Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 07de53af by Salvatore Bonaccorso at 2026-10-09T21:03:46+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,33 @@ +CVE-2026-98384 [bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()] + - linux 7.2.9-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/01b245ba016d44861690594e10f67e026ce8552f (7.3-rc5) +CVE-2026-98383 [bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/e4a62833adff6ef0fe7c0b90393204fe3c26b5c5 (7.3-rc5) +CVE-2026-98382 [bpf: Reject dev-bound-only programs on other devices] + - linux 7.2.9-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6db1ce73e9853f533eb7f413f14ba00f8ec6f80d (7.3-rc5) +CVE-2026-98381 [veth: manage XDP program pointers during channel resize] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/7104a370714346b667712913dc16abf14bbc97ed (7.3-rc5) +CVE-2026-98380 [net/sched: reject IDR error pointers when deleting actions] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/c82b797abe668d0b668601a93ba2c0b071a63574 (7.3-rc5) +CVE-2026-98379 [netfilter: ip6t_rpfilter: reject routes without inet6_dev] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/1b9b5323725e458906c7620a3bc10398b51ad954 (7.3-rc5) +CVE-2026-98378 [bpf: Skip unsettled links in link iterator] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/50e80e2bb5e2be8515205b9c496b9640ddefa434 (7.3-rc5) +CVE-2026-98377 [vlan: require the MAC header to be present in __vlan_insert_inner_tag()] + - linux 7.2.9-1 + NOTE: https://git.kernel.org/linus/ab888242fce4f16f6c4d4c6ec53939ad36aa3b3a (7.3-rc5) +CVE-2026-98376 [bpf: Use array_map_meta_equal for percpu array inner map replacement] + - linux 7.1.3-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/593980175389a05793f6060aa20e626330960395 (7.1-rc5) CVE-2026-98375 - linux <unfixed> NOTE: https://xenbits.xen.org/xsa/advisory-522.html View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07de53afaf44d8c35b6ffc4025703b5457dbfb2c -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/07de53afaf44d8c35b6ffc4025703b5457dbfb2c You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
