From b36e59f8b220c84105720a1836ee7f9cc57a4665 Mon Sep 17 00:00:00 2001 From: Shikha Vyaghra Date: Thu, 15 Oct 2026 19:09:21 +0000 Subject: [PATCH] advisories: add BRSAs for kernel-kit v9.5.0 Signed-off-by: Shikha Vyaghra --- advisories/9.5.0/BRSA-06ghtgcffasr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-0wctybyooj2e.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-1ittm2cqzonr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-1nip6jjnzva3.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-1zcbtezvayzd.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-2ennjjj3phiu.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-2hd6nss7ndcg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-2qz6ping8lna.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-2vhaznygmwx4.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-30il6hgmtlao.toml | 27 +++++++++++++++++++++++++ advisories/9.5.0/BRSA-3gqf6uentn9b.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-3gysjdpzeylv.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-3llag1zltwuj.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-4iawk9awjbz7.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-4w6mutemmikf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-56zugc4wgbzd.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-5fu6lqrtjlny.toml | 27 +++++++++++++++++++++++++ advisories/9.5.0/BRSA-66orhzycbngw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-6bc90yywranl.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-6cxphnh7sbvc.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-70ysbblwzzps.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-7jv83yxq6blz.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-7u3w06tnzlp6.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-7zucr51dlzea.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-86jdkr0wqdup.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-8e8fp1q8swbg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-8f9mv9keebq5.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-8qbfnfinuntt.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-9dm3awmrs35g.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-9fgjhn5mzwkh.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-9osn6hfxct6y.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-9vqpfpmwbtzb.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-a4y5q8epksiy.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-a8g25gmlt7ye.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-aetzjvxesph5.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ap1umbddncbv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-aqizs6ylhel6.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-atitetqss5hm.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-bydkibhz8xb8.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-bzjhfry9iskx.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-bzqmgc4ugnia.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-c7e3kemicggk.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-ch1vgvzyvmae.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-chdfyr0yiycr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ctrasph8tsrr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-cyqf2fdjnwli.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-d3h9s7mtmjtp.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-d6ppogfmnfxe.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dndq2ktg2ysy.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-drkmr2wotiz4.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-drziwmsord6n.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dupmhyubdnwp.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dwaez4nakn58.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dy37rz39f4iv.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-dytzq6s0p8td.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dyxhjgsnx9fw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-dz7c04etkuxw.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-e55th5vv5d6p.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-e9hp69bhemnc.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-eclnmu2hdryw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-edh4cdfp47vt.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-eiwk1xqkn2sh.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ekupu5euusoy.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-elpxhocyv2xf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-eqgubgpm16j8.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-eradhhpblhbs.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-fiivamvyiiqs.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-fjknwkyjygrl.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-fmcdmo0dgiks.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-fqijmhbnbxtv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-fthxkkwocpwa.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-fzdwvkrc9i3d.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-g05iw46mfufu.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-g2ncakbst7fz.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-g7kpsxsniaph.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gaidzdoqxik4.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gbmzg0rtfdlz.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gdlzfxhzijtp.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gg3mzxofutz6.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-ggn0lu4xyroj.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ghiqklogad5b.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ghtbgmr77dmq.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gly5ybh3mccn.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-gvecx3h2rvvi.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-hankolqmi6go.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-hfjkx54rpulw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-hhetxy6i2v8q.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-hi8zr06a9t7g.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-hnychtihtatx.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-hpvajs2wxcfy.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-hzazo5x5huid.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-i8xzefdhf4ti.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-i9nzccndxkcz.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-iaoc1es6mhfq.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ieasplo4abme.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ihgl0xzcetp6.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ile2zor2vjdr.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-illhy1rulzwj.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jbffa5je7bvo.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jdwajksg3djk.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jg3jvwfmb9cg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jixatwzw8m6x.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-jkgylqpvr8ux.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jukr43uuqspu.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jvf1uy1nxxgc.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-jx4zqlwlv7ix.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-k4cztdwtz3xk.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-kkdymisgjmod.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-kovxfey0ccqw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-l4delc8qhhhk.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ldxyinfahsgf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-lh2dbyfszkka.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-lhk0xwwyrdzw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-lov4noj2mf2o.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-lowbytdxlzor.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ls76aet0rwq5.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-lvtrgkbgtgi2.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-md1cjjoc9jzs.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-mo1jyariozg2.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-mpgzbmc1tjxg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-mswnxvqrzcw9.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-mtx9a9lbnm8s.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-muxyhkxjq2be.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-mwgxe9ialdl3.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-n637nzfe9zjt.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nif5jpb7f2ya.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nig833iyfkqn.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nmov3mwnwli9.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nthucuqdts0q.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nwnzbayzrqo0.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nyuzv3qm6u98.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-nzyaefsormfy.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-o5o4crkph9gh.toml | 16 +++++++++++++++ advisories/9.5.0/BRSA-o5x3whutsupv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-o64mg0jzoi2z.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-oe9ldfzcgwhk.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-oesfvvke48v0.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-oi3nwr64frkp.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-oqr6ksldnf94.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-p1umuew9y3l8.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-p5cbazwcywbu.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-pbbjpri0bhqu.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-pbxjivxkmspo.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-peim2i8jgivr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-peptsin14twb.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-pku66mh3zwrf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-psahx1w9gwaj.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-pvkftmg0jrxt.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-pw6v3rxu7y1k.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-pw8p9sfrfxdi.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-px7cuiyqfqgv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-q7sokrm4fdeg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qbv8bb1ujmjc.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qjoxwl3xghgg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qlg0dsti52s9.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-qliwotoxqfez.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qosprnpwmk4w.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qponpfowweax.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qs0setzgqadc.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-qwm7azno0dop.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-re4bg644ex6l.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-rfc39lix54h9.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-rlw8scbozxcw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ropawrbbjvpg.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-rpouhica7zpf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-rujilezlembr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ryhjd6g1zrre.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-rz8bdytc4amf.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-s0qidl7imddk.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-s3mtgjkio8bd.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-s5kec1cvmzbn.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-scexhsvca5oe.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-sed2ac6ifa3b.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-seqhdhudmm1g.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-sikvstpuveen.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-sq6220zlvh9e.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tamtlzjnaeph.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tbymncwhz64f.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tcbqlm4mohdr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tevjhcxpuh8g.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-tfd1aduxedsw.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-tfnxwlvcrdlj.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-thg8yjrlaftr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tn12x1ihqbwv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-tv3zin2nthe6.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-twgn3qyakvko.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-u29kdlhrlo1w.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-uce82hsmktp9.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-udoy28hnwf7a.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-uebnmuxeigax.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ugiy6ocefr6e.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ulmomvyaya0o.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-upr0oakylv58.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-uqs0go9djbzv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ut4ucncwlaoz.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-utod6wlsloui.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-v6n78nwy62xy.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-vbxyvt4obwph.toml | 16 +++++++++++++++ advisories/9.5.0/BRSA-vcwtl4ql5man.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-vdd27obse9gg.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-veueexfnkyh0.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-vkbrk8bfoqlv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-vy3fv1barxkh.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-wc7hjetb1xrq.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-wskkpw9pzyon.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-wteupqqlb6ed.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-wwhnryjioqhv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-wzmv2zhw0vw8.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-x4kcgyznal0e.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-x6vtt0fk4d3d.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-xcodh2jld5fu.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-xfrlpscxzlqr.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-xv43v87obegv.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-xvgcygxtwwhn.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-xxxepyonccbx.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-y1je5e7lt5yb.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-y72spo8nbi2g.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ya7tsufmfrek.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-yet702k4xjzk.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-yh81ip2n0ta7.toml | 22 ++++++++++++++++++++ advisories/9.5.0/BRSA-yhzn6lccrt0o.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-yitn2kik8yec.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-ync2jymsoy4h.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-yzlrrzxyudiw.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-zgoxjteujxf4.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-zkhykrydeeex.toml | 16 +++++++++++++++ advisories/9.5.0/BRSA-zmyqs0bugbmm.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-znb3bqljb8d0.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-znd5digk60c3.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-zvv6n8dsedhy.toml | 17 ++++++++++++++++ advisories/9.5.0/BRSA-zximee2ve6tu.toml | 17 ++++++++++++++++ 234 files changed, 4195 insertions(+) create mode 100644 advisories/9.5.0/BRSA-06ghtgcffasr.toml create mode 100644 advisories/9.5.0/BRSA-0wctybyooj2e.toml create mode 100644 advisories/9.5.0/BRSA-1ittm2cqzonr.toml create mode 100644 advisories/9.5.0/BRSA-1nip6jjnzva3.toml create mode 100644 advisories/9.5.0/BRSA-1zcbtezvayzd.toml create mode 100644 advisories/9.5.0/BRSA-2ennjjj3phiu.toml create mode 100644 advisories/9.5.0/BRSA-2hd6nss7ndcg.toml create mode 100644 advisories/9.5.0/BRSA-2qz6ping8lna.toml create mode 100644 advisories/9.5.0/BRSA-2vhaznygmwx4.toml create mode 100644 advisories/9.5.0/BRSA-30il6hgmtlao.toml create mode 100644 advisories/9.5.0/BRSA-3gqf6uentn9b.toml create mode 100644 advisories/9.5.0/BRSA-3gysjdpzeylv.toml create mode 100644 advisories/9.5.0/BRSA-3llag1zltwuj.toml create mode 100644 advisories/9.5.0/BRSA-4iawk9awjbz7.toml create mode 100644 advisories/9.5.0/BRSA-4w6mutemmikf.toml create mode 100644 advisories/9.5.0/BRSA-56zugc4wgbzd.toml create mode 100644 advisories/9.5.0/BRSA-5fu6lqrtjlny.toml create mode 100644 advisories/9.5.0/BRSA-66orhzycbngw.toml create mode 100644 advisories/9.5.0/BRSA-6bc90yywranl.toml create mode 100644 advisories/9.5.0/BRSA-6cxphnh7sbvc.toml create mode 100644 advisories/9.5.0/BRSA-70ysbblwzzps.toml create mode 100644 advisories/9.5.0/BRSA-7jv83yxq6blz.toml create mode 100644 advisories/9.5.0/BRSA-7u3w06tnzlp6.toml create mode 100644 advisories/9.5.0/BRSA-7zucr51dlzea.toml create mode 100644 advisories/9.5.0/BRSA-86jdkr0wqdup.toml create mode 100644 advisories/9.5.0/BRSA-8e8fp1q8swbg.toml create mode 100644 advisories/9.5.0/BRSA-8f9mv9keebq5.toml create mode 100644 advisories/9.5.0/BRSA-8qbfnfinuntt.toml create mode 100644 advisories/9.5.0/BRSA-9dm3awmrs35g.toml create mode 100644 advisories/9.5.0/BRSA-9fgjhn5mzwkh.toml create mode 100644 advisories/9.5.0/BRSA-9osn6hfxct6y.toml create mode 100644 advisories/9.5.0/BRSA-9vqpfpmwbtzb.toml create mode 100644 advisories/9.5.0/BRSA-a4y5q8epksiy.toml create mode 100644 advisories/9.5.0/BRSA-a8g25gmlt7ye.toml create mode 100644 advisories/9.5.0/BRSA-aetzjvxesph5.toml create mode 100644 advisories/9.5.0/BRSA-ap1umbddncbv.toml create mode 100644 advisories/9.5.0/BRSA-aqizs6ylhel6.toml create mode 100644 advisories/9.5.0/BRSA-atitetqss5hm.toml create mode 100644 advisories/9.5.0/BRSA-bydkibhz8xb8.toml create mode 100644 advisories/9.5.0/BRSA-bzjhfry9iskx.toml create mode 100644 advisories/9.5.0/BRSA-bzqmgc4ugnia.toml create mode 100644 advisories/9.5.0/BRSA-c7e3kemicggk.toml create mode 100644 advisories/9.5.0/BRSA-ch1vgvzyvmae.toml create mode 100644 advisories/9.5.0/BRSA-chdfyr0yiycr.toml create mode 100644 advisories/9.5.0/BRSA-ctrasph8tsrr.toml create mode 100644 advisories/9.5.0/BRSA-cyqf2fdjnwli.toml create mode 100644 advisories/9.5.0/BRSA-d3h9s7mtmjtp.toml create mode 100644 advisories/9.5.0/BRSA-d6ppogfmnfxe.toml create mode 100644 advisories/9.5.0/BRSA-dndq2ktg2ysy.toml create mode 100644 advisories/9.5.0/BRSA-drkmr2wotiz4.toml create mode 100644 advisories/9.5.0/BRSA-drziwmsord6n.toml create mode 100644 advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml create mode 100644 advisories/9.5.0/BRSA-dupmhyubdnwp.toml create mode 100644 advisories/9.5.0/BRSA-dwaez4nakn58.toml create mode 100644 advisories/9.5.0/BRSA-dy37rz39f4iv.toml create mode 100644 advisories/9.5.0/BRSA-dytzq6s0p8td.toml create mode 100644 advisories/9.5.0/BRSA-dyxhjgsnx9fw.toml create mode 100644 advisories/9.5.0/BRSA-dz7c04etkuxw.toml create mode 100644 advisories/9.5.0/BRSA-e55th5vv5d6p.toml create mode 100644 advisories/9.5.0/BRSA-e9hp69bhemnc.toml create mode 100644 advisories/9.5.0/BRSA-eclnmu2hdryw.toml create mode 100644 advisories/9.5.0/BRSA-edh4cdfp47vt.toml create mode 100644 advisories/9.5.0/BRSA-eiwk1xqkn2sh.toml create mode 100644 advisories/9.5.0/BRSA-ekupu5euusoy.toml create mode 100644 advisories/9.5.0/BRSA-elpxhocyv2xf.toml create mode 100644 advisories/9.5.0/BRSA-eqgubgpm16j8.toml create mode 100644 advisories/9.5.0/BRSA-eradhhpblhbs.toml create mode 100644 advisories/9.5.0/BRSA-fiivamvyiiqs.toml create mode 100644 advisories/9.5.0/BRSA-fjknwkyjygrl.toml create mode 100644 advisories/9.5.0/BRSA-fmcdmo0dgiks.toml create mode 100644 advisories/9.5.0/BRSA-fqijmhbnbxtv.toml create mode 100644 advisories/9.5.0/BRSA-fthxkkwocpwa.toml create mode 100644 advisories/9.5.0/BRSA-fzdwvkrc9i3d.toml create mode 100644 advisories/9.5.0/BRSA-g05iw46mfufu.toml create mode 100644 advisories/9.5.0/BRSA-g2ncakbst7fz.toml create mode 100644 advisories/9.5.0/BRSA-g7kpsxsniaph.toml create mode 100644 advisories/9.5.0/BRSA-gaidzdoqxik4.toml create mode 100644 advisories/9.5.0/BRSA-gbmzg0rtfdlz.toml create mode 100644 advisories/9.5.0/BRSA-gdlzfxhzijtp.toml create mode 100644 advisories/9.5.0/BRSA-gg3mzxofutz6.toml create mode 100644 advisories/9.5.0/BRSA-ggn0lu4xyroj.toml create mode 100644 advisories/9.5.0/BRSA-ghiqklogad5b.toml create mode 100644 advisories/9.5.0/BRSA-ghtbgmr77dmq.toml create mode 100644 advisories/9.5.0/BRSA-gly5ybh3mccn.toml create mode 100644 advisories/9.5.0/BRSA-gvecx3h2rvvi.toml create mode 100644 advisories/9.5.0/BRSA-hankolqmi6go.toml create mode 100644 advisories/9.5.0/BRSA-hfjkx54rpulw.toml create mode 100644 advisories/9.5.0/BRSA-hhetxy6i2v8q.toml create mode 100644 advisories/9.5.0/BRSA-hi8zr06a9t7g.toml create mode 100644 advisories/9.5.0/BRSA-hnychtihtatx.toml create mode 100644 advisories/9.5.0/BRSA-hpvajs2wxcfy.toml create mode 100644 advisories/9.5.0/BRSA-hzazo5x5huid.toml create mode 100644 advisories/9.5.0/BRSA-i8xzefdhf4ti.toml create mode 100644 advisories/9.5.0/BRSA-i9nzccndxkcz.toml create mode 100644 advisories/9.5.0/BRSA-iaoc1es6mhfq.toml create mode 100644 advisories/9.5.0/BRSA-ieasplo4abme.toml create mode 100644 advisories/9.5.0/BRSA-ihgl0xzcetp6.toml create mode 100644 advisories/9.5.0/BRSA-ile2zor2vjdr.toml create mode 100644 advisories/9.5.0/BRSA-illhy1rulzwj.toml create mode 100644 advisories/9.5.0/BRSA-jbffa5je7bvo.toml create mode 100644 advisories/9.5.0/BRSA-jdwajksg3djk.toml create mode 100644 advisories/9.5.0/BRSA-jg3jvwfmb9cg.toml create mode 100644 advisories/9.5.0/BRSA-jixatwzw8m6x.toml create mode 100644 advisories/9.5.0/BRSA-jkgylqpvr8ux.toml create mode 100644 advisories/9.5.0/BRSA-jukr43uuqspu.toml create mode 100644 advisories/9.5.0/BRSA-jvf1uy1nxxgc.toml create mode 100644 advisories/9.5.0/BRSA-jx4zqlwlv7ix.toml create mode 100644 advisories/9.5.0/BRSA-k4cztdwtz3xk.toml create mode 100644 advisories/9.5.0/BRSA-kkdymisgjmod.toml create mode 100644 advisories/9.5.0/BRSA-kovxfey0ccqw.toml create mode 100644 advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml create mode 100644 advisories/9.5.0/BRSA-l4delc8qhhhk.toml create mode 100644 advisories/9.5.0/BRSA-ldxyinfahsgf.toml create mode 100644 advisories/9.5.0/BRSA-lh2dbyfszkka.toml create mode 100644 advisories/9.5.0/BRSA-lhk0xwwyrdzw.toml create mode 100644 advisories/9.5.0/BRSA-lov4noj2mf2o.toml create mode 100644 advisories/9.5.0/BRSA-lowbytdxlzor.toml create mode 100644 advisories/9.5.0/BRSA-ls76aet0rwq5.toml create mode 100644 advisories/9.5.0/BRSA-lvtrgkbgtgi2.toml create mode 100644 advisories/9.5.0/BRSA-md1cjjoc9jzs.toml create mode 100644 advisories/9.5.0/BRSA-mo1jyariozg2.toml create mode 100644 advisories/9.5.0/BRSA-mpgzbmc1tjxg.toml create mode 100644 advisories/9.5.0/BRSA-mswnxvqrzcw9.toml create mode 100644 advisories/9.5.0/BRSA-mtx9a9lbnm8s.toml create mode 100644 advisories/9.5.0/BRSA-muxyhkxjq2be.toml create mode 100644 advisories/9.5.0/BRSA-mwgxe9ialdl3.toml create mode 100644 advisories/9.5.0/BRSA-n637nzfe9zjt.toml create mode 100644 advisories/9.5.0/BRSA-nif5jpb7f2ya.toml create mode 100644 advisories/9.5.0/BRSA-nig833iyfkqn.toml create mode 100644 advisories/9.5.0/BRSA-nmov3mwnwli9.toml create mode 100644 advisories/9.5.0/BRSA-nthucuqdts0q.toml create mode 100644 advisories/9.5.0/BRSA-nwnzbayzrqo0.toml create mode 100644 advisories/9.5.0/BRSA-nyuzv3qm6u98.toml create mode 100644 advisories/9.5.0/BRSA-nzyaefsormfy.toml create mode 100644 advisories/9.5.0/BRSA-o5o4crkph9gh.toml create mode 100644 advisories/9.5.0/BRSA-o5x3whutsupv.toml create mode 100644 advisories/9.5.0/BRSA-o64mg0jzoi2z.toml create mode 100644 advisories/9.5.0/BRSA-oe9ldfzcgwhk.toml create mode 100644 advisories/9.5.0/BRSA-oesfvvke48v0.toml create mode 100644 advisories/9.5.0/BRSA-oi3nwr64frkp.toml create mode 100644 advisories/9.5.0/BRSA-oqr6ksldnf94.toml create mode 100644 advisories/9.5.0/BRSA-p1umuew9y3l8.toml create mode 100644 advisories/9.5.0/BRSA-p5cbazwcywbu.toml create mode 100644 advisories/9.5.0/BRSA-pbbjpri0bhqu.toml create mode 100644 advisories/9.5.0/BRSA-pbxjivxkmspo.toml create mode 100644 advisories/9.5.0/BRSA-peim2i8jgivr.toml create mode 100644 advisories/9.5.0/BRSA-peptsin14twb.toml create mode 100644 advisories/9.5.0/BRSA-pku66mh3zwrf.toml create mode 100644 advisories/9.5.0/BRSA-psahx1w9gwaj.toml create mode 100644 advisories/9.5.0/BRSA-pvkftmg0jrxt.toml create mode 100644 advisories/9.5.0/BRSA-pw6v3rxu7y1k.toml create mode 100644 advisories/9.5.0/BRSA-pw8p9sfrfxdi.toml create mode 100644 advisories/9.5.0/BRSA-px7cuiyqfqgv.toml create mode 100644 advisories/9.5.0/BRSA-q7sokrm4fdeg.toml create mode 100644 advisories/9.5.0/BRSA-qbv8bb1ujmjc.toml create mode 100644 advisories/9.5.0/BRSA-qjoxwl3xghgg.toml create mode 100644 advisories/9.5.0/BRSA-qlg0dsti52s9.toml create mode 100644 advisories/9.5.0/BRSA-qliwotoxqfez.toml create mode 100644 advisories/9.5.0/BRSA-qosprnpwmk4w.toml create mode 100644 advisories/9.5.0/BRSA-qponpfowweax.toml create mode 100644 advisories/9.5.0/BRSA-qs0setzgqadc.toml create mode 100644 advisories/9.5.0/BRSA-qwm7azno0dop.toml create mode 100644 advisories/9.5.0/BRSA-re4bg644ex6l.toml create mode 100644 advisories/9.5.0/BRSA-rfc39lix54h9.toml create mode 100644 advisories/9.5.0/BRSA-rlw8scbozxcw.toml create mode 100644 advisories/9.5.0/BRSA-ropawrbbjvpg.toml create mode 100644 advisories/9.5.0/BRSA-rpouhica7zpf.toml create mode 100644 advisories/9.5.0/BRSA-rujilezlembr.toml create mode 100644 advisories/9.5.0/BRSA-ryhjd6g1zrre.toml create mode 100644 advisories/9.5.0/BRSA-rz8bdytc4amf.toml create mode 100644 advisories/9.5.0/BRSA-s0qidl7imddk.toml create mode 100644 advisories/9.5.0/BRSA-s3mtgjkio8bd.toml create mode 100644 advisories/9.5.0/BRSA-s5kec1cvmzbn.toml create mode 100644 advisories/9.5.0/BRSA-scexhsvca5oe.toml create mode 100644 advisories/9.5.0/BRSA-sed2ac6ifa3b.toml create mode 100644 advisories/9.5.0/BRSA-seqhdhudmm1g.toml create mode 100644 advisories/9.5.0/BRSA-sikvstpuveen.toml create mode 100644 advisories/9.5.0/BRSA-sq6220zlvh9e.toml create mode 100644 advisories/9.5.0/BRSA-tamtlzjnaeph.toml create mode 100644 advisories/9.5.0/BRSA-tbymncwhz64f.toml create mode 100644 advisories/9.5.0/BRSA-tcbqlm4mohdr.toml create mode 100644 advisories/9.5.0/BRSA-tevjhcxpuh8g.toml create mode 100644 advisories/9.5.0/BRSA-tfd1aduxedsw.toml create mode 100644 advisories/9.5.0/BRSA-tfnxwlvcrdlj.toml create mode 100644 advisories/9.5.0/BRSA-thg8yjrlaftr.toml create mode 100644 advisories/9.5.0/BRSA-tn12x1ihqbwv.toml create mode 100644 advisories/9.5.0/BRSA-tv3zin2nthe6.toml create mode 100644 advisories/9.5.0/BRSA-twgn3qyakvko.toml create mode 100644 advisories/9.5.0/BRSA-u29kdlhrlo1w.toml create mode 100644 advisories/9.5.0/BRSA-uce82hsmktp9.toml create mode 100644 advisories/9.5.0/BRSA-udoy28hnwf7a.toml create mode 100644 advisories/9.5.0/BRSA-uebnmuxeigax.toml create mode 100644 advisories/9.5.0/BRSA-ugiy6ocefr6e.toml create mode 100644 advisories/9.5.0/BRSA-ulmomvyaya0o.toml create mode 100644 advisories/9.5.0/BRSA-upr0oakylv58.toml create mode 100644 advisories/9.5.0/BRSA-uqs0go9djbzv.toml create mode 100644 advisories/9.5.0/BRSA-ut4ucncwlaoz.toml create mode 100644 advisories/9.5.0/BRSA-utod6wlsloui.toml create mode 100644 advisories/9.5.0/BRSA-v6n78nwy62xy.toml create mode 100644 advisories/9.5.0/BRSA-vbxyvt4obwph.toml create mode 100644 advisories/9.5.0/BRSA-vcwtl4ql5man.toml create mode 100644 advisories/9.5.0/BRSA-vdd27obse9gg.toml create mode 100644 advisories/9.5.0/BRSA-veueexfnkyh0.toml create mode 100644 advisories/9.5.0/BRSA-vkbrk8bfoqlv.toml create mode 100644 advisories/9.5.0/BRSA-vy3fv1barxkh.toml create mode 100644 advisories/9.5.0/BRSA-wc7hjetb1xrq.toml create mode 100644 advisories/9.5.0/BRSA-wskkpw9pzyon.toml create mode 100644 advisories/9.5.0/BRSA-wteupqqlb6ed.toml create mode 100644 advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml create mode 100644 advisories/9.5.0/BRSA-wwhnryjioqhv.toml create mode 100644 advisories/9.5.0/BRSA-wzmv2zhw0vw8.toml create mode 100644 advisories/9.5.0/BRSA-x4kcgyznal0e.toml create mode 100644 advisories/9.5.0/BRSA-x6vtt0fk4d3d.toml create mode 100644 advisories/9.5.0/BRSA-xcodh2jld5fu.toml create mode 100644 advisories/9.5.0/BRSA-xfrlpscxzlqr.toml create mode 100644 advisories/9.5.0/BRSA-xv43v87obegv.toml create mode 100644 advisories/9.5.0/BRSA-xvgcygxtwwhn.toml create mode 100644 advisories/9.5.0/BRSA-xxxepyonccbx.toml create mode 100644 advisories/9.5.0/BRSA-y1je5e7lt5yb.toml create mode 100644 advisories/9.5.0/BRSA-y72spo8nbi2g.toml create mode 100644 advisories/9.5.0/BRSA-ya7tsufmfrek.toml create mode 100644 advisories/9.5.0/BRSA-yet702k4xjzk.toml create mode 100644 advisories/9.5.0/BRSA-yh81ip2n0ta7.toml create mode 100644 advisories/9.5.0/BRSA-yhzn6lccrt0o.toml create mode 100644 advisories/9.5.0/BRSA-yitn2kik8yec.toml create mode 100644 advisories/9.5.0/BRSA-ync2jymsoy4h.toml create mode 100644 advisories/9.5.0/BRSA-yzlrrzxyudiw.toml create mode 100644 advisories/9.5.0/BRSA-zgoxjteujxf4.toml create mode 100644 advisories/9.5.0/BRSA-zkhykrydeeex.toml create mode 100644 advisories/9.5.0/BRSA-zmyqs0bugbmm.toml create mode 100644 advisories/9.5.0/BRSA-znb3bqljb8d0.toml create mode 100644 advisories/9.5.0/BRSA-znd5digk60c3.toml create mode 100644 advisories/9.5.0/BRSA-zvv6n8dsedhy.toml create mode 100644 advisories/9.5.0/BRSA-zximee2ve6tu.toml diff --git a/advisories/9.5.0/BRSA-06ghtgcffasr.toml b/advisories/9.5.0/BRSA-06ghtgcffasr.toml new file mode 100644 index 00000000..35ee0f9e --- /dev/null +++ b/advisories/9.5.0/BRSA-06ghtgcffasr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-06ghtgcffasr" +title = "kernel CVE-2026-89652" +cve = "CVE-2026-89652" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied name into the caller's" + +[[advisory.products]] +package-name = "kernel-6.1" +patched-version = "6.1.188" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-0wctybyooj2e.toml b/advisories/9.5.0/BRSA-0wctybyooj2e.toml new file mode 100644 index 00000000..8d181604 --- /dev/null +++ b/advisories/9.5.0/BRSA-0wctybyooj2e.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-0wctybyooj2e" +title = "kernel CVE-2026-90227" +cve = "CVE-2026-90227" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-1ittm2cqzonr.toml b/advisories/9.5.0/BRSA-1ittm2cqzonr.toml new file mode 100644 index 00000000..8e321156 --- /dev/null +++ b/advisories/9.5.0/BRSA-1ittm2cqzonr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-1ittm2cqzonr" +title = "kernel CVE-2026-90313" +cve = "CVE-2026-90313" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-1nip6jjnzva3.toml b/advisories/9.5.0/BRSA-1nip6jjnzva3.toml new file mode 100644 index 00000000..bb88966b --- /dev/null +++ b/advisories/9.5.0/BRSA-1nip6jjnzva3.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-1nip6jjnzva3" +title = "kernel CVE-2026-89717" +cve = "CVE-2026-89717" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-1zcbtezvayzd.toml b/advisories/9.5.0/BRSA-1zcbtezvayzd.toml new file mode 100644 index 00000000..5a38ab11 --- /dev/null +++ b/advisories/9.5.0/BRSA-1zcbtezvayzd.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-1zcbtezvayzd" +title = "kernel CVE-2026-97456" +cve = "CVE-2026-97456" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-2ennjjj3phiu.toml b/advisories/9.5.0/BRSA-2ennjjj3phiu.toml new file mode 100644 index 00000000..fe466a6b --- /dev/null +++ b/advisories/9.5.0/BRSA-2ennjjj3phiu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-2ennjjj3phiu" +title = "kernel CVE-2026-98127" +cve = "CVE-2026-98127" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-2hd6nss7ndcg.toml b/advisories/9.5.0/BRSA-2hd6nss7ndcg.toml new file mode 100644 index 00000000..82128661 --- /dev/null +++ b/advisories/9.5.0/BRSA-2hd6nss7ndcg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-2hd6nss7ndcg" +title = "kernel CVE-2026-98072" +cve = "CVE-2026-98072" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-2qz6ping8lna.toml b/advisories/9.5.0/BRSA-2qz6ping8lna.toml new file mode 100644 index 00000000..f28e41f8 --- /dev/null +++ b/advisories/9.5.0/BRSA-2qz6ping8lna.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-2qz6ping8lna" +title = "kernel CVE-2026-98123" +cve = "CVE-2026-98123" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-2vhaznygmwx4.toml b/advisories/9.5.0/BRSA-2vhaznygmwx4.toml new file mode 100644 index 00000000..39028d15 --- /dev/null +++ b/advisories/9.5.0/BRSA-2vhaznygmwx4.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-2vhaznygmwx4" +title = "kernel CVE-2026-97904" +cve = "CVE-2026-97904" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-30il6hgmtlao.toml b/advisories/9.5.0/BRSA-30il6hgmtlao.toml new file mode 100644 index 00000000..12dc2b7e --- /dev/null +++ b/advisories/9.5.0/BRSA-30il6hgmtlao.toml @@ -0,0 +1,27 @@ +[advisory] +id = "BRSA-30il6hgmtlao" +title = "kernel CVE-2026-98096" +cve = "CVE-2026-98096" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding" + +[[advisory.products]] +package-name = "kernel-6.1" +patched-version = "6.1.188" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-3gqf6uentn9b.toml b/advisories/9.5.0/BRSA-3gqf6uentn9b.toml new file mode 100644 index 00000000..c15d75d5 --- /dev/null +++ b/advisories/9.5.0/BRSA-3gqf6uentn9b.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-3gqf6uentn9b" +title = "kernel CVE-2026-89778" +cve = "CVE-2026-89778" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-3gysjdpzeylv.toml b/advisories/9.5.0/BRSA-3gysjdpzeylv.toml new file mode 100644 index 00000000..a9ab4936 --- /dev/null +++ b/advisories/9.5.0/BRSA-3gysjdpzeylv.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-3gysjdpzeylv" +title = "kernel CVE-2026-97555" +cve = "CVE-2026-97555" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-3llag1zltwuj.toml b/advisories/9.5.0/BRSA-3llag1zltwuj.toml new file mode 100644 index 00000000..74873c05 --- /dev/null +++ b/advisories/9.5.0/BRSA-3llag1zltwuj.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-3llag1zltwuj" +title = "kernel CVE-2026-97444" +cve = "CVE-2026-97444" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-4iawk9awjbz7.toml b/advisories/9.5.0/BRSA-4iawk9awjbz7.toml new file mode 100644 index 00000000..288f5bf9 --- /dev/null +++ b/advisories/9.5.0/BRSA-4iawk9awjbz7.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-4iawk9awjbz7" +title = "kernel CVE-2026-98016" +cve = "CVE-2026-98016" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-4w6mutemmikf.toml b/advisories/9.5.0/BRSA-4w6mutemmikf.toml new file mode 100644 index 00000000..61f8a7fd --- /dev/null +++ b/advisories/9.5.0/BRSA-4w6mutemmikf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-4w6mutemmikf" +title = "kernel CVE-2026-93798" +cve = "CVE-2026-93798" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in merge_reloc_roots()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-56zugc4wgbzd.toml b/advisories/9.5.0/BRSA-56zugc4wgbzd.toml new file mode 100644 index 00000000..2eabb179 --- /dev/null +++ b/advisories/9.5.0/BRSA-56zugc4wgbzd.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-56zugc4wgbzd" +title = "kernel CVE-2026-97594" +cve = "CVE-2026-97594" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-5fu6lqrtjlny.toml b/advisories/9.5.0/BRSA-5fu6lqrtjlny.toml new file mode 100644 index 00000000..a91ccdc4 --- /dev/null +++ b/advisories/9.5.0/BRSA-5fu6lqrtjlny.toml @@ -0,0 +1,27 @@ +[advisory] +id = "BRSA-5fu6lqrtjlny" +title = "kernel CVE-2026-93125" +cve = "CVE-2026-93125" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max" + +[[advisory.products]] +package-name = "kernel-6.1" +patched-version = "6.1.188" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-66orhzycbngw.toml b/advisories/9.5.0/BRSA-66orhzycbngw.toml new file mode 100644 index 00000000..0dd4311e --- /dev/null +++ b/advisories/9.5.0/BRSA-66orhzycbngw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-66orhzycbngw" +title = "kernel CVE-2026-89659" +cve = "CVE-2026-89659" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-6bc90yywranl.toml b/advisories/9.5.0/BRSA-6bc90yywranl.toml new file mode 100644 index 00000000..887edde7 --- /dev/null +++ b/advisories/9.5.0/BRSA-6bc90yywranl.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-6bc90yywranl" +title = "kernel CVE-2026-97415" +cve = "CVE-2026-97415" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-6cxphnh7sbvc.toml b/advisories/9.5.0/BRSA-6cxphnh7sbvc.toml new file mode 100644 index 00000000..05a71692 --- /dev/null +++ b/advisories/9.5.0/BRSA-6cxphnh7sbvc.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-6cxphnh7sbvc" +title = "kernel CVE-2026-97439" +cve = "CVE-2026-97439" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-70ysbblwzzps.toml b/advisories/9.5.0/BRSA-70ysbblwzzps.toml new file mode 100644 index 00000000..f40a77fc --- /dev/null +++ b/advisories/9.5.0/BRSA-70ysbblwzzps.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-70ysbblwzzps" +title = "kernel CVE-2026-97484" +cve = "CVE-2026-97484" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-7jv83yxq6blz.toml b/advisories/9.5.0/BRSA-7jv83yxq6blz.toml new file mode 100644 index 00000000..625c8ce5 --- /dev/null +++ b/advisories/9.5.0/BRSA-7jv83yxq6blz.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-7jv83yxq6blz" +title = "kernel CVE-2026-93828" +cve = "CVE-2026-93828" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfat_create_upcase_table()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-7u3w06tnzlp6.toml b/advisories/9.5.0/BRSA-7u3w06tnzlp6.toml new file mode 100644 index 00000000..379d322d --- /dev/null +++ b/advisories/9.5.0/BRSA-7u3w06tnzlp6.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-7u3w06tnzlp6" +title = "kernel CVE-2026-98039" +cve = "CVE-2026-98039" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Require MEM_PERCPU for percpu kptr stores" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-7zucr51dlzea.toml b/advisories/9.5.0/BRSA-7zucr51dlzea.toml new file mode 100644 index 00000000..c2072854 --- /dev/null +++ b/advisories/9.5.0/BRSA-7zucr51dlzea.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-7zucr51dlzea" +title = "kernel CVE-2026-98011" +cve = "CVE-2026-98011" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum in change and init paths" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-86jdkr0wqdup.toml b/advisories/9.5.0/BRSA-86jdkr0wqdup.toml new file mode 100644 index 00000000..48cbabad --- /dev/null +++ b/advisories/9.5.0/BRSA-86jdkr0wqdup.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-86jdkr0wqdup" +title = "kernel CVE-2026-98068" +cve = "CVE-2026-98068" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rds_conn_shutdown() consume a concurrent drop" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-8e8fp1q8swbg.toml b/advisories/9.5.0/BRSA-8e8fp1q8swbg.toml new file mode 100644 index 00000000..69653264 --- /dev/null +++ b/advisories/9.5.0/BRSA-8e8fp1q8swbg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-8e8fp1q8swbg" +title = "kernel CVE-2026-97616" +cve = "CVE-2026-97616" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release all action references on NEWACTION failure" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-8f9mv9keebq5.toml b/advisories/9.5.0/BRSA-8f9mv9keebq5.toml new file mode 100644 index 00000000..d49fde13 --- /dev/null +++ b/advisories/9.5.0/BRSA-8f9mv9keebq5.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-8f9mv9keebq5" +title = "kernel CVE-2026-98158" +cve = "CVE-2026-98158" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-8qbfnfinuntt.toml b/advisories/9.5.0/BRSA-8qbfnfinuntt.toml new file mode 100644 index 00000000..b4324866 --- /dev/null +++ b/advisories/9.5.0/BRSA-8qbfnfinuntt.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-8qbfnfinuntt" +title = "kernel CVE-2026-98012" +cve = "CVE-2026-98012" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-9dm3awmrs35g.toml b/advisories/9.5.0/BRSA-9dm3awmrs35g.toml new file mode 100644 index 00000000..ad23edff --- /dev/null +++ b/advisories/9.5.0/BRSA-9dm3awmrs35g.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-9dm3awmrs35g" +title = "kernel CVE-2026-97597" +cve = "CVE-2026-97597" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-9fgjhn5mzwkh.toml b/advisories/9.5.0/BRSA-9fgjhn5mzwkh.toml new file mode 100644 index 00000000..fdaf80df --- /dev/null +++ b/advisories/9.5.0/BRSA-9fgjhn5mzwkh.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-9fgjhn5mzwkh" +title = "kernel CVE-2026-89796" +cve = "CVE-2026-89796" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamond_merge_regions() internal loop" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-9osn6hfxct6y.toml b/advisories/9.5.0/BRSA-9osn6hfxct6y.toml new file mode 100644 index 00000000..39db542e --- /dev/null +++ b/advisories/9.5.0/BRSA-9osn6hfxct6y.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-9osn6hfxct6y" +title = "kernel CVE-2026-93810" +cve = "CVE-2026-93810" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-9vqpfpmwbtzb.toml b/advisories/9.5.0/BRSA-9vqpfpmwbtzb.toml new file mode 100644 index 00000000..2b900e4c --- /dev/null +++ b/advisories/9.5.0/BRSA-9vqpfpmwbtzb.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-9vqpfpmwbtzb" +title = "kernel CVE-2026-98041" +cve = "CVE-2026-98041" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Don't predict JMP32 pointer vs zero comparisons" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-a4y5q8epksiy.toml b/advisories/9.5.0/BRSA-a4y5q8epksiy.toml new file mode 100644 index 00000000..7d16bbef --- /dev/null +++ b/advisories/9.5.0/BRSA-a4y5q8epksiy.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-a4y5q8epksiy" +title = "kernel CVE-2026-90058" +cve = "CVE-2026-90058" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-a8g25gmlt7ye.toml b/advisories/9.5.0/BRSA-a8g25gmlt7ye.toml new file mode 100644 index 00000000..b27e056a --- /dev/null +++ b/advisories/9.5.0/BRSA-a8g25gmlt7ye.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-a8g25gmlt7ye" +title = "kernel CVE-2026-97454" +cve = "CVE-2026-97454" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-aetzjvxesph5.toml b/advisories/9.5.0/BRSA-aetzjvxesph5.toml new file mode 100644 index 00000000..6f2b1632 --- /dev/null +++ b/advisories/9.5.0/BRSA-aetzjvxesph5.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-aetzjvxesph5" +title = "kernel CVE-2026-98120" +cve = "CVE-2026-98120" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: netfs: Fix subreq ref leak" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ap1umbddncbv.toml b/advisories/9.5.0/BRSA-ap1umbddncbv.toml new file mode 100644 index 00000000..526a8bdc --- /dev/null +++ b/advisories/9.5.0/BRSA-ap1umbddncbv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ap1umbddncbv" +title = "kernel CVE-2026-98098" +cve = "CVE-2026-98098" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-aqizs6ylhel6.toml b/advisories/9.5.0/BRSA-aqizs6ylhel6.toml new file mode 100644 index 00000000..a415dd50 --- /dev/null +++ b/advisories/9.5.0/BRSA-aqizs6ylhel6.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-aqizs6ylhel6" +title = "kernel CVE-2026-97450" +cve = "CVE-2026-97450" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-atitetqss5hm.toml b/advisories/9.5.0/BRSA-atitetqss5hm.toml new file mode 100644 index 00000000..a273aec4 --- /dev/null +++ b/advisories/9.5.0/BRSA-atitetqss5hm.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-atitetqss5hm" +title = "kernel CVE-2026-97979" +cve = "CVE-2026-97979" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ice: add missing xa_destroy for sched_node_ids" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-bydkibhz8xb8.toml b/advisories/9.5.0/BRSA-bydkibhz8xb8.toml new file mode 100644 index 00000000..cdece61d --- /dev/null +++ b/advisories/9.5.0/BRSA-bydkibhz8xb8.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-bydkibhz8xb8" +title = "kernel CVE-2026-89543" +cve = "CVE-2026-89543" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: sunrpc: fix use-after-free in __rpc_clnt_handle_event and __rpc_clnt_remove_pipedir Normal client creation goes through rpc_setup_pipedir(), which records" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-bzjhfry9iskx.toml b/advisories/9.5.0/BRSA-bzjhfry9iskx.toml new file mode 100644 index 00000000..5452a4b3 --- /dev/null +++ b/advisories/9.5.0/BRSA-bzjhfry9iskx.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-bzjhfry9iskx" +title = "kernel CVE-2026-97612" +cve = "CVE-2026-97612" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label is popped" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-bzqmgc4ugnia.toml b/advisories/9.5.0/BRSA-bzqmgc4ugnia.toml new file mode 100644 index 00000000..6c2fae82 --- /dev/null +++ b/advisories/9.5.0/BRSA-bzqmgc4ugnia.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-bzqmgc4ugnia" +title = "kernel CVE-2026-93817" +cve = "CVE-2026-93817" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-c7e3kemicggk.toml b/advisories/9.5.0/BRSA-c7e3kemicggk.toml new file mode 100644 index 00000000..ddae351a --- /dev/null +++ b/advisories/9.5.0/BRSA-c7e3kemicggk.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-c7e3kemicggk" +title = "kernel CVE-2026-98037" +cve = "CVE-2026-98037" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject untrusted allocated-object pointers" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ch1vgvzyvmae.toml b/advisories/9.5.0/BRSA-ch1vgvzyvmae.toml new file mode 100644 index 00000000..5e2a9001 --- /dev/null +++ b/advisories/9.5.0/BRSA-ch1vgvzyvmae.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ch1vgvzyvmae" +title = "kernel CVE-2026-89602" +cve = "CVE-2026-89602" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-chdfyr0yiycr.toml b/advisories/9.5.0/BRSA-chdfyr0yiycr.toml new file mode 100644 index 00000000..903a53fd --- /dev/null +++ b/advisories/9.5.0/BRSA-chdfyr0yiycr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-chdfyr0yiycr" +title = "kernel CVE-2026-90435" +cve = "CVE-2026-90435" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Fix integer overflow of user QP buffer size" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ctrasph8tsrr.toml b/advisories/9.5.0/BRSA-ctrasph8tsrr.toml new file mode 100644 index 00000000..6f212064 --- /dev/null +++ b/advisories/9.5.0/BRSA-ctrasph8tsrr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ctrasph8tsrr" +title = "kernel CVE-2026-89700" +cve = "CVE-2026-89700" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: validate sockaddr length per family in listener_set" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-cyqf2fdjnwli.toml b/advisories/9.5.0/BRSA-cyqf2fdjnwli.toml new file mode 100644 index 00000000..a389c9a2 --- /dev/null +++ b/advisories/9.5.0/BRSA-cyqf2fdjnwli.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-cyqf2fdjnwli" +title = "kernel CVE-2026-97978" +cve = "CVE-2026-97978" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TP_printk()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-d3h9s7mtmjtp.toml b/advisories/9.5.0/BRSA-d3h9s7mtmjtp.toml new file mode 100644 index 00000000..8bea2bfb --- /dev/null +++ b/advisories/9.5.0/BRSA-d3h9s7mtmjtp.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-d3h9s7mtmjtp" +title = "kernel CVE-2026-98069" +cve = "CVE-2026-98069" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rds_conn_shutdown()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-d6ppogfmnfxe.toml b/advisories/9.5.0/BRSA-d6ppogfmnfxe.toml new file mode 100644 index 00000000..1c4b73c0 --- /dev/null +++ b/advisories/9.5.0/BRSA-d6ppogfmnfxe.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-d6ppogfmnfxe" +title = "kernel CVE-2026-93794" +cve = "CVE-2026-93794" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dndq2ktg2ysy.toml b/advisories/9.5.0/BRSA-dndq2ktg2ysy.toml new file mode 100644 index 00000000..0432c526 --- /dev/null +++ b/advisories/9.5.0/BRSA-dndq2ktg2ysy.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-dndq2ktg2ysy" +title = "kernel CVE-2026-93801" +cve = "CVE-2026-93801" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifs_open_info_data" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-drkmr2wotiz4.toml b/advisories/9.5.0/BRSA-drkmr2wotiz4.toml new file mode 100644 index 00000000..904806b0 --- /dev/null +++ b/advisories/9.5.0/BRSA-drkmr2wotiz4.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-drkmr2wotiz4" +title = "kernel CVE-2026-98077" +cve = "CVE-2026-98077" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-drziwmsord6n.toml b/advisories/9.5.0/BRSA-drziwmsord6n.toml new file mode 100644 index 00000000..4496e502 --- /dev/null +++ b/advisories/9.5.0/BRSA-drziwmsord6n.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-drziwmsord6n" +title = "kernel CVE-2026-90051" +cve = "CVE-2026-90051" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tcp: reject non zerocopy devmem tx" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml b/advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml new file mode 100644 index 00000000..31f75acf --- /dev/null +++ b/advisories/9.5.0/BRSA-dtxo0jiaqv7j.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-dtxo0jiaqv7j" +title = "kernel CVE-2026-89676" +cve = "CVE-2026-89676" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: fix stale s2s_cp_stateids IDR entry for async COPY" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dupmhyubdnwp.toml b/advisories/9.5.0/BRSA-dupmhyubdnwp.toml new file mode 100644 index 00000000..e3cb950c --- /dev/null +++ b/advisories/9.5.0/BRSA-dupmhyubdnwp.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-dupmhyubdnwp" +title = "kernel CVE-2026-89755" +cve = "CVE-2026-89755" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: clear stale mapping after freeing swapcache" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dwaez4nakn58.toml b/advisories/9.5.0/BRSA-dwaez4nakn58.toml new file mode 100644 index 00000000..6699101a --- /dev/null +++ b/advisories/9.5.0/BRSA-dwaez4nakn58.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-dwaez4nakn58" +title = "kernel CVE-2026-98046" +cve = "CVE-2026-98046" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dy37rz39f4iv.toml b/advisories/9.5.0/BRSA-dy37rz39f4iv.toml new file mode 100644 index 00000000..2973977d --- /dev/null +++ b/advisories/9.5.0/BRSA-dy37rz39f4iv.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-dy37rz39f4iv" +title = "kernel CVE-2026-98104" +cve = "CVE-2026-98104" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dytzq6s0p8td.toml b/advisories/9.5.0/BRSA-dytzq6s0p8td.toml new file mode 100644 index 00000000..51705458 --- /dev/null +++ b/advisories/9.5.0/BRSA-dytzq6s0p8td.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-dytzq6s0p8td" +title = "kernel CVE-2026-97472" +cve = "CVE-2026-97472" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dyxhjgsnx9fw.toml b/advisories/9.5.0/BRSA-dyxhjgsnx9fw.toml new file mode 100644 index 00000000..2de84095 --- /dev/null +++ b/advisories/9.5.0/BRSA-dyxhjgsnx9fw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-dyxhjgsnx9fw" +title = "kernel CVE-2026-90115" +cve = "CVE-2026-90115" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: xsk: fix NULL pointer dereference in __xsk_rcv()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-dz7c04etkuxw.toml b/advisories/9.5.0/BRSA-dz7c04etkuxw.toml new file mode 100644 index 00000000..c4abf4f8 --- /dev/null +++ b/advisories/9.5.0/BRSA-dz7c04etkuxw.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-dz7c04etkuxw" +title = "kernel CVE-2026-97940" +cve = "CVE-2026-97940" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-e55th5vv5d6p.toml b/advisories/9.5.0/BRSA-e55th5vv5d6p.toml new file mode 100644 index 00000000..d8a17623 --- /dev/null +++ b/advisories/9.5.0/BRSA-e55th5vv5d6p.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-e55th5vv5d6p" +title = "kernel CVE-2026-98023" +cve = "CVE-2026-98023" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-e9hp69bhemnc.toml b/advisories/9.5.0/BRSA-e9hp69bhemnc.toml new file mode 100644 index 00000000..b8929193 --- /dev/null +++ b/advisories/9.5.0/BRSA-e9hp69bhemnc.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-e9hp69bhemnc" +title = "kernel CVE-2026-93829" +cve = "CVE-2026-93829" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix races in cifsd thread creation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-eclnmu2hdryw.toml b/advisories/9.5.0/BRSA-eclnmu2hdryw.toml new file mode 100644 index 00000000..71960fdc --- /dev/null +++ b/advisories/9.5.0/BRSA-eclnmu2hdryw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-eclnmu2hdryw" +title = "kernel CVE-2026-80860" +cve = "CVE-2026-80860" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fuse: fix race between interrupt and resend" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-edh4cdfp47vt.toml b/advisories/9.5.0/BRSA-edh4cdfp47vt.toml new file mode 100644 index 00000000..f28b5c76 --- /dev/null +++ b/advisories/9.5.0/BRSA-edh4cdfp47vt.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-edh4cdfp47vt" +title = "kernel CVE-2026-93046" +cve = "CVE-2026-93046" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: software node: Fix software_node_get_reference_args() with index -1" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-eiwk1xqkn2sh.toml b/advisories/9.5.0/BRSA-eiwk1xqkn2sh.toml new file mode 100644 index 00000000..0a5db21a --- /dev/null +++ b/advisories/9.5.0/BRSA-eiwk1xqkn2sh.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-eiwk1xqkn2sh" +title = "kernel CVE-2026-98081" +cve = "CVE-2026-98081" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: zoned: finish active block group cleanup if call_zone_finish() fails" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ekupu5euusoy.toml b/advisories/9.5.0/BRSA-ekupu5euusoy.toml new file mode 100644 index 00000000..b67078c8 --- /dev/null +++ b/advisories/9.5.0/BRSA-ekupu5euusoy.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ekupu5euusoy" +title = "kernel CVE-2026-97560" +cve = "CVE-2026-97560" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix one-byte OOB read in smb2_parse_native_symlink()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-elpxhocyv2xf.toml b/advisories/9.5.0/BRSA-elpxhocyv2xf.toml new file mode 100644 index 00000000..20d8f62c --- /dev/null +++ b/advisories/9.5.0/BRSA-elpxhocyv2xf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-elpxhocyv2xf" +title = "kernel CVE-2026-97449" +cve = "CVE-2026-97449" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-eqgubgpm16j8.toml b/advisories/9.5.0/BRSA-eqgubgpm16j8.toml new file mode 100644 index 00000000..80192aee --- /dev/null +++ b/advisories/9.5.0/BRSA-eqgubgpm16j8.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-eqgubgpm16j8" +title = "kernel CVE-2026-97430" +cve = "CVE-2026-97430" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-eradhhpblhbs.toml b/advisories/9.5.0/BRSA-eradhhpblhbs.toml new file mode 100644 index 00000000..cd793c17 --- /dev/null +++ b/advisories/9.5.0/BRSA-eradhhpblhbs.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-eradhhpblhbs" +title = "kernel CVE-2026-90312" +cve = "CVE-2026-90312" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Check load-acquire src ptr type before the load" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fiivamvyiiqs.toml b/advisories/9.5.0/BRSA-fiivamvyiiqs.toml new file mode 100644 index 00000000..eb668b2e --- /dev/null +++ b/advisories/9.5.0/BRSA-fiivamvyiiqs.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-fiivamvyiiqs" +title = "kernel CVE-2026-98095" +cve = "CVE-2026-98095" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header()." + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fjknwkyjygrl.toml b/advisories/9.5.0/BRSA-fjknwkyjygrl.toml new file mode 100644 index 00000000..d6cd80f4 --- /dev/null +++ b/advisories/9.5.0/BRSA-fjknwkyjygrl.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-fjknwkyjygrl" +title = "kernel CVE-2026-97523" +cve = "CVE-2026-97523" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fmcdmo0dgiks.toml b/advisories/9.5.0/BRSA-fmcdmo0dgiks.toml new file mode 100644 index 00000000..84f08ff9 --- /dev/null +++ b/advisories/9.5.0/BRSA-fmcdmo0dgiks.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-fmcdmo0dgiks" +title = "kernel CVE-2026-97998" +cve = "CVE-2026-97998" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: cope with concurrent instance destruction" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fqijmhbnbxtv.toml b/advisories/9.5.0/BRSA-fqijmhbnbxtv.toml new file mode 100644 index 00000000..219baf25 --- /dev/null +++ b/advisories/9.5.0/BRSA-fqijmhbnbxtv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-fqijmhbnbxtv" +title = "kernel CVE-2026-89544" +cve = "CVE-2026-89544" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix gssx_dec_option_array error path bugs" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fthxkkwocpwa.toml b/advisories/9.5.0/BRSA-fthxkkwocpwa.toml new file mode 100644 index 00000000..e962eb9c --- /dev/null +++ b/advisories/9.5.0/BRSA-fthxkkwocpwa.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-fthxkkwocpwa" +title = "kernel CVE-2026-68289" +cve = "CVE-2026-68289" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-fzdwvkrc9i3d.toml b/advisories/9.5.0/BRSA-fzdwvkrc9i3d.toml new file mode 100644 index 00000000..c135a2b7 --- /dev/null +++ b/advisories/9.5.0/BRSA-fzdwvkrc9i3d.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-fzdwvkrc9i3d" +title = "kernel CVE-2026-89763" +cve = "CVE-2026-89763" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix TPM teardown ordering" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-g05iw46mfufu.toml b/advisories/9.5.0/BRSA-g05iw46mfufu.toml new file mode 100644 index 00000000..81223a3d --- /dev/null +++ b/advisories/9.5.0/BRSA-g05iw46mfufu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-g05iw46mfufu" +title = "kernel CVE-2026-97416" +cve = "CVE-2026-97416" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-g2ncakbst7fz.toml b/advisories/9.5.0/BRSA-g2ncakbst7fz.toml new file mode 100644 index 00000000..d196e655 --- /dev/null +++ b/advisories/9.5.0/BRSA-g2ncakbst7fz.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-g2ncakbst7fz" +title = "kernel CVE-2026-97965" +cve = "CVE-2026-97965" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: vxlan: initialize _md in vxlan_xmit_one()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-g7kpsxsniaph.toml b/advisories/9.5.0/BRSA-g7kpsxsniaph.toml new file mode 100644 index 00000000..b377d1ef --- /dev/null +++ b/advisories/9.5.0/BRSA-g7kpsxsniaph.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-g7kpsxsniaph" +title = "kernel CVE-2026-90072" +cve = "CVE-2026-90072" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum to avoid signed overflow soft lockup" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gaidzdoqxik4.toml b/advisories/9.5.0/BRSA-gaidzdoqxik4.toml new file mode 100644 index 00000000..b30b17a7 --- /dev/null +++ b/advisories/9.5.0/BRSA-gaidzdoqxik4.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-gaidzdoqxik4" +title = "kernel CVE-2026-98063" +cve = "CVE-2026-98063" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in btf_var_show()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gbmzg0rtfdlz.toml b/advisories/9.5.0/BRSA-gbmzg0rtfdlz.toml new file mode 100644 index 00000000..1fa0dd65 --- /dev/null +++ b/advisories/9.5.0/BRSA-gbmzg0rtfdlz.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-gbmzg0rtfdlz" +title = "kernel CVE-2026-98075" +cve = "CVE-2026-98075" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPF_PSEUDO_FUNC reference to the main program" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gdlzfxhzijtp.toml b/advisories/9.5.0/BRSA-gdlzfxhzijtp.toml new file mode 100644 index 00000000..780a0f3b --- /dev/null +++ b/advisories/9.5.0/BRSA-gdlzfxhzijtp.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-gdlzfxhzijtp" +title = "kernel CVE-2026-97943" +cve = "CVE-2026-97943" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm write lock on collapse to avoid UAF" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gg3mzxofutz6.toml b/advisories/9.5.0/BRSA-gg3mzxofutz6.toml new file mode 100644 index 00000000..a1fcfc4d --- /dev/null +++ b/advisories/9.5.0/BRSA-gg3mzxofutz6.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-gg3mzxofutz6" +title = "kernel CVE-2026-74258" +cve = "CVE-2026-74258" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Guard __get_user acesss with access_ok for uprobe_multi data" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ggn0lu4xyroj.toml b/advisories/9.5.0/BRSA-ggn0lu4xyroj.toml new file mode 100644 index 00000000..f53609c9 --- /dev/null +++ b/advisories/9.5.0/BRSA-ggn0lu4xyroj.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ggn0lu4xyroj" +title = "kernel CVE-2026-97443" +cve = "CVE-2026-97443" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_function" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ghiqklogad5b.toml b/advisories/9.5.0/BRSA-ghiqklogad5b.toml new file mode 100644 index 00000000..702fbede --- /dev/null +++ b/advisories/9.5.0/BRSA-ghiqklogad5b.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ghiqklogad5b" +title = "kernel CVE-2026-72438" +cve = "CVE-2026-72438" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: md/raid10: fix writes_pending and barrier reference leaks on discard failures" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ghtbgmr77dmq.toml b/advisories/9.5.0/BRSA-ghtbgmr77dmq.toml new file mode 100644 index 00000000..4a9f9baf --- /dev/null +++ b/advisories/9.5.0/BRSA-ghtbgmr77dmq.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ghtbgmr77dmq" +title = "kernel CVE-2026-93781" +cve = "CVE-2026-93781" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gly5ybh3mccn.toml b/advisories/9.5.0/BRSA-gly5ybh3mccn.toml new file mode 100644 index 00000000..ffdb3b8d --- /dev/null +++ b/advisories/9.5.0/BRSA-gly5ybh3mccn.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-gly5ybh3mccn" +title = "kernel CVE-2026-90189" +cve = "CVE-2026-90189" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: null_blk: register configfs subsystem after creating default devices" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-gvecx3h2rvvi.toml b/advisories/9.5.0/BRSA-gvecx3h2rvvi.toml new file mode 100644 index 00000000..0445a729 --- /dev/null +++ b/advisories/9.5.0/BRSA-gvecx3h2rvvi.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-gvecx3h2rvvi" +title = "kernel CVE-2026-89667" +cve = "CVE-2026-89667" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hankolqmi6go.toml b/advisories/9.5.0/BRSA-hankolqmi6go.toml new file mode 100644 index 00000000..87142c5e --- /dev/null +++ b/advisories/9.5.0/BRSA-hankolqmi6go.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-hankolqmi6go" +title = "kernel CVE-2026-98010" +cve = "CVE-2026-98010" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hfjkx54rpulw.toml b/advisories/9.5.0/BRSA-hfjkx54rpulw.toml new file mode 100644 index 00000000..cc7c9466 --- /dev/null +++ b/advisories/9.5.0/BRSA-hfjkx54rpulw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-hfjkx54rpulw" +title = "kernel CVE-2026-97446" +cve = "CVE-2026-97446" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hhetxy6i2v8q.toml b/advisories/9.5.0/BRSA-hhetxy6i2v8q.toml new file mode 100644 index 00000000..b99631cb --- /dev/null +++ b/advisories/9.5.0/BRSA-hhetxy6i2v8q.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-hhetxy6i2v8q" +title = "kernel CVE-2026-93813" +cve = "CVE-2026-93813" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hi8zr06a9t7g.toml b/advisories/9.5.0/BRSA-hi8zr06a9t7g.toml new file mode 100644 index 00000000..3275a14f --- /dev/null +++ b/advisories/9.5.0/BRSA-hi8zr06a9t7g.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-hi8zr06a9t7g" +title = "kernel CVE-2026-98128" +cve = "CVE-2026-98128" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix target device refcount leak in mpi3mr_sas_port_add()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hnychtihtatx.toml b/advisories/9.5.0/BRSA-hnychtihtatx.toml new file mode 100644 index 00000000..b237d1eb --- /dev/null +++ b/advisories/9.5.0/BRSA-hnychtihtatx.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-hnychtihtatx" +title = "kernel CVE-2026-89777" +cve = "CVE-2026-89777" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: vfio/pci: clear vdev->msi_perm after freeing it on init failure" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hpvajs2wxcfy.toml b/advisories/9.5.0/BRSA-hpvajs2wxcfy.toml new file mode 100644 index 00000000..daa4c239 --- /dev/null +++ b/advisories/9.5.0/BRSA-hpvajs2wxcfy.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-hpvajs2wxcfy" +title = "kernel CVE-2026-90042" +cve = "CVE-2026-90042" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ceph: properly decrypt filenames in vmalloc() buffers" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-hzazo5x5huid.toml b/advisories/9.5.0/BRSA-hzazo5x5huid.toml new file mode 100644 index 00000000..d4089c0c --- /dev/null +++ b/advisories/9.5.0/BRSA-hzazo5x5huid.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-hzazo5x5huid" +title = "kernel CVE-2026-98017" +cve = "CVE-2026-98017" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-i8xzefdhf4ti.toml b/advisories/9.5.0/BRSA-i8xzefdhf4ti.toml new file mode 100644 index 00000000..97f4eb66 --- /dev/null +++ b/advisories/9.5.0/BRSA-i8xzefdhf4ti.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-i8xzefdhf4ti" +title = "kernel CVE-2026-93824" +cve = "CVE-2026-93824" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-i9nzccndxkcz.toml b/advisories/9.5.0/BRSA-i9nzccndxkcz.toml new file mode 100644 index 00000000..788be648 --- /dev/null +++ b/advisories/9.5.0/BRSA-i9nzccndxkcz.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-i9nzccndxkcz" +title = "kernel CVE-2026-98089" +cve = "CVE-2026-98089" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-iaoc1es6mhfq.toml b/advisories/9.5.0/BRSA-iaoc1es6mhfq.toml new file mode 100644 index 00000000..a6068cd4 --- /dev/null +++ b/advisories/9.5.0/BRSA-iaoc1es6mhfq.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-iaoc1es6mhfq" +title = "kernel CVE-2026-98103" +cve = "CVE-2026-98103" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: igmp: convert struct ip_sf_list to RCU" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ieasplo4abme.toml b/advisories/9.5.0/BRSA-ieasplo4abme.toml new file mode 100644 index 00000000..61e97598 --- /dev/null +++ b/advisories/9.5.0/BRSA-ieasplo4abme.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ieasplo4abme" +title = "kernel CVE-2026-98151" +cve = "CVE-2026-98151" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix REG INVARIANTS VIOLATION on speculative pointer arithmetic" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ihgl0xzcetp6.toml b/advisories/9.5.0/BRSA-ihgl0xzcetp6.toml new file mode 100644 index 00000000..3c8aba32 --- /dev/null +++ b/advisories/9.5.0/BRSA-ihgl0xzcetp6.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ihgl0xzcetp6" +title = "kernel CVE-2026-98102" +cve = "CVE-2026-98102" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: fix RCU list diversion in ip6_mc_del1_src()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ile2zor2vjdr.toml b/advisories/9.5.0/BRSA-ile2zor2vjdr.toml new file mode 100644 index 00000000..48292351 --- /dev/null +++ b/advisories/9.5.0/BRSA-ile2zor2vjdr.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-ile2zor2vjdr" +title = "kernel CVE-2026-93288" +cve = "CVE-2026-93288" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-illhy1rulzwj.toml b/advisories/9.5.0/BRSA-illhy1rulzwj.toml new file mode 100644 index 00000000..ca2fde53 --- /dev/null +++ b/advisories/9.5.0/BRSA-illhy1rulzwj.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-illhy1rulzwj" +title = "kernel CVE-2026-98126" +cve = "CVE-2026-98126" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for zero range" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jbffa5je7bvo.toml b/advisories/9.5.0/BRSA-jbffa5je7bvo.toml new file mode 100644 index 00000000..1dea780a --- /dev/null +++ b/advisories/9.5.0/BRSA-jbffa5je7bvo.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jbffa5je7bvo" +title = "kernel CVE-2026-97900" +cve = "CVE-2026-97900" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: drm/drm_exec: fix up contended obj when num_objects is 0" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jdwajksg3djk.toml b/advisories/9.5.0/BRSA-jdwajksg3djk.toml new file mode 100644 index 00000000..4a82dcb7 --- /dev/null +++ b/advisories/9.5.0/BRSA-jdwajksg3djk.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jdwajksg3djk" +title = "kernel CVE-2026-89644" +cve = "CVE-2026-89644" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jg3jvwfmb9cg.toml b/advisories/9.5.0/BRSA-jg3jvwfmb9cg.toml new file mode 100644 index 00000000..828386b1 --- /dev/null +++ b/advisories/9.5.0/BRSA-jg3jvwfmb9cg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jg3jvwfmb9cg" +title = "kernel CVE-2026-93054" +cve = "CVE-2026-93054" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: uio: Fix stale info pointer in failed registration path" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jixatwzw8m6x.toml b/advisories/9.5.0/BRSA-jixatwzw8m6x.toml new file mode 100644 index 00000000..62c9d406 --- /dev/null +++ b/advisories/9.5.0/BRSA-jixatwzw8m6x.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-jixatwzw8m6x" +title = "kernel CVE-2026-97524" +cve = "CVE-2026-97524" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jkgylqpvr8ux.toml b/advisories/9.5.0/BRSA-jkgylqpvr8ux.toml new file mode 100644 index 00000000..c64c720f --- /dev/null +++ b/advisories/9.5.0/BRSA-jkgylqpvr8ux.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jkgylqpvr8ux" +title = "kernel CVE-2026-97995" +cve = "CVE-2026-97995" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: virtio_console: do not free control-out buffers on remove" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jukr43uuqspu.toml b/advisories/9.5.0/BRSA-jukr43uuqspu.toml new file mode 100644 index 00000000..56189a5b --- /dev/null +++ b/advisories/9.5.0/BRSA-jukr43uuqspu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jukr43uuqspu" +title = "kernel CVE-2026-90430" +cve = "CVE-2026-90430" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jvf1uy1nxxgc.toml b/advisories/9.5.0/BRSA-jvf1uy1nxxgc.toml new file mode 100644 index 00000000..9259a83b --- /dev/null +++ b/advisories/9.5.0/BRSA-jvf1uy1nxxgc.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jvf1uy1nxxgc" +title = "kernel CVE-2026-98129" +cve = "CVE-2026-98129" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: scsi: mpi3mr: Fix NULL pointer dereference in mpi3mr_sas_port_add()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-jx4zqlwlv7ix.toml b/advisories/9.5.0/BRSA-jx4zqlwlv7ix.toml new file mode 100644 index 00000000..da3e8ab2 --- /dev/null +++ b/advisories/9.5.0/BRSA-jx4zqlwlv7ix.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-jx4zqlwlv7ix" +title = "kernel CVE-2026-90393" +cve = "CVE-2026-90393" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix potential UAF in bpf_netns_link_update_prog" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-k4cztdwtz3xk.toml b/advisories/9.5.0/BRSA-k4cztdwtz3xk.toml new file mode 100644 index 00000000..8cc2b81c --- /dev/null +++ b/advisories/9.5.0/BRSA-k4cztdwtz3xk.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-k4cztdwtz3xk" +title = "kernel CVE-2026-97958" +cve = "CVE-2026-97958" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain()." + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-kkdymisgjmod.toml b/advisories/9.5.0/BRSA-kkdymisgjmod.toml new file mode 100644 index 00000000..88fa0b56 --- /dev/null +++ b/advisories/9.5.0/BRSA-kkdymisgjmod.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-kkdymisgjmod" +title = "kernel CVE-2026-98070" +cve = "CVE-2026-98070" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-kovxfey0ccqw.toml b/advisories/9.5.0/BRSA-kovxfey0ccqw.toml new file mode 100644 index 00000000..3bde5381 --- /dev/null +++ b/advisories/9.5.0/BRSA-kovxfey0ccqw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-kovxfey0ccqw" +title = "kernel CVE-2026-90039" +cve = "CVE-2026-90039" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Guard admin state-revocation walks with NFSD_NET_UP" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml b/advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml new file mode 100644 index 00000000..97cf325b --- /dev/null +++ b/advisories/9.5.0/BRSA-kpcyj8dhsnn5.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-kpcyj8dhsnn5" +title = "kernel CVE-2026-97602" +cve = "CVE-2026-97602" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: inet: frags: invalidate queues before flushing them" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-l4delc8qhhhk.toml b/advisories/9.5.0/BRSA-l4delc8qhhhk.toml new file mode 100644 index 00000000..0c926774 --- /dev/null +++ b/advisories/9.5.0/BRSA-l4delc8qhhhk.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-l4delc8qhhhk" +title = "kernel CVE-2026-98083" +cve = "CVE-2026-98083" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix transaction use-after-free in raid stripe insertion" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ldxyinfahsgf.toml b/advisories/9.5.0/BRSA-ldxyinfahsgf.toml new file mode 100644 index 00000000..728ed324 --- /dev/null +++ b/advisories/9.5.0/BRSA-ldxyinfahsgf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ldxyinfahsgf" +title = "kernel CVE-2026-90199" +cve = "CVE-2026-90199" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject out-of-range evcn in mi_enum_attr()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-lh2dbyfszkka.toml b/advisories/9.5.0/BRSA-lh2dbyfszkka.toml new file mode 100644 index 00000000..70b58676 --- /dev/null +++ b/advisories/9.5.0/BRSA-lh2dbyfszkka.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-lh2dbyfszkka" +title = "kernel CVE-2026-97925" +cve = "CVE-2026-97925" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-lhk0xwwyrdzw.toml b/advisories/9.5.0/BRSA-lhk0xwwyrdzw.toml new file mode 100644 index 00000000..fa5ea18a --- /dev/null +++ b/advisories/9.5.0/BRSA-lhk0xwwyrdzw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-lhk0xwwyrdzw" +title = "kernel CVE-2026-90358" +cve = "CVE-2026-90358" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf, x86: Fix trampoline stack size for 128-bit arguments" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-lov4noj2mf2o.toml b/advisories/9.5.0/BRSA-lov4noj2mf2o.toml new file mode 100644 index 00000000..687cd88c --- /dev/null +++ b/advisories/9.5.0/BRSA-lov4noj2mf2o.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-lov4noj2mf2o" +title = "kernel CVE-2026-97596" +cve = "CVE-2026-97596" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-lowbytdxlzor.toml b/advisories/9.5.0/BRSA-lowbytdxlzor.toml new file mode 100644 index 00000000..e9fb559c --- /dev/null +++ b/advisories/9.5.0/BRSA-lowbytdxlzor.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-lowbytdxlzor" +title = "kernel CVE-2026-93250" +cve = "CVE-2026-93250" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ls76aet0rwq5.toml b/advisories/9.5.0/BRSA-ls76aet0rwq5.toml new file mode 100644 index 00000000..5531b159 --- /dev/null +++ b/advisories/9.5.0/BRSA-ls76aet0rwq5.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ls76aet0rwq5" +title = "kernel CVE-2026-89589" +cve = "CVE-2026-89589" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: acpi/apei/ghes: Use raw_spinlock_t for CXL CPER work locks" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-lvtrgkbgtgi2.toml b/advisories/9.5.0/BRSA-lvtrgkbgtgi2.toml new file mode 100644 index 00000000..bb1917a7 --- /dev/null +++ b/advisories/9.5.0/BRSA-lvtrgkbgtgi2.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-lvtrgkbgtgi2" +title = "kernel CVE-2026-90073" +cve = "CVE-2026-90073" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum before hhf_change() to avoid overflow" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-md1cjjoc9jzs.toml b/advisories/9.5.0/BRSA-md1cjjoc9jzs.toml new file mode 100644 index 00000000..d56c5c43 --- /dev/null +++ b/advisories/9.5.0/BRSA-md1cjjoc9jzs.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-md1cjjoc9jzs" +title = "kernel CVE-2026-93785" +cve = "CVE-2026-93785" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-mo1jyariozg2.toml b/advisories/9.5.0/BRSA-mo1jyariozg2.toml new file mode 100644 index 00000000..3082b7f7 --- /dev/null +++ b/advisories/9.5.0/BRSA-mo1jyariozg2.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-mo1jyariozg2" +title = "kernel CVE-2026-97905" +cve = "CVE-2026-97905" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-mpgzbmc1tjxg.toml b/advisories/9.5.0/BRSA-mpgzbmc1tjxg.toml new file mode 100644 index 00000000..8e59fb1f --- /dev/null +++ b/advisories/9.5.0/BRSA-mpgzbmc1tjxg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-mpgzbmc1tjxg" +title = "kernel CVE-2026-93825" +cve = "CVE-2026-93825" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: spi: Add NULL check for spi_get_device_id() in spi_get_device_match_data()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-mswnxvqrzcw9.toml b/advisories/9.5.0/BRSA-mswnxvqrzcw9.toml new file mode 100644 index 00000000..ef237409 --- /dev/null +++ b/advisories/9.5.0/BRSA-mswnxvqrzcw9.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-mswnxvqrzcw9" +title = "kernel CVE-2026-93787" +cve = "CVE-2026-93787" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-mtx9a9lbnm8s.toml b/advisories/9.5.0/BRSA-mtx9a9lbnm8s.toml new file mode 100644 index 00000000..3fc4f437 --- /dev/null +++ b/advisories/9.5.0/BRSA-mtx9a9lbnm8s.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-mtx9a9lbnm8s" +title = "kernel CVE-2026-97455" +cve = "CVE-2026-97455" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-muxyhkxjq2be.toml b/advisories/9.5.0/BRSA-muxyhkxjq2be.toml new file mode 100644 index 00000000..9d733b6e --- /dev/null +++ b/advisories/9.5.0/BRSA-muxyhkxjq2be.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-muxyhkxjq2be" +title = "kernel CVE-2026-93795" +cve = "CVE-2026-93795" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and online flag on radix_tree_insert failure" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-mwgxe9ialdl3.toml b/advisories/9.5.0/BRSA-mwgxe9ialdl3.toml new file mode 100644 index 00000000..9056739e --- /dev/null +++ b/advisories/9.5.0/BRSA-mwgxe9ialdl3.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-mwgxe9ialdl3" +title = "kernel CVE-2026-98045" +cve = "CVE-2026-98045" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark faultable stack helpers as sleepable" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-n637nzfe9zjt.toml b/advisories/9.5.0/BRSA-n637nzfe9zjt.toml new file mode 100644 index 00000000..e4afc565 --- /dev/null +++ b/advisories/9.5.0/BRSA-n637nzfe9zjt.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-n637nzfe9zjt" +title = "kernel CVE-2026-97608" +cve = "CVE-2026-97608" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregister loggers before per-net teardown" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nif5jpb7f2ya.toml b/advisories/9.5.0/BRSA-nif5jpb7f2ya.toml new file mode 100644 index 00000000..1dd4d33f --- /dev/null +++ b/advisories/9.5.0/BRSA-nif5jpb7f2ya.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nif5jpb7f2ya" +title = "kernel CVE-2026-97556" +cve = "CVE-2026-97556" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifs_sb_tlink() fails" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nig833iyfkqn.toml b/advisories/9.5.0/BRSA-nig833iyfkqn.toml new file mode 100644 index 00000000..2cad52de --- /dev/null +++ b/advisories/9.5.0/BRSA-nig833iyfkqn.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nig833iyfkqn" +title = "kernel CVE-2026-89791" +cve = "CVE-2026-89791" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: perf: Fix use-after-free when perf mmap() revival races with the last munmap()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nmov3mwnwli9.toml b/advisories/9.5.0/BRSA-nmov3mwnwli9.toml new file mode 100644 index 00000000..7b00a8c1 --- /dev/null +++ b/advisories/9.5.0/BRSA-nmov3mwnwli9.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nmov3mwnwli9" +title = "kernel CVE-2026-97961" +cve = "CVE-2026-97961" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: perf/core: Allow list_del during perf_event_overflow()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nthucuqdts0q.toml b/advisories/9.5.0/BRSA-nthucuqdts0q.toml new file mode 100644 index 00000000..a64d1130 --- /dev/null +++ b/advisories/9.5.0/BRSA-nthucuqdts0q.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nthucuqdts0q" +title = "kernel CVE-2026-98076" +cve = "CVE-2026-98076" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix use-after-free on field name/type of events with multiple probes" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nwnzbayzrqo0.toml b/advisories/9.5.0/BRSA-nwnzbayzrqo0.toml new file mode 100644 index 00000000..be163dc3 --- /dev/null +++ b/advisories/9.5.0/BRSA-nwnzbayzrqo0.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nwnzbayzrqo0" +title = "kernel CVE-2026-97899" +cve = "CVE-2026-97899" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nyuzv3qm6u98.toml b/advisories/9.5.0/BRSA-nyuzv3qm6u98.toml new file mode 100644 index 00000000..e7e7c016 --- /dev/null +++ b/advisories/9.5.0/BRSA-nyuzv3qm6u98.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-nyuzv3qm6u98" +title = "kernel CVE-2026-98047" +cve = "CVE-2026-98047" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Check ancestor frames for rbtree callbacks" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-nzyaefsormfy.toml b/advisories/9.5.0/BRSA-nzyaefsormfy.toml new file mode 100644 index 00000000..a78eb22b --- /dev/null +++ b/advisories/9.5.0/BRSA-nzyaefsormfy.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-nzyaefsormfy" +title = "kernel CVE-2026-74289" +cve = "CVE-2026-74289" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify()." + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-o5o4crkph9gh.toml b/advisories/9.5.0/BRSA-o5o4crkph9gh.toml new file mode 100644 index 00000000..313b4ad7 --- /dev/null +++ b/advisories/9.5.0/BRSA-o5o4crkph9gh.toml @@ -0,0 +1,16 @@ +[advisory] +id = "BRSA-o5o4crkph9gh" +title = "Bottlerocket Kernel 6.12 Updates" +severity = "high" +description = "Kernel version 6.12.111 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version." + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-o5x3whutsupv.toml b/advisories/9.5.0/BRSA-o5x3whutsupv.toml new file mode 100644 index 00000000..2919ab35 --- /dev/null +++ b/advisories/9.5.0/BRSA-o5x3whutsupv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-o5x3whutsupv" +title = "kernel CVE-2026-98156" +cve = "CVE-2026-98156" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use the DMA API for resource backing on Xen" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-o64mg0jzoi2z.toml b/advisories/9.5.0/BRSA-o64mg0jzoi2z.toml new file mode 100644 index 00000000..ef849352 --- /dev/null +++ b/advisories/9.5.0/BRSA-o64mg0jzoi2z.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-o64mg0jzoi2z" +title = "kernel CVE-2026-98007" +cve = "CVE-2026-98007" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpf_loop iteration counts" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-oe9ldfzcgwhk.toml b/advisories/9.5.0/BRSA-oe9ldfzcgwhk.toml new file mode 100644 index 00000000..c6fbe196 --- /dev/null +++ b/advisories/9.5.0/BRSA-oe9ldfzcgwhk.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-oe9ldfzcgwhk" +title = "kernel CVE-2026-98097" +cve = "CVE-2026-98097" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tipc: Dont send random pad bytes in RESET/ACTIVATE messages" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-oesfvvke48v0.toml b/advisories/9.5.0/BRSA-oesfvvke48v0.toml new file mode 100644 index 00000000..0ba9a2e4 --- /dev/null +++ b/advisories/9.5.0/BRSA-oesfvvke48v0.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-oesfvvke48v0" +title = "kernel CVE-2026-80841" +cve = "CVE-2026-80841" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/packet: defer vmalloc TX_RING free until skbs finish" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-oi3nwr64frkp.toml b/advisories/9.5.0/BRSA-oi3nwr64frkp.toml new file mode 100644 index 00000000..452e186a --- /dev/null +++ b/advisories/9.5.0/BRSA-oi3nwr64frkp.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-oi3nwr64frkp" +title = "kernel CVE-2026-98057" +cve = "CVE-2026-98057" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Add checking nr_subbufs to persistent ring buffer validation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-oqr6ksldnf94.toml b/advisories/9.5.0/BRSA-oqr6ksldnf94.toml new file mode 100644 index 00000000..f36c3ae2 --- /dev/null +++ b/advisories/9.5.0/BRSA-oqr6ksldnf94.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-oqr6ksldnf94" +title = "kernel CVE-2026-74347" +cve = "CVE-2026-74347" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-p1umuew9y3l8.toml b/advisories/9.5.0/BRSA-p1umuew9y3l8.toml new file mode 100644 index 00000000..e6ce43b3 --- /dev/null +++ b/advisories/9.5.0/BRSA-p1umuew9y3l8.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-p1umuew9y3l8" +title = "kernel CVE-2026-97945" +cve = "CVE-2026-97945" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: x86/mm: Fix user-space data loss with MADV_FREE and THP" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-p5cbazwcywbu.toml b/advisories/9.5.0/BRSA-p5cbazwcywbu.toml new file mode 100644 index 00000000..ecb120a8 --- /dev/null +++ b/advisories/9.5.0/BRSA-p5cbazwcywbu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-p5cbazwcywbu" +title = "kernel CVE-2026-90036" +cve = "CVE-2026-90036" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during blocked-lock reaping" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pbbjpri0bhqu.toml b/advisories/9.5.0/BRSA-pbbjpri0bhqu.toml new file mode 100644 index 00000000..da35002e --- /dev/null +++ b/advisories/9.5.0/BRSA-pbbjpri0bhqu.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-pbbjpri0bhqu" +title = "kernel CVE-2026-98015" +cve = "CVE-2026-98015" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pbxjivxkmspo.toml b/advisories/9.5.0/BRSA-pbxjivxkmspo.toml new file mode 100644 index 00000000..7bcc417c --- /dev/null +++ b/advisories/9.5.0/BRSA-pbxjivxkmspo.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-pbxjivxkmspo" +title = "kernel CVE-2026-90037" +cve = "CVE-2026-90037" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during close_lru reaping" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-peim2i8jgivr.toml b/advisories/9.5.0/BRSA-peim2i8jgivr.toml new file mode 100644 index 00000000..3b00eb0e --- /dev/null +++ b/advisories/9.5.0/BRSA-peim2i8jgivr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-peim2i8jgivr" +title = "kernel CVE-2026-97417" +cve = "CVE-2026-97417" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-peptsin14twb.toml b/advisories/9.5.0/BRSA-peptsin14twb.toml new file mode 100644 index 00000000..c2797405 --- /dev/null +++ b/advisories/9.5.0/BRSA-peptsin14twb.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-peptsin14twb" +title = "kernel CVE-2026-68337" +cve = "CVE-2026-68337" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpf_net_context" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pku66mh3zwrf.toml b/advisories/9.5.0/BRSA-pku66mh3zwrf.toml new file mode 100644 index 00000000..5a53d284 --- /dev/null +++ b/advisories/9.5.0/BRSA-pku66mh3zwrf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-pku66mh3zwrf" +title = "kernel CVE-2026-80925" +cve = "CVE-2026-80925" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when toggling HW VLAN offload" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-psahx1w9gwaj.toml b/advisories/9.5.0/BRSA-psahx1w9gwaj.toml new file mode 100644 index 00000000..a44fb848 --- /dev/null +++ b/advisories/9.5.0/BRSA-psahx1w9gwaj.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-psahx1w9gwaj" +title = "kernel CVE-2026-97522" +cve = "CVE-2026-97522" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: fix bad accounting in __mptcp_subflow_push_pending()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pvkftmg0jrxt.toml b/advisories/9.5.0/BRSA-pvkftmg0jrxt.toml new file mode 100644 index 00000000..cc9ea272 --- /dev/null +++ b/advisories/9.5.0/BRSA-pvkftmg0jrxt.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-pvkftmg0jrxt" +title = "kernel CVE-2026-98078" +cve = "CVE-2026-98078" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pw6v3rxu7y1k.toml b/advisories/9.5.0/BRSA-pw6v3rxu7y1k.toml new file mode 100644 index 00000000..28ab7e71 --- /dev/null +++ b/advisories/9.5.0/BRSA-pw6v3rxu7y1k.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-pw6v3rxu7y1k" +title = "kernel CVE-2026-90102" +cve = "CVE-2026-90102" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: key the data server cache on the NFS version" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-pw8p9sfrfxdi.toml b/advisories/9.5.0/BRSA-pw8p9sfrfxdi.toml new file mode 100644 index 00000000..cb583103 --- /dev/null +++ b/advisories/9.5.0/BRSA-pw8p9sfrfxdi.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-pw8p9sfrfxdi" +title = "kernel CVE-2026-89971" +cve = "CVE-2026-89971" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-px7cuiyqfqgv.toml b/advisories/9.5.0/BRSA-px7cuiyqfqgv.toml new file mode 100644 index 00000000..f6e2aa19 --- /dev/null +++ b/advisories/9.5.0/BRSA-px7cuiyqfqgv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-px7cuiyqfqgv" +title = "kernel CVE-2026-98064" +cve = "CVE-2026-98064" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref when showing a void BTF type" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-q7sokrm4fdeg.toml b/advisories/9.5.0/BRSA-q7sokrm4fdeg.toml new file mode 100644 index 00000000..8d99bd7c --- /dev/null +++ b/advisories/9.5.0/BRSA-q7sokrm4fdeg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-q7sokrm4fdeg" +title = "kernel CVE-2026-97448" +cve = "CVE-2026-97448" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qbv8bb1ujmjc.toml b/advisories/9.5.0/BRSA-qbv8bb1ujmjc.toml new file mode 100644 index 00000000..d1978dbe --- /dev/null +++ b/advisories/9.5.0/BRSA-qbv8bb1ujmjc.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qbv8bb1ujmjc" +title = "kernel CVE-2026-92507" +cve = "CVE-2026-92507" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Fix potential use after free in ib_dealloc_pd_user()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qjoxwl3xghgg.toml b/advisories/9.5.0/BRSA-qjoxwl3xghgg.toml new file mode 100644 index 00000000..0b9801fb --- /dev/null +++ b/advisories/9.5.0/BRSA-qjoxwl3xghgg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qjoxwl3xghgg" +title = "kernel CVE-2026-97562" +cve = "CVE-2026-97562" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: pin DFS superblock in iterator callback" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qlg0dsti52s9.toml b/advisories/9.5.0/BRSA-qlg0dsti52s9.toml new file mode 100644 index 00000000..dec6c7c3 --- /dev/null +++ b/advisories/9.5.0/BRSA-qlg0dsti52s9.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-qlg0dsti52s9" +title = "kernel CVE-2026-93827" +cve = "CVE-2026-93827" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: virtio-fs: avoid double-free on failed queue setup" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qliwotoxqfez.toml b/advisories/9.5.0/BRSA-qliwotoxqfez.toml new file mode 100644 index 00000000..5fa07f72 --- /dev/null +++ b/advisories/9.5.0/BRSA-qliwotoxqfez.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qliwotoxqfez" +title = "kernel CVE-2026-98090" +cve = "CVE-2026-98090" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qosprnpwmk4w.toml b/advisories/9.5.0/BRSA-qosprnpwmk4w.toml new file mode 100644 index 00000000..8acf09b7 --- /dev/null +++ b/advisories/9.5.0/BRSA-qosprnpwmk4w.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qosprnpwmk4w" +title = "kernel CVE-2026-97551" +cve = "CVE-2026-97551" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: xfs: initialise args->total for parent pointer updates" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qponpfowweax.toml b/advisories/9.5.0/BRSA-qponpfowweax.toml new file mode 100644 index 00000000..eb6e0e9c --- /dev/null +++ b/advisories/9.5.0/BRSA-qponpfowweax.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qponpfowweax" +title = "kernel CVE-2026-97437" +cve = "CVE-2026-97437" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qs0setzgqadc.toml b/advisories/9.5.0/BRSA-qs0setzgqadc.toml new file mode 100644 index 00000000..1fe300a4 --- /dev/null +++ b/advisories/9.5.0/BRSA-qs0setzgqadc.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qs0setzgqadc" +title = "kernel CVE-2026-93268" +cve = "CVE-2026-93268" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-qwm7azno0dop.toml b/advisories/9.5.0/BRSA-qwm7azno0dop.toml new file mode 100644 index 00000000..5921ffb1 --- /dev/null +++ b/advisories/9.5.0/BRSA-qwm7azno0dop.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-qwm7azno0dop" +title = "kernel CVE-2026-90103" +cve = "CVE-2026-90103" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fix LAYOUTSTATS send buffer exhaustion" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-re4bg644ex6l.toml b/advisories/9.5.0/BRSA-re4bg644ex6l.toml new file mode 100644 index 00000000..c438075b --- /dev/null +++ b/advisories/9.5.0/BRSA-re4bg644ex6l.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-re4bg644ex6l" +title = "kernel CVE-2026-89564" +cve = "CVE-2026-89564" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ip: orphan prefetched skbs before multicast forwarding" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-rfc39lix54h9.toml b/advisories/9.5.0/BRSA-rfc39lix54h9.toml new file mode 100644 index 00000000..3123673b --- /dev/null +++ b/advisories/9.5.0/BRSA-rfc39lix54h9.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-rfc39lix54h9" +title = "kernel CVE-2026-98130" +cve = "CVE-2026-98130" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-rlw8scbozxcw.toml b/advisories/9.5.0/BRSA-rlw8scbozxcw.toml new file mode 100644 index 00000000..b015269f --- /dev/null +++ b/advisories/9.5.0/BRSA-rlw8scbozxcw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-rlw8scbozxcw" +title = "kernel CVE-2026-97451" +cve = "CVE-2026-97451" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ropawrbbjvpg.toml b/advisories/9.5.0/BRSA-ropawrbbjvpg.toml new file mode 100644 index 00000000..ffc4bfc0 --- /dev/null +++ b/advisories/9.5.0/BRSA-ropawrbbjvpg.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-ropawrbbjvpg" +title = "kernel CVE-2026-98056" +cve = "CVE-2026-98056" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: nvme: remove stale namespaces by NSID range during scan" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-rpouhica7zpf.toml b/advisories/9.5.0/BRSA-rpouhica7zpf.toml new file mode 100644 index 00000000..a65733e3 --- /dev/null +++ b/advisories/9.5.0/BRSA-rpouhica7zpf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-rpouhica7zpf" +title = "kernel CVE-2026-98022" +cve = "CVE-2026-98022" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-rujilezlembr.toml b/advisories/9.5.0/BRSA-rujilezlembr.toml new file mode 100644 index 00000000..b5156675 --- /dev/null +++ b/advisories/9.5.0/BRSA-rujilezlembr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-rujilezlembr" +title = "kernel CVE-2026-97445" +cve = "CVE-2026-97445" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ryhjd6g1zrre.toml b/advisories/9.5.0/BRSA-ryhjd6g1zrre.toml new file mode 100644 index 00000000..3ff4fa35 --- /dev/null +++ b/advisories/9.5.0/BRSA-ryhjd6g1zrre.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ryhjd6g1zrre" +title = "kernel CVE-2026-72413" +cve = "CVE-2026-72413" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix err_chunk memory leaks in INIT handling" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-rz8bdytc4amf.toml b/advisories/9.5.0/BRSA-rz8bdytc4amf.toml new file mode 100644 index 00000000..ea1fe6cb --- /dev/null +++ b/advisories/9.5.0/BRSA-rz8bdytc4amf.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-rz8bdytc4amf" +title = "kernel CVE-2026-97617" +cve = "CVE-2026-97617" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Check resize_disabled before publishing the new subbuf order" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-s0qidl7imddk.toml b/advisories/9.5.0/BRSA-s0qidl7imddk.toml new file mode 100644 index 00000000..2c4270fe --- /dev/null +++ b/advisories/9.5.0/BRSA-s0qidl7imddk.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-s0qidl7imddk" +title = "kernel CVE-2026-98122" +cve = "CVE-2026-98122" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix use-after-free in vxlan_mdb_remote_src_del()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-s3mtgjkio8bd.toml b/advisories/9.5.0/BRSA-s3mtgjkio8bd.toml new file mode 100644 index 00000000..3b91ff83 --- /dev/null +++ b/advisories/9.5.0/BRSA-s3mtgjkio8bd.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-s3mtgjkio8bd" +title = "kernel CVE-2026-89693" +cve = "CVE-2026-89693" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-s5kec1cvmzbn.toml b/advisories/9.5.0/BRSA-s5kec1cvmzbn.toml new file mode 100644 index 00000000..9d89e20e --- /dev/null +++ b/advisories/9.5.0/BRSA-s5kec1cvmzbn.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-s5kec1cvmzbn" +title = "kernel CVE-2026-97452" +cve = "CVE-2026-97452" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-scexhsvca5oe.toml b/advisories/9.5.0/BRSA-scexhsvca5oe.toml new file mode 100644 index 00000000..ba8f1364 --- /dev/null +++ b/advisories/9.5.0/BRSA-scexhsvca5oe.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-scexhsvca5oe" +title = "kernel CVE-2026-97568" +cve = "CVE-2026-97568" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-sed2ac6ifa3b.toml b/advisories/9.5.0/BRSA-sed2ac6ifa3b.toml new file mode 100644 index 00000000..0a0a0d5d --- /dev/null +++ b/advisories/9.5.0/BRSA-sed2ac6ifa3b.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-sed2ac6ifa3b" +title = "kernel CVE-2026-97505" +cve = "CVE-2026-97505" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: PCI/sysfs: Add CAP_SYS_ADMIN check to __resource_resize_store()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-seqhdhudmm1g.toml b/advisories/9.5.0/BRSA-seqhdhudmm1g.toml new file mode 100644 index 00000000..bbe5839a --- /dev/null +++ b/advisories/9.5.0/BRSA-seqhdhudmm1g.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-seqhdhudmm1g" +title = "kernel CVE-2026-90429" +cve = "CVE-2026-90429" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-sikvstpuveen.toml b/advisories/9.5.0/BRSA-sikvstpuveen.toml new file mode 100644 index 00000000..a15225ec --- /dev/null +++ b/advisories/9.5.0/BRSA-sikvstpuveen.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-sikvstpuveen" +title = "kernel CVE-2026-89799" +cve = "CVE-2026-89799" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Disable preemption in bpf_get_stackid" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-sq6220zlvh9e.toml b/advisories/9.5.0/BRSA-sq6220zlvh9e.toml new file mode 100644 index 00000000..e5f7f395 --- /dev/null +++ b/advisories/9.5.0/BRSA-sq6220zlvh9e.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-sq6220zlvh9e" +title = "kernel CVE-2026-90063" +cve = "CVE-2026-90063" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: virtio-net: Ensure that TCP packets don't overflow gso_segs" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tamtlzjnaeph.toml b/advisories/9.5.0/BRSA-tamtlzjnaeph.toml new file mode 100644 index 00000000..43eed0ae --- /dev/null +++ b/advisories/9.5.0/BRSA-tamtlzjnaeph.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tamtlzjnaeph" +title = "kernel CVE-2026-98157" +cve = "CVE-2026-98157" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tbymncwhz64f.toml b/advisories/9.5.0/BRSA-tbymncwhz64f.toml new file mode 100644 index 00000000..fffd5a39 --- /dev/null +++ b/advisories/9.5.0/BRSA-tbymncwhz64f.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tbymncwhz64f" +title = "kernel CVE-2026-98021" +cve = "CVE-2026-98021" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net: reject oversized tx_queue_len at netlink parse time" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tcbqlm4mohdr.toml b/advisories/9.5.0/BRSA-tcbqlm4mohdr.toml new file mode 100644 index 00000000..84983c83 --- /dev/null +++ b/advisories/9.5.0/BRSA-tcbqlm4mohdr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tcbqlm4mohdr" +title = "kernel CVE-2026-72402" +cve = "CVE-2026-72402" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tevjhcxpuh8g.toml b/advisories/9.5.0/BRSA-tevjhcxpuh8g.toml new file mode 100644 index 00000000..6416531d --- /dev/null +++ b/advisories/9.5.0/BRSA-tevjhcxpuh8g.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-tevjhcxpuh8g" +title = "kernel CVE-2026-97438" +cve = "CVE-2026-97438" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tfd1aduxedsw.toml b/advisories/9.5.0/BRSA-tfd1aduxedsw.toml new file mode 100644 index 00000000..8963f8ec --- /dev/null +++ b/advisories/9.5.0/BRSA-tfd1aduxedsw.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-tfd1aduxedsw" +title = "kernel CVE-2026-97951" +cve = "CVE-2026-97951" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tfnxwlvcrdlj.toml b/advisories/9.5.0/BRSA-tfnxwlvcrdlj.toml new file mode 100644 index 00000000..cc755cb2 --- /dev/null +++ b/advisories/9.5.0/BRSA-tfnxwlvcrdlj.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tfnxwlvcrdlj" +title = "kernel CVE-2026-97606" +cve = "CVE-2026-97606" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: fs: autofs: fix memory leak in autofs_fill_super()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-thg8yjrlaftr.toml b/advisories/9.5.0/BRSA-thg8yjrlaftr.toml new file mode 100644 index 00000000..08641877 --- /dev/null +++ b/advisories/9.5.0/BRSA-thg8yjrlaftr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-thg8yjrlaftr" +title = "kernel CVE-2026-98031" +cve = "CVE-2026-98031" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tn12x1ihqbwv.toml b/advisories/9.5.0/BRSA-tn12x1ihqbwv.toml new file mode 100644 index 00000000..252a207d --- /dev/null +++ b/advisories/9.5.0/BRSA-tn12x1ihqbwv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tn12x1ihqbwv" +title = "kernel CVE-2026-89561" +cve = "CVE-2026-89561" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-tv3zin2nthe6.toml b/advisories/9.5.0/BRSA-tv3zin2nthe6.toml new file mode 100644 index 00000000..d85b8ed0 --- /dev/null +++ b/advisories/9.5.0/BRSA-tv3zin2nthe6.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-tv3zin2nthe6" +title = "kernel CVE-2026-98071" +cve = "CVE-2026-98071" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp_flags bits individually in rds_conn_path_reset()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-twgn3qyakvko.toml b/advisories/9.5.0/BRSA-twgn3qyakvko.toml new file mode 100644 index 00000000..c5974e69 --- /dev/null +++ b/advisories/9.5.0/BRSA-twgn3qyakvko.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-twgn3qyakvko" +title = "kernel CVE-2026-90075" +cve = "CVE-2026-90075" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: fq_codel: clamp default quantum and mtu" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-u29kdlhrlo1w.toml b/advisories/9.5.0/BRSA-u29kdlhrlo1w.toml new file mode 100644 index 00000000..617cbfc4 --- /dev/null +++ b/advisories/9.5.0/BRSA-u29kdlhrlo1w.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-u29kdlhrlo1w" +title = "kernel CVE-2026-97565" +cve = "CVE-2026-97565" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: reject short READ responses in CIFSSMBRead()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-uce82hsmktp9.toml b/advisories/9.5.0/BRSA-uce82hsmktp9.toml new file mode 100644 index 00000000..b77e83df --- /dev/null +++ b/advisories/9.5.0/BRSA-uce82hsmktp9.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-uce82hsmktp9" +title = "kernel CVE-2026-93243" +cve = "CVE-2026-93243" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-udoy28hnwf7a.toml b/advisories/9.5.0/BRSA-udoy28hnwf7a.toml new file mode 100644 index 00000000..dfa478bc --- /dev/null +++ b/advisories/9.5.0/BRSA-udoy28hnwf7a.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-udoy28hnwf7a" +title = "kernel CVE-2026-98026" +cve = "CVE-2026-98026" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net: bridge: mcast: properly convert mglist to rcu" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-uebnmuxeigax.toml b/advisories/9.5.0/BRSA-uebnmuxeigax.toml new file mode 100644 index 00000000..f388257a --- /dev/null +++ b/advisories/9.5.0/BRSA-uebnmuxeigax.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-uebnmuxeigax" +title = "kernel CVE-2026-98059" +cve = "CVE-2026-98059" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark sched_process_wait argument as nullable" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ugiy6ocefr6e.toml b/advisories/9.5.0/BRSA-ugiy6ocefr6e.toml new file mode 100644 index 00000000..f8bc39e0 --- /dev/null +++ b/advisories/9.5.0/BRSA-ugiy6ocefr6e.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ugiy6ocefr6e" +title = "kernel CVE-2026-98091" +cve = "CVE-2026-98091" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ulmomvyaya0o.toml b/advisories/9.5.0/BRSA-ulmomvyaya0o.toml new file mode 100644 index 00000000..2e73335b --- /dev/null +++ b/advisories/9.5.0/BRSA-ulmomvyaya0o.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ulmomvyaya0o" +title = "kernel CVE-2026-90076" +cve = "CVE-2026-90076" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-upr0oakylv58.toml b/advisories/9.5.0/BRSA-upr0oakylv58.toml new file mode 100644 index 00000000..d8ce71d5 --- /dev/null +++ b/advisories/9.5.0/BRSA-upr0oakylv58.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-upr0oakylv58" +title = "kernel CVE-2026-97959" +cve = "CVE-2026-97959" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: free emptied bucket on filter move" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-uqs0go9djbzv.toml b/advisories/9.5.0/BRSA-uqs0go9djbzv.toml new file mode 100644 index 00000000..0e01ae9f --- /dev/null +++ b/advisories/9.5.0/BRSA-uqs0go9djbzv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-uqs0go9djbzv" +title = "kernel CVE-2026-97564" +cve = "CVE-2026-97564" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptions" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ut4ucncwlaoz.toml b/advisories/9.5.0/BRSA-ut4ucncwlaoz.toml new file mode 100644 index 00000000..83e12bf2 --- /dev/null +++ b/advisories/9.5.0/BRSA-ut4ucncwlaoz.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ut4ucncwlaoz" +title = "kernel CVE-2026-97441" +cve = "CVE-2026-97441" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-utod6wlsloui.toml b/advisories/9.5.0/BRSA-utod6wlsloui.toml new file mode 100644 index 00000000..90aebb2f --- /dev/null +++ b/advisories/9.5.0/BRSA-utod6wlsloui.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-utod6wlsloui" +title = "kernel CVE-2026-97481" +cve = "CVE-2026-97481" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-v6n78nwy62xy.toml b/advisories/9.5.0/BRSA-v6n78nwy62xy.toml new file mode 100644 index 00000000..8772f7ad --- /dev/null +++ b/advisories/9.5.0/BRSA-v6n78nwy62xy.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-v6n78nwy62xy" +title = "kernel CVE-2026-97421" +cve = "CVE-2026-97421" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-vbxyvt4obwph.toml b/advisories/9.5.0/BRSA-vbxyvt4obwph.toml new file mode 100644 index 00000000..26d8edb8 --- /dev/null +++ b/advisories/9.5.0/BRSA-vbxyvt4obwph.toml @@ -0,0 +1,16 @@ +[advisory] +id = "BRSA-vbxyvt4obwph" +title = "Bottlerocket Kernel 6.18 Updates" +severity = "high" +description = "Kernel version 6.18.54 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version." + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-vcwtl4ql5man.toml b/advisories/9.5.0/BRSA-vcwtl4ql5man.toml new file mode 100644 index 00000000..2dde0912 --- /dev/null +++ b/advisories/9.5.0/BRSA-vcwtl4ql5man.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-vcwtl4ql5man" +title = "kernel CVE-2026-98082" +cve = "CVE-2026-98082" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix the possible bioc_list memory leak during error" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-vdd27obse9gg.toml b/advisories/9.5.0/BRSA-vdd27obse9gg.toml new file mode 100644 index 00000000..da1a034c --- /dev/null +++ b/advisories/9.5.0/BRSA-vdd27obse9gg.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-vdd27obse9gg" +title = "kernel CVE-2026-98080" +cve = "CVE-2026-98080" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-veueexfnkyh0.toml b/advisories/9.5.0/BRSA-veueexfnkyh0.toml new file mode 100644 index 00000000..7bce98d2 --- /dev/null +++ b/advisories/9.5.0/BRSA-veueexfnkyh0.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-veueexfnkyh0" +title = "kernel CVE-2026-97533" +cve = "CVE-2026-97533" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: x86/mm/pat: Acquire init_mm read lock on attribute changes to avoid UAF" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-vkbrk8bfoqlv.toml b/advisories/9.5.0/BRSA-vkbrk8bfoqlv.toml new file mode 100644 index 00000000..3b8e1ab3 --- /dev/null +++ b/advisories/9.5.0/BRSA-vkbrk8bfoqlv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-vkbrk8bfoqlv" +title = "kernel CVE-2026-97476" +cve = "CVE-2026-97476" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: rds: filter RDS_INFO_* getsockopt by caller's netns" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-vy3fv1barxkh.toml b/advisories/9.5.0/BRSA-vy3fv1barxkh.toml new file mode 100644 index 00000000..7bb4eee1 --- /dev/null +++ b/advisories/9.5.0/BRSA-vy3fv1barxkh.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-vy3fv1barxkh" +title = "kernel CVE-2026-98060" +cve = "CVE-2026-98060" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject resilient lock operations in rbtree callbacks" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wc7hjetb1xrq.toml b/advisories/9.5.0/BRSA-wc7hjetb1xrq.toml new file mode 100644 index 00000000..e1280277 --- /dev/null +++ b/advisories/9.5.0/BRSA-wc7hjetb1xrq.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-wc7hjetb1xrq" +title = "kernel CVE-2026-89545" +cve = "CVE-2026-89545" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: sunrpc: defer rq_argp and rq_resp free until after RCU grace period" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wskkpw9pzyon.toml b/advisories/9.5.0/BRSA-wskkpw9pzyon.toml new file mode 100644 index 00000000..884823d7 --- /dev/null +++ b/advisories/9.5.0/BRSA-wskkpw9pzyon.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-wskkpw9pzyon" +title = "kernel CVE-2026-98088" +cve = "CVE-2026-98088" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wteupqqlb6ed.toml b/advisories/9.5.0/BRSA-wteupqqlb6ed.toml new file mode 100644 index 00000000..3a893218 --- /dev/null +++ b/advisories/9.5.0/BRSA-wteupqqlb6ed.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-wteupqqlb6ed" +title = "kernel CVE-2026-74496" +cve = "CVE-2026-74496" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml b/advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml new file mode 100644 index 00000000..d3fa279f --- /dev/null +++ b/advisories/9.5.0/BRSA-wvrvm9d6b6zc.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-wvrvm9d6b6zc" +title = "kernel CVE-2026-72463" +cve = "CVE-2026-72463" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wwhnryjioqhv.toml b/advisories/9.5.0/BRSA-wwhnryjioqhv.toml new file mode 100644 index 00000000..76d0ab9b --- /dev/null +++ b/advisories/9.5.0/BRSA-wwhnryjioqhv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-wwhnryjioqhv" +title = "kernel CVE-2026-97598" +cve = "CVE-2026-97598" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-wzmv2zhw0vw8.toml b/advisories/9.5.0/BRSA-wzmv2zhw0vw8.toml new file mode 100644 index 00000000..79db5175 --- /dev/null +++ b/advisories/9.5.0/BRSA-wzmv2zhw0vw8.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-wzmv2zhw0vw8" +title = "kernel CVE-2026-89637" +cve = "CVE-2026-89637" +severity = "high" +description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2" + +[[advisory.products]] +package-name = "kernel-6.1" +patched-version = "6.1.188" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-x4kcgyznal0e.toml b/advisories/9.5.0/BRSA-x4kcgyznal0e.toml new file mode 100644 index 00000000..43cb2598 --- /dev/null +++ b/advisories/9.5.0/BRSA-x4kcgyznal0e.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-x4kcgyznal0e" +title = "kernel CVE-2026-90053" +cve = "CVE-2026-90053" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_htb: limit htb_classify inner-class filter hops" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-x6vtt0fk4d3d.toml b/advisories/9.5.0/BRSA-x6vtt0fk4d3d.toml new file mode 100644 index 00000000..ef3e21fe --- /dev/null +++ b/advisories/9.5.0/BRSA-x6vtt0fk4d3d.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-x6vtt0fk4d3d" +title = "kernel CVE-2026-80847" +cve = "CVE-2026-80847" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCP_MIN_MSS" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-xcodh2jld5fu.toml b/advisories/9.5.0/BRSA-xcodh2jld5fu.toml new file mode 100644 index 00000000..e0666a8a --- /dev/null +++ b/advisories/9.5.0/BRSA-xcodh2jld5fu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-xcodh2jld5fu" +title = "kernel CVE-2026-97902" +cve = "CVE-2026-97902" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: fs: don't return -EINVAL for successful nested thaw" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-xfrlpscxzlqr.toml b/advisories/9.5.0/BRSA-xfrlpscxzlqr.toml new file mode 100644 index 00000000..ed48dd1b --- /dev/null +++ b/advisories/9.5.0/BRSA-xfrlpscxzlqr.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-xfrlpscxzlqr" +title = "kernel CVE-2026-89685" +cve = "CVE-2026-89685" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: fix clock domain mismatch in clients_still_reclaiming()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-xv43v87obegv.toml b/advisories/9.5.0/BRSA-xv43v87obegv.toml new file mode 100644 index 00000000..a8886944 --- /dev/null +++ b/advisories/9.5.0/BRSA-xv43v87obegv.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-xv43v87obegv" +title = "kernel CVE-2026-97949" +cve = "CVE-2026-97949" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-xvgcygxtwwhn.toml b/advisories/9.5.0/BRSA-xvgcygxtwwhn.toml new file mode 100644 index 00000000..64401d04 --- /dev/null +++ b/advisories/9.5.0/BRSA-xvgcygxtwwhn.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-xvgcygxtwwhn" +title = "kernel CVE-2026-97984" +cve = "CVE-2026-97984" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-xxxepyonccbx.toml b/advisories/9.5.0/BRSA-xxxepyonccbx.toml new file mode 100644 index 00000000..70b16e88 --- /dev/null +++ b/advisories/9.5.0/BRSA-xxxepyonccbx.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-xxxepyonccbx" +title = "kernel CVE-2026-93287" +cve = "CVE-2026-93287" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-y1je5e7lt5yb.toml b/advisories/9.5.0/BRSA-y1je5e7lt5yb.toml new file mode 100644 index 00000000..db9c8fe1 --- /dev/null +++ b/advisories/9.5.0/BRSA-y1je5e7lt5yb.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-y1je5e7lt5yb" +title = "kernel CVE-2026-93800" +cve = "CVE-2026-93800" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-y72spo8nbi2g.toml b/advisories/9.5.0/BRSA-y72spo8nbi2g.toml new file mode 100644 index 00000000..422f2b00 --- /dev/null +++ b/advisories/9.5.0/BRSA-y72spo8nbi2g.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-y72spo8nbi2g" +title = "kernel CVE-2026-90333" +cve = "CVE-2026-90333" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: dm-integrity: replace forgeable discard filler with a keyed sector marker" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ya7tsufmfrek.toml b/advisories/9.5.0/BRSA-ya7tsufmfrek.toml new file mode 100644 index 00000000..7ff6def6 --- /dev/null +++ b/advisories/9.5.0/BRSA-ya7tsufmfrek.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ya7tsufmfrek" +title = "kernel CVE-2026-89660" +cve = "CVE-2026-89660" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during admin state revocation A stateid holds only a bare pointer to its nfs4_client; a stateid" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-yet702k4xjzk.toml b/advisories/9.5.0/BRSA-yet702k4xjzk.toml new file mode 100644 index 00000000..9f374ea3 --- /dev/null +++ b/advisories/9.5.0/BRSA-yet702k4xjzk.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-yet702k4xjzk" +title = "kernel CVE-2026-97483" +cve = "CVE-2026-97483" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-yh81ip2n0ta7.toml b/advisories/9.5.0/BRSA-yh81ip2n0ta7.toml new file mode 100644 index 00000000..30d2b884 --- /dev/null +++ b/advisories/9.5.0/BRSA-yh81ip2n0ta7.toml @@ -0,0 +1,22 @@ +[advisory] +id = "BRSA-yh81ip2n0ta7" +title = "kernel CVE-2026-97611" +cve = "CVE-2026-97611" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-yhzn6lccrt0o.toml b/advisories/9.5.0/BRSA-yhzn6lccrt0o.toml new file mode 100644 index 00000000..76f8ad9a --- /dev/null +++ b/advisories/9.5.0/BRSA-yhzn6lccrt0o.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-yhzn6lccrt0o" +title = "kernel CVE-2026-97964" +cve = "CVE-2026-97964" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writeable skb header" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-yitn2kik8yec.toml b/advisories/9.5.0/BRSA-yitn2kik8yec.toml new file mode 100644 index 00000000..8d855c3f --- /dev/null +++ b/advisories/9.5.0/BRSA-yitn2kik8yec.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-yitn2kik8yec" +title = "kernel CVE-2026-80861" +cve = "CVE-2026-80861" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: usb: xhci: bail out of setup if the controller is inaccessible" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-ync2jymsoy4h.toml b/advisories/9.5.0/BRSA-ync2jymsoy4h.toml new file mode 100644 index 00000000..12cb837c --- /dev/null +++ b/advisories/9.5.0/BRSA-ync2jymsoy4h.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-ync2jymsoy4h" +title = "kernel CVE-2026-98014" +cve = "CVE-2026-98014" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-yzlrrzxyudiw.toml b/advisories/9.5.0/BRSA-yzlrrzxyudiw.toml new file mode 100644 index 00000000..aa18f459 --- /dev/null +++ b/advisories/9.5.0/BRSA-yzlrrzxyudiw.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-yzlrrzxyudiw" +title = "kernel CVE-2026-89708" +cve = "CVE-2026-89708" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-zgoxjteujxf4.toml b/advisories/9.5.0/BRSA-zgoxjteujxf4.toml new file mode 100644 index 00000000..e23f2064 --- /dev/null +++ b/advisories/9.5.0/BRSA-zgoxjteujxf4.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-zgoxjteujxf4" +title = "kernel CVE-2026-97420" +cve = "CVE-2026-97420" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-zkhykrydeeex.toml b/advisories/9.5.0/BRSA-zkhykrydeeex.toml new file mode 100644 index 00000000..4df75268 --- /dev/null +++ b/advisories/9.5.0/BRSA-zkhykrydeeex.toml @@ -0,0 +1,16 @@ +[advisory] +id = "BRSA-zkhykrydeeex" +title = "Bottlerocket Kernel 6.1 Updates" +severity = "high" +description = "Kernel version 6.1.188 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version." + +[[advisory.products]] +package-name = "kernel-6.1" +patched-version = "6.1.188" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-zmyqs0bugbmm.toml b/advisories/9.5.0/BRSA-zmyqs0bugbmm.toml new file mode 100644 index 00000000..f99ca0d6 --- /dev/null +++ b/advisories/9.5.0/BRSA-zmyqs0bugbmm.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-zmyqs0bugbmm" +title = "kernel CVE-2026-90138" +cve = "CVE-2026-90138" +severity = "moderate" +description = "In the Linux kernel, the following vulnerability has been resolved: vsock: don't check the listener's sk_err in vsock_accept()" + +[[advisory.products]] +package-name = "kernel-6.18" +patched-version = "6.18.54" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-znb3bqljb8d0.toml b/advisories/9.5.0/BRSA-znb3bqljb8d0.toml new file mode 100644 index 00000000..295b7e9d --- /dev/null +++ b/advisories/9.5.0/BRSA-znb3bqljb8d0.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-znb3bqljb8d0" +title = "kernel CVE-2026-98074" +cve = "CVE-2026-98074" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curr_active_slave prematurely when releasing all slaves" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-znd5digk60c3.toml b/advisories/9.5.0/BRSA-znd5digk60c3.toml new file mode 100644 index 00000000..40cbba30 --- /dev/null +++ b/advisories/9.5.0/BRSA-znd5digk60c3.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-znd5digk60c3" +title = "kernel CVE-2026-97985" +cve = "CVE-2026-97985" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: af_unix: Update last skb marker in manage_oob()." + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-zvv6n8dsedhy.toml b/advisories/9.5.0/BRSA-zvv6n8dsedhy.toml new file mode 100644 index 00000000..ed0db7db --- /dev/null +++ b/advisories/9.5.0/BRSA-zvv6n8dsedhy.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-zvv6n8dsedhy" +title = "kernel CVE-2026-89698" +cve = "CVE-2026-89698" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: nfsd: widen nfsd_genl_rqstp address fields to sockaddr_storage" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["aarch64", "x86_64"] +version = "9.5.0" diff --git a/advisories/9.5.0/BRSA-zximee2ve6tu.toml b/advisories/9.5.0/BRSA-zximee2ve6tu.toml new file mode 100644 index 00000000..42bc056f --- /dev/null +++ b/advisories/9.5.0/BRSA-zximee2ve6tu.toml @@ -0,0 +1,17 @@ +[advisory] +id = "BRSA-zximee2ve6tu" +title = "kernel CVE-2026-97453" +cve = "CVE-2026-97453" +severity = "low" +description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length()" + +[[advisory.products]] +package-name = "kernel-6.12" +patched-version = "6.12.111" +patched-epoch = "0" + +[updateinfo] +author = "vyaghras" +issue-date = 2026-10-15T00:17:34Z +arches = ["x86_64", "aarch64"] +version = "9.5.0"