{
  "cveId": "CVE-2026-89493",
  "url": "https://patchblox.com/security/cve/CVE-2026-89493",
  "summary": "CVE-2026-89493 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2026-89493, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  ocfs2: validate rl_used against rl_count in refc...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  ocfs2: validate rl_used against rl_count in refcount block validator  ocfs2_find_refcount_rec_in_rl() walks the on-disk refcount record array with:  \tfor (; i \u003C le16_to_cpu(rb-\u003Erf_records.rl_used); i\u002B\u002B) { \t\trec = \u0026rb-\u003Erf_records.rl_recs[i]; \t\t...  rl_recs[] lives in a single metadata block (4096 bytes on the common configuration), so its real capacity is fixed by ocfs2_refcount_recs_per_rb(sb) (247 records for a 4K block with the 16-byte ocfs2_refcount_rec).  rl_used and rl_count are both read directly off disk by ocfs2_validate_refcount_block() and are never checked against that capacity, nor against each other, before any refcount/reflink/CoW operation walks the array.  A crafted (or corrupted) refcount block with rl_used == 0xffff makes the loop above walk far past the end of the block, dereferencing rl_recs[i] for i up to 65534.  The resulting index is then handed to the sibling ocfs2_insert_refcount_rec(), whose insert-shift does:  \tif (index \u003C le16_to_cpu(rf_list-\u003Erl_used)) \t\tmemmove(\u0026rf_list-\u003Erl_recs[index \u002B 1], \t\t\t\u0026rf_list-\u003Erl_recs[index], \t\t\t(le16_to_cpu(rf_list-\u003Erl_used) - index) * \t\t\t sizeof(struct ocfs2_refcount_rec));  i.e.  a memmove() of up to (0xffff - index) * 16 bytes (~1 MiB) from an offset already past the block.  This is reachable from an ordinary reflink (FICLONE) against a crafted/corrupted ocfs2 image: attaching an extent whose cpos sorts past every real record in the leaf forces the lookup to run off the end instead of returning early on a match.  The attacker model is local: CAP_SYS_ADMIN mounting a crafted or corrupted ocfs2 image, or a raw write to the block device backing an already-mounted ocfs2 filesystem.  ocfs2_validate_refcount_block() already validates the block\u0027s ECC, signature, rf_blkno and rf_fs_generation, but never rl_count/rl_used against the block\u0027s actual on-disk capacity.  This is the same class of gap that ocfs2_validate_extent_block() (fs/ocfs2/alloc.c) already closes for the sibling extent-list header, which checks both the record capacity and the \u0022used\u0022 bound before any code walks h_list.l_recs[]:  \tif (le16_to_cpu(eb-\u003Eh_list.l_count) != ocfs2_extent_recs_per_eb(sb)) { \t\trc = ocfs2_error(...); \t\tgoto bail; \t}  \tif (le16_to_cpu(eb-\u003Eh_list.l_next_free_rec) \u003E \t    le16_to_cpu(eb-\u003Eh_list.l_count)) { \t\trc = ocfs2_error(...); \t\tgoto bail; \t}  Add the equivalent pair of checks to ocfs2_validate_refcount_block(): reject a refcount block whose rl_count does not match the fixed per-block capacity returned by ocfs2_refcount_recs_per_rb(), and reject rl_used \u003E rl_count.  Both checks are skipped when OCFS2_REFCOUNT_TREE_FL is set, because in that case the same union bytes hold an ocfs2_extent_list (rf_list), not the refcount record list (rf_records) -- that layout is already validated separately by ocfs2_validate_extent_block() when the referenced extent block is read.  This mirrors the existing \u0022!(rb-\u003Erf_flags \u0026 OCFS2_REFCOUNT_TREE_FL)\u0022 guard used elsewhere in this file (e.g.  ocfs2_get_refcount_rec()) to decide whether rf_records or rf_list is the live member of the union.  With this in place, a forged rl_used/rl_count is caught at block validation time (ocfs2_error()), consistent with every other corruption check in this function, instead of driving an out-of-bounds read in ocfs2_find_refcount_rec_in_rl() and a subsequent out-of-bounds memmove() in ocfs2_insert_refcount_rec().  Verified against a crafted image on a v6.19 KASAN (KASAN_GENERIC) build: replaying the same reflink (FICLONE) reliably hit a KASAN report in __ocfs2_increase_refcount()/ocfs2_insert_refcount_rec() before this patch, and triggers no report once ocfs2_validate_refcount_block() rejects the forged rl_used/rl_count.",
  "published": "2026-09-11T20:19:31Z",
  "severity": "high",
  "cvss": 8.8,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.0065,
  "epssPercentile": 0.51453,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-207.111.5.1.el9uek",
      "fix": "ELSA-2026-500374",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374",
      "released": "2026-10-07T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.1.190-1",
      "fix": "DEBIAN-CVE-2026-89493",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89493",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.111-1",
      "fix": "DEBIAN-CVE-2026-89493",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89493",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89493",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89493",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.111-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-89493",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89493",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}