Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker
Commits: 8f55b421 by Salvatore Bonaccorso at 2026-10-14T20:19:37+02:00 Merge Linux CVEs from kernel-sec - - - - - 1 changed file: - data/CVE/list Changes: ===================================== data/CVE/list ===================================== @@ -1,3 +1,81 @@ +CVE-2026-98397 [platform/x86: x86-android-tablets: hold device reference for secondary fwnode teardown] + - linux 7.2.7-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/144113b0a70fa18033a747ee5db6803308f7688c (7.3-rc3) +CVE-2026-98396 [powerpc: Do not restore KUAP in arch_exit_to_user_mode_prepare()] + - linux 7.2.7-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/c2549d749539487239475fbc8c614a1f9244d655 (7.3-rc3) +CVE-2026-98395 [powerpc/entry: Fix irq_soft_mask corruption on replayed interrupt exit] + - linux 7.2.7-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/63a7531ca31f9f097d9cc1cc3fe86ae683cdabdd (7.3-rc3) +CVE-2026-98392 [Bluetooth: btintel_pcie: fix tx_handle bounds off-by-one] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/3dd1b41f96aad08444be1b7626c89de2b9f2abd4 (7.3-rc3) +CVE-2026-98391 [drm/xe: Guard page-fault worker with runtime PM check] + - linux 7.2.7-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/20fce5b34b21a995839743b4917a1edd2fd503ba (7.3-rc3) +CVE-2026-98390 [x86/amd_node: Avoid divide by zero on virtualized systems] + - linux 7.2.7-1 + [trixie] - linux <not-affected> (Vulnerable code not present) + [bookworm] - linux <not-affected> (Vulnerable code not present) + NOTE: https://git.kernel.org/linus/72bd92bd8190d7869ecb462649ca40f297822a33 (7.3-rc3) +CVE-2026-98404 [drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/94579f24e2b526a04eb41050af0ba018c6f528e7 (7.3-rc2) +CVE-2026-98403 [s390/boot: Avoid IPL parameter append past command line] + - linux 7.2.7-1 + NOTE: https://git.kernel.org/linus/d76181dfabdaa720703167393704efacba343442 (7.3-rc2) +CVE-2026-98402 [net: icmp: avoid invalid transport header access in icmp_send tracepoint] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/7fcc2fe39fed1cb98a7374a113ff3800e8f9af80 (7.3-rc2) +CVE-2026-98401 [net: iptunnel: fix stale transport header during tunnel decapsulation] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/28a57fb2c5df4deb42a06e52fd36c14b37aa0034 (7.3-rc2) +CVE-2026-98400 [s390/ipl: Fix NULL deref in kdump without re-IPL parm block] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/7f918871112e8e7c581e99eb8e545af4e59c8367 (7.3-rc2) +CVE-2026-98399 [s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/37f61b71cbc0caefc01022a19ee56fc2510e2e6e (7.3-rc2) +CVE-2026-98398 [locking/lockdep: Invalidate stale class_cache entries for zapped classes] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/02c6be7d675b21d81f0ba3a524346850a8c0e3bf (7.3-rc2) +CVE-2026-98394 [af_unix: Return immediately when manage_oob() returns NULL for 0-length buffer.] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/6e5ee08eb5858d175da6768d75d163817b6a9d4a (7.3-rc3) +CVE-2026-98393 [net: ipv4: Fix UDP length overflow with PMTU discover and big MTU] + - linux 7.2.7-1 + NOTE: https://git.kernel.org/linus/b83641e0ab8b20eefcc4cdc5a059f897375291a2 (7.3-rc3) +CVE-2026-98389 [drm/amdgpu: skip gfx switch_power_profile during GPU reset] + - linux 7.2.7-1 + NOTE: https://git.kernel.org/linus/1f1d43418d61c8511779e0f63a954a78b9433b43 (7.3-rc3) +CVE-2026-98388 [exec: do_close_on_exec() before taking exec_update_lock] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/e780259b54e618ceb4763fbc21314acf3565e813 (7.3-rc3) +CVE-2026-98387 [s390/crypto: Fix skcipher_walk return code handling in aes_s390] + - linux 7.2.7-1 + [trixie] - linux 6.12.111-1 + NOTE: https://git.kernel.org/linus/15fa028589c3a2545f0bff355eff06d5844196bf (7.3-rc3) +CVE-2026-98386 [scsi: qla2xxx: Use memset_io() to clear QLAFX00 request ring slot] + - linux 7.2.7-1 + NOTE: https://git.kernel.org/linus/626e44f3d8a924a97a3848a9fd45833947e081e9 (7.3-rc1) CVE-2026-107350 - pgbouncer 1.26.1-1 NOTE: Fixed by: https://github.com/pgbouncer/pgbouncer/commit/55233b2124264c0617dc68686473db7124de1620 (pgbouncer_1_26_1) View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55b4215fe7ba8f4caa2777ff4e444bd5f3e773 -- View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f55b4215fe7ba8f4caa2777ff4e444bd5f3e773 You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
_______________________________________________ debian-security-tracker-commits mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
