Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: b1bd8410 by Salvatore Bonaccorso at 2026-10-14T20:24:54+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,94 @@ +CVE-2026-98418 [sched/core: Avoid false migration warning for proxy donors] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/fe3c73d7bc769e7afc252f867a3421fe168b898d (7.3-rc4) +CVE-2026-98415 [soc: samsung: exynos-pmu: fix use-after-free of interrupt generator node] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/4dd1999783d7d12434006289338373e49492dc96 (7.3-rc4) +CVE-2026-98414 [memcg: avoid charging the root memcg from obj_cgroup_charge_pages()] + - linux 7.2.8-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6e673d0879ef78c395cfe0d3ba316690a60055d8 (7.3-rc4) +CVE-2026-98405 [smb: client: fix missing iov bounds check in parse_posix_sids()] + - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/ +CVE-2026-98431 [RDMA/uverbs: Fix mmap_lock/disassociation_lock circular dependency] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/a44a3f175eaee7e5aeb6a8fed381c4a0d5f49236 (7.3-rc4) +CVE-2026-98430 [RDMA/efa: Keep admin queues alive while IRQ is registered] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e08aca85c02ff290f785f07acae758f0daf5f49e (7.3-rc4) +CVE-2026-98429 [RDMA/efa: Keep EQ resources alive while IRQ is registered] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e22a3627b7151754f07f90ea3d1ab6e85f5d93f4 (7.3-rc4) +CVE-2026-98428 [ALSA: usb: 6fire: Avoid embedded URBs] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/9fe49dbc023e82dfaee7b245997d820d01742a9a (7.3-rc3) +CVE-2026-98427 [net/sched: codel: bound the dropping loop per dequeue call] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/7f4a5ec6258fd7c92633ec4b0493fc51166d9398 (7.3-rc4) +CVE-2026-98426 [wifi: mwifiex: fix IRQ leak using wrong index in MSI-X error path] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a3d722190cdef18da4878b5efc27c3c386dda248 (7.3-rc4) +CVE-2026-98425 [wifi: mac80211: don't warn when an IBSS has no channel to scan] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a7491b7efbd9136b120a12ed72af9c12121dd134 (7.3-rc4) +CVE-2026-98424 [wifi: cfg80211: undo netns switch if renaming the wiphy fails] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/a41bd1938a9bfe226d444172a7e20e4bd5097960 (7.3-rc4) +CVE-2026-98423 [wifi: mac80211_hwsim: don't hand frames to mac80211 while stopping] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/87840d4a3a21b1c19b867a80e16ba69dff284de2 (7.3-rc4) +CVE-2026-98422 [wifi: mac80211: reset the AP_VLAN tailroom counter on ifdown] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/4504f3960dc4501c73be9f99eabda2e26e9db41e (7.3-rc4) +CVE-2026-98421 [wifi: mac80211: require a peer station for TDLS setup confirm] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/038e1d126304fd25d507fd4e671232df57bd1799 (7.3-rc4) +CVE-2026-98420 [ksmbd: follow SMB2 session expiration semantics] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/d7fd1f98607f2cd358e583f9548bdf0173090a86 (7.3-rc4) +CVE-2026-98419 [drop_monitor: fix out-of-bounds write in reset_per_cpu_data()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/439f392084f8f7f59ab9d47a9579185accefe1d8 (7.3-rc4) +CVE-2026-98417 [net: xfrm: reject unrepresentable espintcp transport headers] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/96f01b53c2d05e003b040892256de54a586e8529 (7.3-rc4) +CVE-2026-98416 [dmaengine: ti: k3-udma-glue: fix NULL dereference in k3_udma_glue_release_rx_chn()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/0294b6dd515256c03ea2dbf508ddd3826d788579 (7.3-rc4) +CVE-2026-98413 [selinux: always fill AVC decision in avc_has_perm_noaudit()] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/8861db305103107199b1426f25fde1fb6d465583 (7.3-rc4) +CVE-2026-98412 [power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/115b303e8e093d964089ec6f3c40d984d77b33d0 (7.3-rc4) +CVE-2026-98411 [power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/242da4318d97380741516b595af3920207b2f0f1 (7.3-rc4) +CVE-2026-98410 [watchdog: da9063: fix suspend/resume handling of HW_RUNNING watchdog] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/7cb575b71ab98194d2e040bded3a7281e089c5ed (7.3-rc4) +CVE-2026-98409 [watchdog: rtd119x: Avoid division by zero] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/5af7d2cbd20f893def03c8310a460ade66a5d822 (7.3-rc4) +CVE-2026-98408 [watchdog: rzv2h: Avoid division by zero] + - linux 7.2.8-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/6274281c41efa8dd1aa5234c59ad904ff89d7af4 (7.3-rc4) +CVE-2026-98407 [wifi: rsi: fix heap OOB write on key removal] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/e6c5ed7a98d7bc8b0f7918246f1c90ddb3f79dfa (7.3-rc4) +CVE-2026-98406 [wifi: mac80211: avoid WARN in set_bitrate_mask when sdata not in driver] + - linux 7.2.8-1 + NOTE: https://git.kernel.org/linus/da2ca406f45a6e21760243152ed8d2e8e72915c2 (7.3-rc4) CVE-2026-98397 [platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown] - linux 7.2.7-1 [trixie] - linux <not-affected> (Vulnerable code not present) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1bd8410503b14ef8b75a0ce5efbe492b91742eb -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b1bd8410503b14ef8b75a0ce5efbe492b91742eb You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
