advisories: add BRSAs for kernel-kit v9.5.0

advisories/9.5.0/BRSA-06ghtgcffasr.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-06ghtgcffasr"
+title = "kernel CVE-2026-89652"
+cve = "CVE-2026-89652"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ceph: bound copied dentry name length in NFS export get_name ceph_get_name() copies the MDS-supplied name into the caller's"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.188"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-0wctybyooj2e.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-0wctybyooj2e"
+title = "kernel CVE-2026-90227"
+cve = "CVE-2026-90227"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-1ittm2cqzonr.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1ittm2cqzonr"
+title = "kernel CVE-2026-90313"
+cve = "CVE-2026-90313"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-1nip6jjnzva3.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1nip6jjnzva3"
+title = "kernel CVE-2026-89717"
+cve = "CVE-2026-89717"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: zram: set default primary compressor in zram_destroy_comps()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-1zcbtezvayzd.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1zcbtezvayzd"
+title = "kernel CVE-2026-97456"
+cve = "CVE-2026-97456"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-2ennjjj3phiu.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2ennjjj3phiu"
+title = "kernel CVE-2026-98127"
+cve = "CVE-2026-98127"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-2hd6nss7ndcg.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2hd6nss7ndcg"
+title = "kernel CVE-2026-98072"
+cve = "CVE-2026-98072"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-2qz6ping8lna.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-2qz6ping8lna"
+title = "kernel CVE-2026-98123"
+cve = "CVE-2026-98123"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-2vhaznygmwx4.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2vhaznygmwx4"
+title = "kernel CVE-2026-97904"
+cve = "CVE-2026-97904"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-30il6hgmtlao.toml

@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-30il6hgmtlao"
+title = "kernel CVE-2026-98096"
+cve = "CVE-2026-98096"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: restore network header before routing and forwarding"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.188"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-3gqf6uentn9b.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-3gqf6uentn9b"
+title = "kernel CVE-2026-89778"
+cve = "CVE-2026-89778"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-3gysjdpzeylv.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-3gysjdpzeylv"
+title = "kernel CVE-2026-97555"
+cve = "CVE-2026-97555"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix heap overflow in DACL owner/group rewrite"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-3llag1zltwuj.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-3llag1zltwuj"
+title = "kernel CVE-2026-97444"
+cve = "CVE-2026-97444"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-4iawk9awjbz7.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-4iawk9awjbz7"
+title = "kernel CVE-2026-98016"
+cve = "CVE-2026-98016"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["x86_64", "aarch64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-4w6mutemmikf.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-4w6mutemmikf"
+title = "kernel CVE-2026-93798"
+cve = "CVE-2026-93798"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in merge_reloc_roots()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-56zugc4wgbzd.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-56zugc4wgbzd"
+title = "kernel CVE-2026-97594"
+cve = "CVE-2026-97594"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-5fu6lqrtjlny.toml

@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-5fu6lqrtjlny"
+title = "kernel CVE-2026-93125"
+cve = "CVE-2026-93125"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.188"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-66orhzycbngw.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-66orhzycbngw"
+title = "kernel CVE-2026-89659"
+cve = "CVE-2026-89659"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent client use-after-free during delegation revoke"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"

advisories/9.5.0/BRSA-6bc90yywranl.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-6bc90yywranl"
+title = "kernel CVE-2026-97415"
+cve = "CVE-2026-97415"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.111"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.54"
+patched-epoch = "0"
+
+[updateinfo]
+author = "vyaghras"
+issue-date = 2026-10-15T00:17:34Z
+arches = ["aarch64", "x86_64"]
+version = "9.5.0"