AZL-104318 CVE-2026-97987 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: virtioinput: reset device if inputregisterdevice fails Probe marks the device DRIVEROK with virtiodeviceready before calling inputregisterdevice. If registration fails, the error path cleared vi-ready and called delvqs while the...

DEBIAN-CVE-2026-97984

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: Fix UDP length overflow with PMTU discover and big MTU This commit bounds cork-base.fragsize to IP6MAXMTU for UDP sockets to avoid a possible overflow of UDP length that triggers a WARN in udpsetlenshort when setsockop...

DEBIAN-CVE-2026-97985

In the Linux kernel, the following vulnerability has been resolved: afunix: Update last skb marker in manageoob. Fahad Alharbi reported that blocking recvMSGPEEK could hog CPU due to OOB skb. In the following cases, manageoob skips OOB skbs and returns NULL for the last recvMSGPEEK:...

DEBIAN-CVE-2026-97982

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

AZL-104862 CVE-2026-97986 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecvevents drops vi-lock around inputevent, so clearing vi-ready does not sto...

DEBIAN-CVE-2026-97986

In the Linux kernel, the following vulnerability has been resolved: virtioinput: stop callbacks before unregistering input device virtinputremove unregisters the input device before resetting the virtio device. virtinputrecvevents drops vi-lock around inputevent, so clearing vi-ready does not sto...

AZL-104879 CVE-2026-97982 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

CVE-2026-97982

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Fix budget accounting The gmacrx function returns the remaining NAPI budget, but its caller treats the return value as the number of packets received. An idle poll therefore reports a full budget and remai...

DEBIAN-CVE-2026-97978

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TPprintk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event icetxdimwork has double dereference in TPprintk: REC-qvector-tx.txring-qindex...

AZL-104853 CVE-2026-97977 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...

DEBIAN-CVE-2026-97973

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

CVE-2026-97973

In the Linux kernel, the following vulnerability has been resolved: net: macb: destroy the phylink instance on the probe error path macbmiiinit creates a phylink instance on both of its success paths, but the probe unwind frees the netdev without destroying it, so a failing macballoctieoff or...

AZL-104172 CVE-2026-97978 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TPprintk After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event icetxdimwork has double dereference in TPprintk: REC-qvector-tx.txring-qindex...

DEBIAN-CVE-2026-97976

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintelpcie: validate packetlen before skbputdata btintelpciesubmitrxwork reads packetlen from rfhhdr without checking if it exceeds the RX buffer size. An oversized packetlen can lead to an out-of-bounds read in...

DEBIAN-CVE-2026-97977

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: Fix UAF of btusbdata by rxwork btusbclose and btusbflush cancel data-rxwork with the asynchronous canceldelayedwork, so if btusbrxwork is already running on another CPU it keeps running after the cancel returns...

DEBIAN-CVE-2026-97979

In the Linux kernel, the following vulnerability has been resolved: ice: add missing xadestroy for schednodeids Commit 16dfa49406bc "ice: Introduce new parameters in iceschednode" added a schednodeids xarray to the port info structure, but never called xadestroy on it. Since xarrays can allocate...

CVE-2026-97979

In the Linux kernel, the following vulnerability has been resolved: ice: add missing xadestroy for schednodeids Commit 16dfa49406bc "ice: Introduce new parameters in iceschednode" added a schednodeids xarray to the port info structure, but never called xadestroy on it. Since xarrays can allocate...

DEBIAN-CVE-2026-97968

In the Linux kernel, the following vulnerability has been resolved: hwmon: corsair-cpro Create debugfs entries after hwmon registration ccpdebugfsinit registers debugfs files whose private data is the devm allocated ccp. It runs before hwmondeviceregisterwithinfo, so when that registration fails,...

DEBIAN-CVE-2026-97970

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Avoid division by zero clkgetrate could return 0. Avoid a division by zero panic...

AZL-104220 CVE-2026-97969 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: watchdog: msc313e: Fix clock leak and spurious timer in settimeout msc313ewdtsettimeout unconditionally calls msc313ewdtstart which introduces two severe bugs: 1. If the watchdog is already active, calling start again will increa...