Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 09dca2a1 by Salvatore Bonaccorso at 2026-10-06T11:26:36+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,717 @@ +CVE-2026-98372 [xfrm: iptfs: fix stack OOB read in iptfs_skb_reset_frag_walk()] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/d042487dc118e494db2e2c1382310255c90ff544 (7.3-rc4) +CVE-2026-98371 [xfrm: iptfs: fix runt reassembly panic from short inner tot_len] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/dc33262be1fe43d0eb0b84fb58c6ed42e2f64a8c (7.3-rc4) +CVE-2026-98361 [RDMA/rxe: Restore HMM_PFN_WRITE check in ODP write paths] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/769001ce838d907ecaa95f1d0a4e8fc86f761f9f (7.3-rc4) +CVE-2026-98356 [RDMA/bnxt_re: check create_singlethread_workqueue() in DCB setup] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6c368f7baaea63c1c7c28c6df271511f2a1562c9 (7.3-rc4) +CVE-2026-98350 [wifi: brcmfmac: cyw: pass PMKID to firmware if present] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/e2de8d5eb2984416affdd9559e55f37c7f1bbf47 (7.3-rc4) +CVE-2026-98324 [dmaengine: pxa: fix double counting of the hw descriptors] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f6504be006aa4bb4bd26285f410a885c17920d65 (7.3-rc4) +CVE-2026-98315 [ntfs: protect runlist updates with the runlist lock] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/91709ba5d6d709b2b663287b7e871e2c6b480502 (7.3-rc4) +CVE-2026-98310 [drm/xe/shrinker: Take a runtime PM ref before shrinking non-system memory] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/985862be16c7e4da808c51f393d631fb60c0be5c (7.3-rc4) +CVE-2026-98305 [net: dsa: mxl862xx: disable the stats poll on teardown] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/9e92ad4630f5dd1838ce6bbe6b1bd2c73d34de36 (7.3-rc4) +CVE-2026-98281 [futex: Also allocate private hash on vfork()] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b61b6f95d6722ddbbbd09e689fa41b55fd36f9a5 (7.3-rc4) +CVE-2026-98280 [drm/xe/i2c: Disable IRQ on unbind] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f0e9f963a3d209d7dc7ddd61116118ab5da2797d (7.3-rc4) +CVE-2026-98278 [net: remove WARN_ON_ONCE() from the dev_fill_forward_path() loop check] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/150dba2c69e93302af24a0c868eebe4871e2e107 (7.3-rc4) +CVE-2026-98274 [net: psp: avoid conflicts with skb->decrypted and sk_validate_xmit_skb()] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a41f24c612c3f5139a3143307eb85bbcf1bd4d07 (7.3-rc4) +CVE-2026-98268 [perf: Fix null pointer access in is_include_guest_event()] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/88aed0422f39b22406f35f1e758cea25e7bbcfb5 (7.3-rc4) +CVE-2026-98259 [fs/dax: check zero or empty entry before converting xarray entry] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8e2b8614039853e68d5338e37821e8bcee9fc05f (7.3-rc4) +CVE-2026-98258 [posix-cpu-timers: Prevent freeing a timer which is queued on the expiry list] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c21eaa72f02fc6e85621cbe09d303d8fb8bd39cd (7.3-rc4) +CVE-2026-98256 [signal: Prevent exec() race] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/d2710c8d938ae6a825a6463158e6e6f31eac792a (7.3-rc4) +CVE-2026-98250 [nfsd: fix handling of NFSEXP_PNFS in the netlink codepath] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/f76017a7663c4ce5e379f8a8d39f032bdb1fd865 (7.3-rc4) +CVE-2026-98244 [btrfs: clear free space tree creation state on rebuild failure] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3565893cc72cdf6b795cf6a33e7ff9605322334d (7.3-rc4) +CVE-2026-98243 [dma-buf/dma-fence: fix checking signaling bit for timeline and driver name v3] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3ed11c671ff7ec58c8fd96410233c677df23f407 (7.3-rc4) +CVE-2026-98242 [dma-buf: Fix silent overflow for phys vec to sgt] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/b344ca94e8cc85796f16ea25e2e5a8e0303fe813 (7.3-rc4) +CVE-2026-98240 [net: ip_tunnel: initialize `options_len` before referencing options] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/455ebeadf714f51e1dbbd6a022c74c9215b1cd76 (7.3-rc4) +CVE-2026-98226 [mm, swap: fix SWAP_USAGE_OFFLIST_BIT collision with real usage count] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/12e9ac7bc5b254048f886bf421e3a15491106c1f (7.3-rc4) +CVE-2026-98225 [mm/shrinker: fix bogus set_shrinker_bit() with cgroup.memory=nokmem] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/932cfb25e7ce98d1f93895671ec186a3087e4f80 (7.3-rc4) +CVE-2026-98224 [mm/vma: correctly unaccount on mmap_prepare() failure] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6cc27d82196385fe06853319f74312a7d8019726 (7.3-rc4) +CVE-2026-98223 [mm: filemap: retain mapped dropbehind folios] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/848d2ce2fce15fbdc083fbf9691bfa72911033c4 (7.3-rc4) +CVE-2026-98220 [sched_ext: Fix NULL sched deref in kfunc sub-sched error paths] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/0a85182723b65ad8bee8131bc38fcf0347d6679b (7.3-rc4) +CVE-2026-98219 [sched_ext: Close the pre-enable ops error claim window] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c7a1c6e8004ab12a9c9bfdcb603f60f9bf4a3cee (7.3-rc4) +CVE-2026-98183 [wifi: mac80211: avoid out-of-bounds read for empty PREQ elements] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/e6031f02269c0f51cf67886d177f02bc300b47cd (7.3-rc4) +CVE-2026-98178 [drm/amdgpu: Skip KFD mapping clear before initialization] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/7f9caa70aef0950e06d395ca0035831214d88187 (7.3-rc4) +CVE-2026-98166 [drm/ttm: fix swapped-out resources never leaving their bulk_move range] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3db7d7d583419f7b1f2e141e36418802dbb25cf8 (7.3-rc4) +CVE-2026-98165 [drm/amdgpu: restrict BAR0 fallback read to SR-IOV VFs only] + - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/bd1f08246b8a2564d8ac61df715b6bcd5f994729 (7.3-rc2) +CVE-2026-98370 [xfrm: fix compat ALLOCSPI request use-after-free] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d1ebd9081879fd9ae9c8fb7e8928f19cc88ae320 (7.3-rc4) +CVE-2026-98369 [xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d2f5082f9e84653fa1a9e8aebaaff23e688f5e19 (7.3-rc4) +CVE-2026-98368 [esp: downgrade zerocopy managed frags before mutating skb frags] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f89416eb3db151170a6f3c6dfc5239d26cdce4d2 (7.3-rc4) +CVE-2026-98367 [RDMA/siw: Clear association under lock if siw_qp_modify fails in siw_accept] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/32cd87f54dd1070020e664ccb0312a9f0fea79b4 (7.3-rc4) +CVE-2026-98366 [RDMA/rxe: validate access flags before swapping the MR's PD] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ae36a5b609ae79f4de966328b78d2584be9719a4 (7.3-rc4) +CVE-2026-98365 [RDMA/rxe: Fix integer overflow in mr_check_range() leading to OOB access] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d10e2a08799e858d3e71ea4169bcd018f216d444 (7.3-rc4) +CVE-2026-98364 [xfrm: hold net_device reference under RCU in bundle creation] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9fa903b24b1f46b4ff5443bcd4aca23e5c57f9c1 (7.3-rc4) +CVE-2026-98363 [firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/32471d84a487c7fd74532bc96be56f8028cf4a3f (7.3-rc4) +CVE-2026-98362 [clk: scpi: bound-check DVFS index in scpi_dvfs_recalc_rate] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/70f4b78d560e592cbf3325b162424737d032fc1d (7.3-rc4) +CVE-2026-98360 [RDMA/rxe: insert mcg into mcg_tree only after rxe_mcast_add() succeeds] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1caceeb2d74bbe88223aea55eb8626b4c5f076fd (7.3-rc4) +CVE-2026-98359 [RDMA/core: Reject unregistering netdevs in ib_get_eth_speed] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ef9fbe1b93f3b617b96e86d5cd76b3fa44514cb5 (7.3-rc4) +CVE-2026-98358 [IB/iser: reject a remote invalidation of an unregistered direction] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d85f0f0a7c85756fc992c70d869706f19dac9259 (7.3-rc4) +CVE-2026-98357 [IB/isert: wait for deferred control PDU completions before releasing the connection] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a8fe3dfce8c0d8a76dc3d8486a5bff5feebe156f (7.3-rc4) +CVE-2026-98355 [RDMA/rtrs: guard against null kobj name] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/99c24a8968ebef0573825b5cb89d5985d51635b9 (7.3-rc4) +CVE-2026-98354 [RDMA/mad: Fix receive buffer leak when PKey enforcement fails] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/3476c28c9addfa253f505e6bd87f1f5598b961d0 (7.3-rc4) +CVE-2026-98353 [RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/00baeade709fb66da647e8327e8398bb532e30f7 (7.3-rc4) +CVE-2026-98352 [RDMA/rtrs-clt: Fix CQ pool leak when connect is interrupted] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/2ae16aaa78b5edc6e6d0904c84fd9cdfb762bcda (7.3-rc4) +CVE-2026-98351 [wifi: virt_wifi: free skb when disconnected] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f9edf7cf63b96d2b776fca8d258d3c5256e40c8e (7.3-rc4) +CVE-2026-98349 [wifi: libipw: reject too-short beacon and probe responses] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5ce5721e8cbe3e80db8f43851cc2a2a92485ef4b (7.3-rc4) +CVE-2026-98348 [wifi: libipw: reject too-short association responses] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/adb7118b7d2cfd7e8213c17d7d2829f353017754 (7.3-rc4) +CVE-2026-98347 [IB/IPoIB: Avoid restoring OPER_UP after multicast flush] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9a141d3dc869d18b2eab35e999f4790a9b84e40f (7.3-rc4) +CVE-2026-98346 [wifi: cfg80211: don't get the radio mask for netdev-less wdevs] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a7783e585360ee05dfe21d3173dbbe985c94f29e (7.3-rc4) +CVE-2026-98345 [wifi: cfg80211: check IP header size in cfg80211_classify8021d()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/48b2c5c628b09cf36cbeca53e0432fc2a7518be7 (7.3-rc4) +CVE-2026-98344 [dmaengine: Fix device kref underflow in dma_chan_put()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/44dab659064eb5c10adb0306510eebe848ed592d (7.3-rc4) +CVE-2026-98343 [dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e873c74132f0c5f1452816cd9bb26208f0bba1e1 (7.3-rc4) +CVE-2026-98342 [dmaengine: wait for RCU readers before releasing dma_device] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/dc750422170a563c7a81f6e49d36bb02c62ae37f (7.3-rc4) +CVE-2026-98341 [wifi: cfg80211: don't free driver-owned scan requests] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/dab68a74e90b8e07f08ed9deaa5884857a3cfe89 (7.3-rc4) +CVE-2026-98340 [wifi: cfg80211: only group hidden BSSes with beacon entries] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/068843ed0902c552a13860c5ec6b2ca65b57a065 (7.3-rc4) +CVE-2026-98339 [wifi: cfg80211: don't filter by BSS type when removing stale entries] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/b377e1000d963e7182a987082b4b06580bd7ac84 (7.3-rc4) +CVE-2026-98338 [wifi: cfg80211: ibss: ref BSS entry for joined event] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/708f9d43d6a2eb9c6b83fe62af628de9dffd9314 (7.3-rc4) +CVE-2026-98337 [wifi: mac80211: don't start a ROC while scanning] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/733f0fde95392ed5f61a4e36aee661ea8d0e8581 (7.3-rc4) +CVE-2026-98336 [wifi: mac80211: don't offload TC setup on AP_VLAN interfaces] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/362bd5bce29ed0f6fd3d39a7065567777d70606e (7.3-rc4) +CVE-2026-98335 [wifi: mac80211: abort chanswitch when leaving a mesh] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ac7472a24bd433b81c06582835dd1d5547c10da9 (7.3-rc4) +CVE-2026-98334 [wifi: mac80211: reset state when starting AP fails] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/3f28551d0241254a75626d868041c6340285088b (7.3-rc4) +CVE-2026-98333 [wifi: mac80211: reset the LED state when ifup fails] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/78183e8331958fda11cd2b6850bb424a9747c4b2 (7.3-rc4) +CVE-2026-98332 [wifi: mac80211: only operate on TDLS peers in the TDLS code] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/6f0a100df8539ce90f37c14e1945f396ca2410bc (7.3-rc4) +CVE-2026-98331 [wifi: mac80211: unlist vifs when their netdev is unregistered] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/eee2efd82867b623982ac51925b5a1812a74c50d (7.3-rc4) +CVE-2026-98330 [wifi: cfg80211: get the wiphy out of a dying network namespace] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4635b1a1c1d693178a537446a6e09963f0fdae52 (7.3-rc4) +CVE-2026-98329 [wifi: mac80211: don't allow injecting frames wider than the chanctx] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e14bf37bb2b3853012ff160131d1c6233f7a9cc9 (7.3-rc4) +CVE-2026-98328 [wifi: mac80211: add HE 6 GHz capability in the scan elems len] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/cd54bf333f5631d3630bab0a832e9ae648f73515 (7.3-rc4) +CVE-2026-98327 [wifi: mac80211: mesh: reset the CSA state when leaving] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/860134b3af77970e006feab7e5decb8c84771c7f (7.3-rc4) +CVE-2026-98326 [wifi: mac80211: mesh: release the channel if start fails] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ae97fff6495a8764bc0ef281cfe5444f701e527f (7.3-rc4) +CVE-2026-98325 [wifi: mac80211: set up the TX info early to fix failure paths] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/50d3d79dc0743b616afb00d01a626c76758721f7 (7.3-rc4) +CVE-2026-98323 [RDMA/siw: Bound fragmented header copies by the remaining length] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9ff797e516dbc1ecb73701ec4c24055712d44411 (7.3-rc4) +CVE-2026-98322 [netfilter: nft_nat: fully initialise new_addr in netmap setup] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d313499df66159b4b7971d760d16729598ab7e5a (7.3-rc4) +CVE-2026-98321 [netfilter: nf_nat: unregister and release hooks on error] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/cbdd39ce42530a193c56beb206a3356cb6d01016 (7.3-rc4) +CVE-2026-98320 [netfilter: flowtable: hold reference on ct until flow is released] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e75a9fa1d44bcbd66ea02e8781bcca6ea4076e0d (7.3-rc4) +CVE-2026-98319 [drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9eb1a393c89a79c4210230d23e7d88d239c61d7b (7.3-rc4) +CVE-2026-98318 [smb: client: validate absolute native symlink targets before NT fixups] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/23c240d9509e15f72e4112fc95f0160ab32ec430 (7.3-rc4) +CVE-2026-98317 [neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/6d79b223ec44ada58ad37db42f539b60985a7722 (7.3-rc4) +CVE-2026-98316 [ALSA: bcd2000: Fix race between rawmidi and disconnect] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/221253723dc58bb901c3f27a7659823e63fc598c (7.3-rc4) +CVE-2026-98314 [ALSA: pcm: set timer->private_data before registering the PCM timer] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1e713f9bb2ac583521f06b0eb4e22440b1e3d078 (7.3-rc4) +CVE-2026-98313 [drm/msm/dp: skip PUSH_IDLE when the link was never enabled] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e249a6e2a130c08bb4d8b0a55cbe29754307e5c9 (7.3-rc4) +CVE-2026-98312 [ALSA: 6fire: fix OOB write from device-reported iso length] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1589afe2d099d3e817873bc474676968d7080410 (7.3-rc4) +CVE-2026-98311 [wifi: virt_wifi: don't transfer operstate before register] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e5c8d7acd31b27057ea42cd405d0b3ece097bc89 (7.3-rc4) +CVE-2026-98309 [drm/vc4: Use managed KMS polling to fix UAF on unbind] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/073a30d75f309812ed61af134f24ffef4107b13a (7.3-rc4) +CVE-2026-98308 [ALSA: hda: trace PCM open only after assigning a stream] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c9e6e5f38bf75276605f1952b22285f5f3abcaff (7.3-rc4) +CVE-2026-98307 [wifi: ath11k: cleanup arsta in ath11k_mac_peer_cleanup_all()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/820b8cff81c796ba20573e04722ab62500713f97 (7.3-rc4) +CVE-2026-98306 [seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/7616242a2b37883f7322aaa1d2bd6cd0fed28315 (7.3-rc4) +CVE-2026-98304 [net: bcmgenet: restore the hardware filters on open] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/23ca4ddc4fce2c233a49e9fd34d4b5b02bd7324e (7.3-rc4) +CVE-2026-98303 [ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/2998147b59c9df0a51477c7a6b3d1f0ba3127dd4 (7.3-rc4) +CVE-2026-98302 [net: fddi: skfp: fix NULL deref when setting the MAC address while down] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/7c8810c2e69c3d9ca6df870b40ae9218e50b4fb1 (7.3-rc4) +CVE-2026-98301 [net: bridge: mst: move switchdev call outside rcu] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/18a6fe05fb6e18de29fa90d388bb34044114b3d8 (7.3-rc4) +CVE-2026-98300 [tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv().] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8e759cd1f6444a946bd1fd2b2b29eea582eea1d5 (7.3-rc4) +CVE-2026-98299 [tcp: do not let tcp_rmem be set below 4096] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/83a945a529d6e002dd7339c532288a931f463dba (7.3-rc4) +CVE-2026-98298 [dmaengine: mmp_pdma: fix wrong sg length in mmp_pdma_prep_slave_sg()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/075bc7b1d3dde5ed43fbaabbc1a69f09b7fc3a47 (7.3-rc4) +CVE-2026-98297 [Bluetooth: hci_core: Fix queuing tx_work after workqueue is drained] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6610c6fe4b8936c232048e6049bf77c70a6f759c (7.3-rc4) +CVE-2026-98296 [Bluetooth: btintel_pcie: validate TX skb length in send_sync] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4b837ebd0ea21ae5cc26f02dc042edc6fe7b46b9 (7.3-rc4) +CVE-2026-98295 [Bluetooth: coredump: Quiesce dump work on unregister] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d236517c264e41dc09833c708ef23bccb7a91219 (7.3-rc4) +CVE-2026-98294 [Bluetooth: hci_qca: Do not write to the serial port after it is closed] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4e93c65f87825e1e012bce56615320aeb123815d (7.3-rc4) +CVE-2026-98293 [Bluetooth: ISO: Fix parent socket leak in iso_conn_ready()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ca18ee413a7cb6f09885778039225e58bae0d607 (7.3-rc4) +CVE-2026-98292 [Bluetooth: btmtksdio, btmtkuart: validate WMT event length before struct access] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8879e3e0a84a86954c855caceead4867e74a9a27 (7.3-rc4) +CVE-2026-98291 [Bluetooth: btintel_pcie: fix off-by-one bounds check in RX submit] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2ea5a87a5a7ae58cb2662b8a7d06f209383e1765 (7.3-rc4) +CVE-2026-98290 [Bluetooth: RFCOMM: avoid socket lock inversion in listener cleanup] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/801fb950cae7048eb7d83b18857d1ca37b8cd5a4 (7.3-rc4) +CVE-2026-98289 [af_unix: Unify scc_index when finalising SCC in __unix_walk_scc().] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4a4263dfeabad72f95e8ab6e15146861fa4144dd (7.3-rc4) +CVE-2026-98288 [net: stmmac: fix TSO header length truncation] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/15989abd74f16f44bf953d056b95f1d2fda9b0cd (7.3-rc4) +CVE-2026-98287 [pppoatm: ensure a writable skb header and linear data] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ecc7253683a3c55caa868ce0ee530fcb0044bd3c (7.3-rc4) +CVE-2026-98286 [drop_monitor: use timer_shutdown_sync() to prevent timer rearming during teardown] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c391a40f71886b28c082b47270f0e856fa3e1150 (7.3-rc4) +CVE-2026-98285 [net: bridge: vlan: fix bugs caused by switchdev deletion errors] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/2842ce397dd09882530b42f7fdb0c855767eb24e (7.3-rc4) +CVE-2026-98284 [netlink: do not free nlk->groups while lockless readers can use it] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ceac0de741bfb47ca255eee075257b3bb31f0651 (7.3-rc4) +CVE-2026-98283 [KVM: PPC: Book3S HV: fix use-after-free in kvmhv_emulate_tlbie_all_lpid()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/51938dfa8a51a4f85328413fca9b6e21f9d2d088 (7.3-rc4) +CVE-2026-98282 [powerpc/iommu: Fix the overflow validation in iommu_tce_check_ioba] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/0b271f7d7f5ed45bc498a03ce0aa9cfd8402fc71 (7.3-rc4) +CVE-2026-98279 [btrfs: handle lack of space when cleaning up verity items] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/76bf149cd0298544631e756670b89c399c7acbca (7.3-rc4) +CVE-2026-98277 [eth: fbnic: ring the doorbell if a burst ends in a drop] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/490599ab23134962a6d18a024e84541d77bdb999 (7.3-rc4) +CVE-2026-98276 [net: lock the socket in sock_gettstamp()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9ed55f3dbef4f4adfe65eb03b0c35c53229a8490 (7.3-rc4) +CVE-2026-98275 [net: ethernet: cortina: Ack RX overrun interrupt correctly] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1dd85662fee6e2ac580b1c4f9a0c0a7ae6e31f0e (7.3-rc4) +CVE-2026-98273 [x86/kprobes: Fix crash when probing CS CALL instructions] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a5f7a5bb3b7f28ba7e4fa246775b29a0e5537255 (7.3-rc4) +CVE-2026-98272 [net: mvpp2: prevent buffer overflow in page_pool allocation] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/14cb1e7702e5cb3c58888f6aed498381a73927d2 (7.3-rc4) +CVE-2026-98271 [net: skbuff: do not leave stale header offsets after pskb_carve()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a5117e1eccac6ee3bd4aed7cacf8ebcb6b3eb309 (7.3-rc4) +CVE-2026-98270 [drm/amdgpu: check ras and obj before dereference] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/723d4dc628d764b19cf9efca14b82cca5ff020c9 (7.3-rc4) +CVE-2026-98269 [btrfs: abort transaction on failure to update inode for hole punching and reflinking] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/97fcd34aa9fd73cefe3120ac9a82ca9d7763922f (7.3-rc4) +CVE-2026-98267 [9p: Fix v9fs_issue_write() to update i_size and remote_i_size] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c60ae98c5aa64021751b38ab1313b19d620bf640 (7.3-rc4) +CVE-2026-98266 [ALSA: core: Fix potential UAF after asynchronous card release] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/fd95e68df6fe66344161a1329cbe5e5805e7b704 (7.3-rc4) +CVE-2026-98265 [ALSA: usb-audio: Clamp implicit feedback packet count to URB capacity] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/76a986c980bb502c7688d605ac7a67fd257a9a1b (7.3-rc4) +CVE-2026-98264 [ALSA: virtio: reset device before deleting virtqueues] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/6c05d00af307560e6a9f1631d6270d3df5aa2272 (7.3-rc4) +CVE-2026-98263 [ASoC: codecs: rt712-sdca-dmic: fix uninitialized stream_config->type] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/03a5699a0a04309c597683967aaaf25d1e555ea2 (7.3-rc4) +CVE-2026-98262 [ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/82e47533221d4746947b74d2e79a478c36c6433a (7.3-rc4) +CVE-2026-98261 [cifs: Fix server use-after-free in cifs_chan_skip_or_disable()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/717e0a25036b6c92cecace30913b2d874a4c22b8 (7.3-rc4) +CVE-2026-98260 [exec: Cleanup POSIX timers right after de_thread()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/acb03d3881818581052924a9bbbe92b8741ed448 (7.3-rc4) +CVE-2026-98257 [rds: ib: use rds_conn_drop() on protocol version mismatch] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f97d8c7bab7843631206a114986c9059da03efeb (7.3-rc4) +CVE-2026-98255 [tcp: exclude old ACKs from tcp fast path] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f81e6c3fb06327bc49cdd6e559845293ba06a704 (7.3-rc4) +CVE-2026-98254 [swiotlb: use the adjusted address for the highmem page lookup] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/b7d7914a9ae3097e63d113007e4fb44d33d515b1 (7.3-rc4) +CVE-2026-98253 [RDMA/ucma: Serialize join and leave on copy_to_user failure] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/662ade4de9ff5eceb0820a9f8e9fac70ba6a815b (7.3-rc4) +CVE-2026-98252 [RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/33fb59da49c4c3f5c2ec9f9d4447a56857a02c02 (7.3-rc4) +CVE-2026-98251 [openvswitch: avoid reallocating confirmed conntrack labels] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/3f118c8217c109fd13ca61caa301d72c483897ef (7.3-rc4) +CVE-2026-98249 [arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/955d86e5f3b95b731991fdb84966c50b16314629 (7.3-rc4) +CVE-2026-98248 [arm64: percpu: Fix LSE operations on {8,16}-bit types] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8cf2093f5372952a9ebc805c418d45df7112cd14 (7.3-rc4) +CVE-2026-98247 [Bluetooth: hci_codec: validate vendor codec count length] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d0795cfd6f655f4de84868a4f4bb41a03f037b3d (7.3-rc4) +CVE-2026-98246 [Bluetooth: hci_sync: Serialize local codec list cleanup] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9a10987a2f160a44a638c9a35994ca6e3089696e (7.3-rc4) +CVE-2026-98245 [btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/0594e3423f4ba3137c734371169491f9a98e9af4 (7.3-rc4) +CVE-2026-98241 [ipv6: xfrm: use full sockets in local error paths] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/6973a21ee73c5567f883813c8ef414774b45892f (7.3-rc4) +CVE-2026-98239 [net: lan743x: fix RX checksum use-after-free] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a9ce4053dc945c5372dedba5017ee675b30dc0c5 (7.3-rc4) +CVE-2026-98238 [net: wwan: t7xx: validate the netif index in t7xx_ccmni_recv_skb()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c7ead9704249d57d4693a04697e3bbd285138fa9 (7.3-rc4) +CVE-2026-98237 [net: wwan: mhi_wwan_mbim: guard against a cyclic NDP chain] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5d063822ac5184939c1ed377a339a01d8ae814e8 (7.3-rc4) +CVE-2026-98236 [net: wwan: mhi_wwan_mbim: check skb_copy_bits() return value] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/31550d585589fde1ae95bf7f7a8188b2d2fdf1c7 (7.3-rc4) +CVE-2026-98235 [net/sched: act_api: release tail references on DELACTION failure] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6e05e46fa821a5c1b281355f1f622ac76cb6080a (7.3-rc4) +CVE-2026-98234 [net/sched: hhf: cap hh_flows_limit at change time] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/2cef2588c995722a901368def30befeef9ae55c6 (7.3-rc4) +CVE-2026-98233 [net/packet: clear RX owner on VNET header error] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/33ff111d7ba3beb86e28938d6382bb5beabd865a (7.3-rc4) +CVE-2026-98232 [scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3d676e458fe0c566f5a62753dc696b6a862fc412 (7.3-rc4) +CVE-2026-98231 [xfrm: serialize state GC with device state flush] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/89fefad9f971bc637fb22373078144f2563c4be9 (7.3-rc4) +CVE-2026-98230 [xfrm: use hlist_del_init_rcu for state_cache and state_cache_input] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2afb8dc1f4390f164db8352f8e685e126e9db566 (7.3-rc4) +CVE-2026-98229 [xfrm: save input state data before secpath resets] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/3cf5cdecd99c9c186a5ea518d93bbf3045b6e3aa (7.3-rc4) +CVE-2026-98228 [mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/bbc448c541ed90d52f9ec22f17394304e3bf170e (7.3-rc4) +CVE-2026-98227 [memstick: ms_block: destroy io_queue workqueue on removal] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/90af7fde083e1b22c349c3a8b1626728e44e474c (7.3-rc4) +CVE-2026-98222 [KEYS: encrypted: fix integer overflow of datablob_len] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8697c431e297eb0d0ab13dda6bc172b48a34f05c (7.3-rc4) +CVE-2026-98221 [KEYS: trusted: Fix tpm2_load_cmd() boundary check] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/114f00d738f15dd8c7318369edcdc53dd6d08763 (7.3-rc4) +CVE-2026-98218 [i2c: atr: fix dangling adapter pointer on add failure] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ad34235808b63a70ca4989b7a2852923193d06ef (7.3-rc4) +CVE-2026-98217 [IB/mlx4: Fix use-after-free on pkey sysfs registration failure] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1af874e9f4ce22ccf8b10ab5462f32c70d3be21a (7.3-rc4) +CVE-2026-98216 [IB/hfi1: Fix the PIO_CRED credit-return mmap] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/62f0f34fbd2b2d5653d33d3b9d42fdcabb1c0101 (7.3-rc4) +CVE-2026-98215 [selinux: preserve user SID across nested backing files] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/8c0c602202b9a4909b00bc3354e3c0355bc69e65 (7.3-rc4) +CVE-2026-98214 [selinux: recheck intermediate backing files on mprotect()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/78fc54b934bfb2c18aad8154c7302067146946f9 (7.3-rc4) +CVE-2026-98213 [mmc: core: Cancel SDIO IRQ work before freeing host] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/6feadbecdae60a6324c967f3b1493741083793a3 (7.3-rc4) +CVE-2026-98212 [mmc: hsq: Fix use-after-free in retry work] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5d132990475f02cfa1debe03d50b479432864ebd (7.3-rc4) +CVE-2026-98211 [mmc: mmci: Fix use-after-free in busy-timeout work] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/2b19cf3e50cddaff07b657dae1a8f30f06032852 (7.3-rc4) +CVE-2026-98210 [mmc: mxcmmc: cancel data work and watchdog on remove] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d3a421c82412344022982d5b91ba23194a0a6f29 (7.3-rc4) +CVE-2026-98209 [mmc: sdhci-of-aspeed: Remove children before releasing SDC resources] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4396d70bb7fec531bcf934fed016b2f3300c670b (7.3-rc4) +CVE-2026-98208 [mmc: sdio_uart: fix xmit_fifo leak when the port table is full] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/53823e25793a97d07e6e98e0904bbf74cac8bc76 (7.3-rc4) +CVE-2026-98207 [mmc: spi: reset bytes_xfered before retrying CRC failures] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8b0cc8707f65e0f51912e764e1b309b2559db1ec (7.3-rc4) +CVE-2026-98206 [Input: cyttsp5 - clamp the HID report size before memcpy] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/85f080fb87ed5cd3e46121be677f52c82f26a0ab (7.3-rc4) +CVE-2026-98205 [Input: evdev - zero absinfo before partial copy in EVIOCSABS] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8b852965b8eaf910c314dc346967ed82c8d4f235 (7.3-rc4) +CVE-2026-98204 [Input: rmi_smbus - fix out-of-bounds read in rmi_smb_write_block()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/51cfe54f815ae175c7d1126b983d4d7c89715004 (7.3-rc4) +CVE-2026-98203 [Input: soc_button_array - check btns_desc->package.count] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/fb5022278b6ea7f1838e3ef78028d5d5e3375f65 (7.3-rc4) +CVE-2026-98202 [Input: synaptics-rmi4 - fix GPF in suspend and resume when unbound] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/fe10579b6dc3f0dac61e51e1797cacbba5039ac2 (7.3-rc4) +CVE-2026-98201 [Input: zero ff_effect before compat copy in input_ff_effect_from_user] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f84819ef8d66931ee3998fee3c4f03230f4cb6cc (7.3-rc4) +CVE-2026-98200 [hwmon: (hp-wmi-sensors) Fix use-after-free in fungible_show()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/e6cb0b4d4ecb8e71fd2200d907ab2e9663356f69 (7.3-rc4) +CVE-2026-98199 [hwmon: (pmbus/core) increase number of phases and add new mask] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/06bd6794b5fd2163880ac3bfe973d4cc61f359f3 (7.3-rc4) +CVE-2026-98198 [hwmon: (pwm-fan) Stop RPM timer before freeing tach data] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/26d5ff79768548efb1e604bb6e8697c101e06269 (7.3-rc4) +CVE-2026-98197 [hwmon: (w83791d) remove fan/pwm 4-5 sysfs group on remove] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/0ff9c7775e51ac6d47b1bb5c46f06b1434fe58a8 (7.3-rc4) +CVE-2026-98196 [wifi: brcmsmac: fix UAF in brcms_free_timer()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/1eeca1d5e0920fbdad6449768fd2d4364e714180 (7.3-rc4) +CVE-2026-98195 [wifi: iwlegacy: fix broadcast stations deallocation] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/b5526b780f8b297a76030410b96ba29153afb98f (7.3-rc4) +CVE-2026-98194 [wifi: libertas_tf: fix UAF in lbtf_free_adapter()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/bbb9a0ab96d44a64529aafc7a16de460a1712f6a (7.3-rc4) +CVE-2026-98193 [wifi: libipw: reject TKIP frames without a full MIC] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/06f42accaf3c6aecab1dcc57f68dde6c06c8b380 (7.3-rc4) +CVE-2026-98192 [wifi: wcn36xx: Fix potential use-after-free in TX ack timer teardown] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d9be5e75530772fc31637070d51e5717d6aeaa2a (7.3-rc4) +CVE-2026-98191 [wifi: wlcore: release runtime PM ref on regdomain config failure] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8a1f3cf89ddcc700e25afe42cfad333059adcc94 (7.3-rc4) +CVE-2026-98190 [wifi: wilc1000: fix out-of-bounds read in P2P public action frames] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ba6cb7c0868a412c2eb68e8efd5aa38bfb258a14 (7.3-rc4) +CVE-2026-98189 [wifi: wilc1000: fix RX buffer OOB-write in wilc_wlan_handle_isr_ext()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c1ba7f7f18465e259cf1b4d9c73fc73853d7f790 (7.3-rc4) +CVE-2026-98188 [wifi: p54: validate curve data length in the calibration curve converters] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/ce858fa6b8a214dee5adb82358885fa024cdd887 (7.3-rc4) +CVE-2026-98187 [wifi: p54: require a full exp_if record in PDR_INTERFACE_LIST] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d8efd84f49379ed28624098821f80e992657d935 (7.3-rc4) +CVE-2026-98186 [wifi: mwifiex: bound the pairwise-cipher OUI walk to the IE length] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e667aee1c192d67d27c803007bfa9c6e0873e959 (7.3-rc4) +CVE-2026-98185 [wifi: mwifiex: validate scan response extents] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/3687d7d48070838cc2953431b3a27717cab0aaf6 (7.3-rc4) +CVE-2026-98184 [wifi: mwifiex: prevent authentication frame length truncation] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/fa00193eb991f92b007aefe7afb6a7566976dacf (7.3-rc4) +CVE-2026-98182 [wifi: mac80211: refuse to make a monitor active when it has no queue] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/2b04d6556964ae9f89819b86a0a7801e39c3aae5 (7.3-rc4) +CVE-2026-98181 [drm/gud: fix out-of-bounds write in gud_plane_atomic_check()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/59ced288fcba9e91bd38e61a972ad782c4edb7d0 (7.3-rc4) +CVE-2026-98180 [drm/msm: RCU-free the scheduler-containing ring and VM objects] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/01c8d1f385f788f1bbbbb7687c4386d614281218 (7.3-rc4) +CVE-2026-98179 [drm/amdgpu: fix rmmio iounmap skipped on device removal] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5155002b03b24ba3ef91c5c313b8cf0171b24904 (7.3-rc4) +CVE-2026-98177 [drm/amdkfd: Avoid integer underflow in EOP ring size calculation.] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8ee521b8b189799e361d4233c5180ba56656d4d4 (7.3-rc4) +CVE-2026-98176 [drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c883d0a132d430ef7ebb23fd94323be94d0fbdb8 (7.3-rc4) +CVE-2026-98175 [smb: client: cancel reconnect work in clean_demultiplex_info()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/c65eae6f61d1778ff7a82e4aae4080e26f486af1 (7.3-rc4) +CVE-2026-98174 [smb: client: fix rlist race and missing initialization] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5f270f091256da1338c3631083e15d7f83cc05e1 (7.3-rc4) +CVE-2026-98173 [smb: client: fix use-after-free of iface in cifs_try_adding_channels()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d034e836eefd7ce75e588f7031cffbeec594f5ac (7.3-rc4) +CVE-2026-98172 [smb: client: fix smbd_connection leak on cifs_get_tcp_session() error] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e75c96157d45e498970158c8f7373d90102e33b9 (7.3-rc4) +CVE-2026-98171 [smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/05762c5bc1cfdcac36747994fde2c04387a457f1 (7.3-rc4) +CVE-2026-98170 [smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/eeb5ef6083e1cefa2ef75041b5597ff228b8d7bb (7.3-rc4) +CVE-2026-98169 [smb: client: fix potential OOB read in smb3_enum_snapshots()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4775c3b7a597907e0b97556c7986fda238a377ae (7.3-rc4) +CVE-2026-98168 [smb: client: fix reparse buffer bounds in cifs_query_reparse_point()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/5f0306e731e2f46e91419eae57eee3a241c055e0 (7.3-rc4) +CVE-2026-98167 [smb: client: fix server->total_read for compound encrypted PDUs] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/f73726b83e4756fdaa099e1bc1143293bd57ad79 (7.3-rc4) CVE-2026-97300 (Unauthenticated Broken Access Control in WP Event Solution <= 4.1.25 v ...) NOT-FOR-US: WordPress plugin or theme CVE-2026-97257 (Deserialization of Untrusted Data vulnerability in PressTigers Simple ...) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/09dca2a1b3ff1a7c3c98d58de4abd277ecb1230a -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/09dca2a1b3ff1a7c3c98d58de4abd277ecb1230a You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
