{ "cveId": "CVE-2026-89495", "url": "https://patchblox.com/security/cve/CVE-2026-89495", "summary": "CVE-2026-89495 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2026-89495, released September 23, 2026. It is not reported as exploited. Patch Radar priority: Urgent.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_hand...", "description": "In the Linux kernel, the following vulnerability has been resolved: ocfs2: bound namelen in dlm_migrate_request_handler Patch series \u0022ocfs2/dlm: bound peer-controlled lengths in the o2dlm\u0022. The o2dlm receive handlers trust u8 length and count fields from the wire without bounding them, so a node in a DLM domain can corrupt or panic any other node with a malformed message. Three defects: - dlm_migrate_request_handler() passes migrate-\u003Enamelen unchecked to dlm_init_mle(), which memcpy()s it into the 32-byte mname[] of an o2dlm_mle slab object: a heap out-of-bounds write of up to ~215 attacker-controlled bytes. - dlm_mig_lockres_handler() passes mres-\u003Elockname_len unchecked to dlm_init_lockres(), which memcpy()s it into the 32-byte o2dlm_lockname slab object: a heap out-of-bounds write of up to ~223 bytes. - the same handler trusts mres-\u003Enum_locks without checking that the message is large enough to hold that many entries, so dlm_process_recovery_data() walks mres-\u003Eml[] past the kmalloc(data_len) copy and trips a BUG_ON (an out-of-bounds read ending in a panic). The other o2dlm receive handlers already reject an oversized name; the migration and recovery handlers have omitted it since the DLM was added (see the Fixes tags). Patch 1 bounds namelen; patch 2 validates lockname_len, num_locks, and the payload size. Conforming recovery and migration traffic is unaffected. o2net authenticates peers only by the DLM domain key, so any node that has joined the domain -- including a compromised or malicious member -- can send these messages. There is no local trigger; the attacker must already be a member of the cluster. Each sink was confirmed under KASAN with an out-of-tree module mirroring it exactly -- a kmem_cache/kmalloc of the real destination size, then the same unclamped memcpy/loop: slab-out-of-bounds Write for the two writes, Read for the recovery walk, and a panic. A userspace AddressSanitizer build faults identically under -m32 and -m64. Scrubbed logs are available on request. I reported this privately to security@kernel.org and the ocfs2 maintainers on 2026-06-20; with no response after the standard embargo period I am posting the fix publicly. I have no embargo requirement. This patch (of 2): A node receiving a DLM_MIGRATE_REQUEST message trusts the peer-supplied name length (migrate-\u003Enamelen) without bounding it. dlm_init_mle() then copies that many bytes into the fixed DLM_LOCKID_NAME_MAX-byte mname[] array of an o2dlm_mle slab object, so a malformed message from a cluster peer overflows the slab object by up to ~215 bytes: a heap out-of-bounds write of attacker-controlled data, reachable by any node in the domain. Reject an oversized name, the way dlm_master_request_handler() and the other o2dlm receive handlers already do; the migration handler omits the check entirely. Conforming messages are unaffected.", "published": "2026-09-11T20:19:31Z", "severity": "critical", "cvss": 9.8, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00714, "epssPercentile": 0.53913, "priority": "Urgent", "priorityTier": 2, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1.150700.17.51.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_24", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.190-1", "fix": "DEBIAN-CVE-2026-89495", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89495", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.111-1", "fix": "DEBIAN-CVE-2026-89495", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89495", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.2.6-1", "fix": "DEBIAN-CVE-2026-89495", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89495", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux-6.12", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.12.111-1~deb12u1", "fix": "DEBIAN-CVE-2026-89495", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89495", "released": "2026-09-23T19:19:02Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T06:59:42Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }