1f8ad886d0d (7.3-rc5) +CVE-2026-98548 [sctp: discard the rest of the packet on a stale-cookie error] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/4498467a8af06cfa3d71cb04bd7c4170dec8f449 (7.3-rc5) +CVE-2026-98547 [af_packet: fix integer overflow in prb_calc_retire_blk_tmo()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/56d82862a0a243ac14ba11b6d7b57ddc2d064b95 (7.3-rc5) +CVE-2026-98546 [arm64/boot: Disable trapping of PMZR_EL0 writes to EL2] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2bc6b218717b9d08f466f88209251d54bc09b207 (7.3-rc5) +CVE-2026-98545 [ata: libata-scsi: bound the ATA passthru sense descriptor writes] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/80320b278fea07ffcda3f57b67b61658e0a4e1ca (7.3-rc5) +CVE-2026-98543 [bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/35d442ed1f86465e49df3119fb898f985186db13 (7.3-rc5) +CVE-2026-98542 [cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/31c88350b7dd1522792f726f79607f31bb55c50f (7.3-rc5) +CVE-2026-98541 [fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d22609f3d13fc5baacd92c222731b03c593401db (7.3-rc5) +CVE-2026-98540 [fprobe: Terminate the fgraph_data list when the reservation is not filled] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1d653a183973f5283a3db5a38cd5e195eb152244 (7.3-rc5) +CVE-2026-98538 [writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/f6988c90671e83db79df1b7b9d6fdb0e5947fd84 (7.3-rc5) +CVE-2026-98537 [workqueue: Fix NULL current_pwq deref in flush dependency check] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/db6365ced4d5855e321f772b240c0e473bcfcdd5 (7.3-rc5) +CVE-2026-98536 [writeback: report a Tasks-RCU quiescent state per cgwb drain pass] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/407a5d205179a4ab186571b0e16ec42725dc77bc (7.3-rc5) +CVE-2026-98535 [fsl/fman: Fix clk reference leak in read_dts_node()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/a644f09b2090ad22a13fbcf9d141084f573108ef (7.3-rc5) +CVE-2026-98534 [ipe: fix use-after-free when auditing a newly loaded policy] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/9814077275eca36ebf8d510d2f076d235ff9f51a (7.3-rc5) +CVE-2026-98533 [ipe: protect the dm-verity root hash with RCU] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2776e9c28513a1c855a94792b292cbcc533418c8 (7.3-rc5) +CVE-2026-98532 [ipv6: do not let ipv6_find_hdr() return an offset past the packet end] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/ee319bd3a0e976af5087cbe59ebc50a66f31d202 (7.3-rc5) +CVE-2026-98531 [ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/2d959c75c27f90e9ec489d18ce5ee6b852ad4741 (7.3-rc5) +CVE-2026-98530 [kprobes: Fix permanent hang when flushing the kprobe optimizer] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/5bfa9f1a9dcb6ecb607adbc1c0226605c972935b (7.3-rc5) +CVE-2026-98529 [gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/e9d810279f84b30738f7790c0ed15f8dd5b9024a (7.3-rc5) +CVE-2026-98528 [gpio: cdev: fix kernel stack leak to user-space in error path] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1feb5d39b05afd902ed9fc902ec5b15be03a4bdb (7.3-rc5) +CVE-2026-98527 [gpio: zynq: fix runtime PM leak on request error path] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/e9438ab5328a177c9c0e5df87eb92a7162841e98 (7.3-rc5) +CVE-2026-98526 [llc: reserve device headroom for allocated frames] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/72b5b9a28b996e09b8b5b944370c79851bb68f52 (7.3-rc5) +CVE-2026-98524 [rds: ib: Clear the sg list when mapping an MR fails] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/58eb1b3325edac42dc6df72c80962bd53a3c8ca7 (7.3-rc5) +CVE-2026-98523 [drm/client: fix restore of partially initialized client] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1fca688e9443003e33cf30453e7a7560367656c9 (7.3-rc5) +CVE-2026-98522 [drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/7b824c293a6b56de8285a97984c507cba56bc4c4 (7.3-rc5) +CVE-2026-98521 [drm/i915: fix incorrect RCU teardown order] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d2da6696e0c4e60414706e607029d0bb0330c67e (7.3-rc5) +CVE-2026-98520 [drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c3a31087b1c8df679b653c1a09d9abe5ff7ec8ef (7.3-rc5) +CVE-2026-98518 [drm/nouveau/dmem: pin VRAM for the whole registered range] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/64ca4cdd1031206424e6455f0ae4fb0560d8f46a (7.3-rc5) +CVE-2026-98516 [drm/nouveau: Fix bridge reference leak in nv1a_ram_new()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/67b4411538c8341692548429d43256f25be99f7a (7.3-rc5) +CVE-2026-98515 [drm/nouveau: fix double-free in nvif_vmm_dtor] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/97077ac87afe9e91ec074ef0be64454e7ccbf344 (7.3-rc5) +CVE-2026-98514 [drm/nouveau: Fix gem reference leak in validate_init()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/5ea72f7b7139b123713a7983448f910bc4514d9e (7.3-rc5) +CVE-2026-98513 [drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1e04611d3735543bd80a67d9d13dc13f503746fb (7.3-rc5) +CVE-2026-98512 [drm/nouveau: RCU-free the scheduler-containing nouveau_sched] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f7eae6d8d768fabd6b59779ca7da79e02c74e113 (7.3-rc5) +CVE-2026-98510 [drm/xe/vm: nuke PTs only after unlinking contested VMAs] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/24a22fb3c731474b68e986af6804db450fb88617 (7.3-rc5) +CVE-2026-98504 [PCI: of_property: Omit bus properties without a subordinate bus] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8805840aad73df7146778be243a196d48b4f6430 (7.3-rc5) +CVE-2026-98501 [HID: alps: fix use-after-free on input2 registration failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d3aba3442798ce4a4c8ce3104d7b286d61e605f9 (7.3-rc5) +CVE-2026-98500 [HID: hid-oxp: use cancel_delayed_work_sync() in remove] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/abd24922c2a9797d6184be0561dd85e7bcdfd091 (7.3-rc5) +CVE-2026-98499 [HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/9aa237cf66495b2426ddde8532e9b08a0ed83aaa (7.3-rc5) +CVE-2026-98498 [net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/0bf6bb567f0edaa771e7dd208ef98da50e6a4485 (7.3-rc5) +CVE-2026-98497 [net/mlx5e: fix swapped IPv6 IPsec policy masks] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/10de7ed8ef4840da9ca21de4c29578657ac367db (7.3-rc5) +CVE-2026-98496 [net: airoha: npu: cancel wdt_work after releasing the WDT IRQ] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4bdee8060d1e4581624e68fbd369b1afb14df4bc (7.3-rc5) +CVE-2026-98495 [net: arp: terminate device name before lookup] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/d8b6529e80bcb4fb8177121404cbb3377acaebd2 (7.3-rc5) +CVE-2026-98494 [net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/43e746821f5f5afbbf68e388bf9fbe221e03bfca (7.3-rc5) +CVE-2026-98492 [net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/23d42b9a3bcd55b17d3b371544fedc708c2397e9 (7.3-rc5) +CVE-2026-98491 [net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/26b2bd70d22457556e2fa01cbf1192cb1a94d619 (7.3-rc5) +CVE-2026-98489 [net: atl1c: fix soft lockup on out-of-range tpd_cons read] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/36c2009d90f2210ef92e6f4f2850e8b57b09e754 (7.3-rc5) +CVE-2026-98488 [net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/374bf9e4b90f979e052332c4faca2d745c491a12 (7.3-rc5) +CVE-2026-98487 [net: bridge: mdb: restart port group walk after deletion] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ab1404ac81154a89fb61ac50ae9a04cd8d4834dc (7.3-rc5) +CVE-2026-98485 [netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/82313c169eddc02b1bf5ba6b427803e272d3ec42 (7.3-rc5) +CVE-2026-98483 [nfc: fix use-after-free in nfc_get_local_general_bytes] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/dcab71a7011918f6fdba7adcec02d217dcb84b8d (7.3-rc5) +CVE-2026-98482 [nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/273f9d667cde649f8de9d72b1303cc2f4b658c50 (7.3-rc5) +CVE-2026-98481 [nfc: port100: reject frames whose declared length exceeds the received data] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/092c6a605cbd6414ef499834c2e0da69c2c3388e (7.3-rc5) +CVE-2026-98480 [nfc: trf7970a: power down on startup RX gain failure] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/d2acbde7e67df44efa8f0963462d1192e7694ffc (7.3-rc5) +CVE-2026-98479 [scsi: libiscsi_tcp: Check the data direction of a Data-In PDU] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/bce07e2f37b5e4a427d36fd6b1c14067b27591db (7.3-rc5) +CVE-2026-98478 [scsi: ufs: core: Keep internal commands dispatchable during error handling] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b52d695d062095327b944acf7daabbc816ab319b (7.3-rc5) +CVE-2026-98476 [s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/5b76268dac968612f7283d59b539036de955b7d9 (7.3-rc5) +CVE-2026-98475 [s390/cmf: Fix virtual vs physical address confusion] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f4d04425e66af2ecee9d1a49ae0484436f3c2fd1 (7.3-rc5) +CVE-2026-98474 [s390/pci: Fix missing device lock in zpci_report_status()] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0261aef4b15efcee2860ab857e5cb05e9bfa47b0 (7.3-rc5) +CVE-2026-98472 [KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/12c1f6e03f944e399bd2c88441dca5dc702b95a5 (7.3-rc5) +CVE-2026-98470 [KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/49d9d295d69d07e850cae35933ba8519e2915f26 (7.3-rc5) +CVE-2026-98469 [KVM: arm64: Fix AArch32 DBGBXVR<n> handling] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6b1bca1b1ab77f60a62087337bfe6e2f0efb9e6d (7.3-rc5) +CVE-2026-98468 [KVM: arm64: Fix spurious warning for benign stage 2 teardown race] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/38b70fc453c3112f1a62583b89903ae41116cc27 (7.3-rc5) +CVE-2026-98467 [KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4c74e233cdedd11592775fae2a6243e67ca3f891 (7.3-rc5) +CVE-2026-98464 [RISC-V: KVM: Synchronize hrtimer callback during teardown] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/aaad136d56d91252517272b68cd533e5714698d5 (7.3-rc5) +CVE-2026-98463 [sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/df5cdc2c832ca4e8a6d774596b9005558761a403 (7.3-rc5) +CVE-2026-98462 [Bluetooth: hci_conn: fix CIS hold ownership on reuse] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/e06d549fcd4a0ba381ed67ddf1ab3c7a6ca4314c (7.3-rc5) +CVE-2026-98461 [Bluetooth: hci_sock: validate event length before filtering] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/b0a6cf99afd57a39598b1beca0e86ef5004980de (7.3-rc5) +CVE-2026-98460 [Bluetooth: hci_sock: reject out-of-range OCF values] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/e93fad891c72deb84cae49430163b384ebcc92b1 (7.3-rc5) +CVE-2026-98459 [Bluetooth: ISO: balance the parent hold in hci_bind_bis()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4c94557dd02569efa6c1072a0439addaef9a5224 (7.3-rc5) +CVE-2026-98457 [Bluetooth: L2CAP: validate frame length before control and FCS access] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/6c78a213d9070b610c7f418af2c25b66180b7e37 (7.3-rc5) +CVE-2026-98455 [Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/46f8ffd0a1f1eb6cbc94946a92c11ef601e228a1 (7.3-rc5) +CVE-2026-98448 [xfs: release orphanage dir inode if chown fails] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1c32cdc986467eaffeedb6c5334852809555b82d (7.3-rc5) +CVE-2026-98447 [xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/fe2f9135df43db849e74f03956d322ac20b59af7 (7.3-rc5) +CVE-2026-98446 [xfs: don't let hidden_space go negative in xfs_metafile_resv_init] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/476582d754cdc5110f806001417fea6c77824c13 (7.3-rc5) +CVE-2026-98445 [xfs: don't let memory failures leak blocks and kill repairs] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ab1c416d2377cdc16123ef521aac4da1c468c3d4 (7.3-rc5) +CVE-2026-98440 [KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/e5843f4effaa2ffac3e789ecd4456403564961d4 (7.3-rc5) +CVE-2026-98652 [KVM: s390: Add missing srcu in kvm_s390_set_irq_state()] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/f3a557067d57ce6ae98d485c8009b223e16f5f36 (7.3-rc5) +CVE-2026-98647 [bpf: Fix divide-by-zero in btf_struct_walk()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/b0b3dc66529676228cb938cbcad66920f735c223 (7.3-rc5) +CVE-2026-98644 [bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/85136bf22404474a815fc0ed26ec0d1cbc1bc3f9 (7.3-rc5) +CVE-2026-98642 [bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/1c21452d02eec2f008e2c5535820f85adbd7587a (7.3-rc5) +CVE-2026-98634 [scsi: sd_zbc: Reject disks with too many zones] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/b6ec0f79745967c751c85df373062c8d15e45fc4 (7.3-rc5) +CVE-2026-98628 [bpf: Make post-verification instruction rewrites killable] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/261b61d3735b042ae25634f795c4540be0fc140c (7.3-rc5) +CVE-2026-98626 [bpf: Restrict CO-RE poisoning to relocatable instructions] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/394ae398337c5f87e567f6cd63b937fc2b2f6ddc (7.3-rc5) +CVE-2026-98620 [net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/310d1ac61a4d5a2ca8356a3a48d263acf54503ce (7.3-rc5) +CVE-2026-98617 [eth: fbnic: use the Rx queue napi pointer to find the napi vector] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b5d9e9d4d0c13bc8b60d8d97e7a07fb25fea639e (7.3-rc5) +CVE-2026-98616 [eth: fbnic: reset num_napi when the napi vectors are freed] + - linux 7.2.9-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4bcc4a92c603fe7f062cea22e20da2e0ad6b12c3 (7.3-rc5) +CVE-2026-98599 [bpf: Reject non-negative offsets in stack_slot_obj_get_spi()] + - linux 7.2.9-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/79a9172f3ab4ad8392c5e5c8944b9b7710ade620 (7.3-rc5) +CVE-2026-98598 [ipv6: Prevent rt6_insert_exception() for dying fib6_info.] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/0346ec2f080b40d95ed05b853bb9226289e75212 (7.3-rc5) +CVE-2026-98589 [bpf: Reject pkt arguments in mutating subprogs] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/a6c1edfbe240e4377038a0e1d233ad81fde9a21b (7.3-rc5) +CVE-2026-98586 [sctp: hold asoc or transport before mod_timer() in timer handlers] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/cae23ae3f7887a1cf8a75da38edcebeef695040f (7.3-rc5) +CVE-2026-98570 [net: ipv6: keep room for the mac header in dst_dev_overhead()] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/87cd6b717e4069dca34e0866e57eaeb44d3b173e (7.3-rc5) +CVE-2026-98568 [vxlan: use one headroom snapshot for neighbour replies] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/481506a756dcd828ef42391cb08f38d8d96d38fc (7.3-rc5) +CVE-2026-98565 [net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/c2cdef41e0b4d8ed23a5b41e6ad4e64594e055e4 (7.3-rc5) +CVE-2026-98562 [net: libwx: fix races in Tx timestamp handling] + - linux 7.2.9-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3173cba1170131816972ed2b6185cb970ba8b747 (7.3-rc5) +CVE-2026-98559 [net/smc: fix UAF on lgr list traversal in smcr_port_err()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/61cb282fe97b3b0ba32ca09417a693162bf4ae3f (7.3-rc5) +CVE-2026-98558 [net: flush skb_defer_nodes in dev_cpu_dead()] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/06e3f54e8b22040ada01a28343badf1990b4dd7d (7.3-rc5) +CVE-2026-98556 [gve: DQO: reject TSO packets with an out of range MSS] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/296c83b5ccc808c080865eb20fd7a477b0355bb7 (7.3-rc5) +CVE-2026-98551 [perf/core: Fill branch entries with a single assignment] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/24b620729e53d978b3e425f55bc66efd3bab1f59 (7.3-rc5) +CVE-2026-98549 [tcp: prevent collapsing skbs across boundary in rtx queue] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/fc6d80eb504458d6416b75a94188b268c95c6533 (7.3-rc5) +CVE-2026-98544 [bna: prevent IOC timer rearm during teardown] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/77b1718e39e5c9f6956fb60807326af20baf889d (7.3-rc5) +CVE-2026-98539 [fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/1abd643f3783ea8f8e273c18697ff0413aa92dc7 (7.3-rc5) +CVE-2026-98525 [mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/26cc0e69cce062cd3aa6fae33074684669c35a71 (7.3-rc5) +CVE-2026-98519 [drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/2b86ab1bd6673c525adda88819d7658ba9e784ec (7.3-rc5) +CVE-2026-98517 [drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3359a372efb6d585c97019ee1b7f1874442bcebe (7.3-rc5) +CVE-2026-98511 [drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux 6.1.190-1 + NOTE: https://git.kernel.org/linus/6a6870d3077faa501ca97760057ddca22b68418d (7.3-rc5) +CVE-2026-98509 [drm/virtio: fix memory leak of fence event on execbuffer failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/b74aad23d99b279bb34d135795f39a6d8ecdc075 (7.3-rc5) +CVE-2026-98508 [drm/virtio: fix NULL pointer dereference on fence allocation failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/846b3c64fe3e77d9db20a7e3e62dbbb637c773e1 (7.3-rc5) +CVE-2026-98507 [mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/b6ac0b3f6013c168f22cad97e79967accacb08e1 (7.3-rc5) +CVE-2026-98506 [mm/hugetlb: do not dissolve gigantic pages without runtime support] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/a363c62a653cc8b3e21da9545fa4e028ef50f9c3 (7.3-rc5) +CVE-2026-98505 [mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/39c0ceedd54557bdc1542de08d22b2ed33e534e4 (7.3-rc5) +CVE-2026-98503 [packet: use ubuf_info completion for TX_RING packets] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/9518405613863d0bf0700927a21367f5942cf058 (7.3-rc5) +CVE-2026-98502 [HID: alps: unregister DualPoint Stick input device on remove] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/aa9dde93e05a837645fdfd577eea71f0733f0694 (7.3-rc5) +CVE-2026-98493 [net: ipconfig: bound DHCP option construction] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/e47a1958e12abc3a17b5231a4f21c8f1bf662e08 (7.3-rc5) +CVE-2026-98490 [net: openvswitch: conntrack: fix helper UAF due to extensions realloc] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/1a4151e6be57b098b7a5ebfbde58585e83200cdc (7.3-rc5) +CVE-2026-98486 [net: ena: fix MMIO read buffer leak on probe failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/9476b4468862927297c94c440863cd8ed1e7cc83 (7.3-rc5) +CVE-2026-98484 [netfilter: nf_tables: skip expired catchall elements on insert and delete] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/70194dc37670bd08e44b471389861cc01bd3a3c9 (7.3-rc5) +CVE-2026-98477 [perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/36bb85cf36cab15fb611cb44b78a5df06e4e69a2 (7.3-rc5) +CVE-2026-98473 [s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/65e05ec252a9b79e75930d3c4dd42d8877db04c5 (7.3-rc5) +CVE-2026-98471 [KVM: SEV: Do cache maintenance on the source VM during intra-host migration] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/93de2a6a4b91b72607136dd656edf03fb399d27f (7.3-rc5) +CVE-2026-98466 [KVM: arm64: Transfer the hyp stack pages out of the host stage-2] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/3a8c562892b96f35bba1e00d5e455a15963bbb92 (7.3-rc5) +CVE-2026-98465 [RISC-V: KVM: Serialize IMSIC attributes with vCPU migration] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8ae12ccaec6ec74945d8c1ef39f2c1b8df779abc (7.3-rc5) +CVE-2026-98458 [Bluetooth: ISO: release unused CIS holds after channel attach] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0fcd4dad555c96e0bd3a1b8c569f989be85c7341 (7.3-rc5) +CVE-2026-98456 [Bluetooth: mgmt: fix race in read_unconf_index_list()] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/b5dbb41b212c50c095a4dbee3017a84fe94f033b (7.3-rc5) +CVE-2026-98454 [smb: client: fix create context out-of-bounds reads] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/67f4c1c6a1b51e203d986779299824d1c2c590a6 (7.3-rc5) +CVE-2026-98453 [smb: client: close handle after create-context parsing failure] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/566820af017e81497fb5e9d3ad6e7ffe2828bc8b (7.3-rc5) +CVE-2026-98452 [smb: client: clean up failed cached directory opens] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/d2ff5fb93ea83034025850266b5eed391f96b825 (7.3-rc5) +CVE-2026-98451 [smb: client: use finish_no_open() for non-regular inodes] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/e66cf1625ec4a3fe68346119f371def713fd0a4d (7.3-rc5) +CVE-2026-98450 [smb: client: close completed creates on compound wait errors] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/6c5c547f037bc18f0b8d0b5db5a648f8f630ce85 (7.3-rc5) +CVE-2026-98449 [smb: client: delete compound mids on send failure before unlock] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/8f6f8a48399f82f4a83f7b9f25b9707e0062a4f9 (7.3-rc5) +CVE-2026-98444 [xfs: drop dquot flush lock when we can't find a buffer to flush] + - linux 7.2.9-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ffb48dccce1960a9ea24463a2f3c21d124d6b672 (7.3-rc5) +CVE-2026-98443 [xfs: fix cursor and pointer handling when recovering iunlink buckets] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + NOTE: https://git.kernel.org/linus/65f39d09d73718611cee40399179323b5d4ead00 (7.3-rc5) +CVE-2026-98442 [net/sched: act_ct: fix helper UAF due to extensions realloc] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/dad19b59da050cb60d3f7023dac2a042a84bf0bd (7.3-rc5) +CVE-2026-98441 [net/sched: act_ct: avoid modifying shared unconfirmed ct entry] + - linux 7.2.9-1 + [trixie] - linux 6.12.113-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f85009dfcd65e5969526b0db7a49b5413746e630 (7.3-rc5) CVE-2026-98438 [mptcp: options: fix uninit-value in mptcp_write_data_fin] - linux 7.2.7-1 [trixie] - linux <not-affected> (Vulnerable code not present) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/064ca08d0ce32730bb7f049d0fafe233c8925988 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/064ca08d0ce32730bb7f049d0fafe233c8925988 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
