{ "cveId": "CVE-2026-89762", "url": "https://patchblox.com/security/cve/CVE-2026-89762", "summary": "CVE-2026-89762 is fixed in 37 products on 1 platform, first by DEBIAN-CVE-2026-89762, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "apparmor: fix cred UAF caused by begin_current_label_crit_section()", "description": "In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin_current_label_crit_section() AppArmor\u0027s begin_current_label_crit_section() is a scary function called from lots of LSM hooks (in particular VFS/socket-related ones) that checks if the label referenced by the current creds is marked FLAG_STALE, and if so, attempts to use aa_replace_current_label() to replace the creds with an updated version that uses a new label. The first problem with this is that it would directly lead to UAF of \u0060struct cred\u0060 if anything in the kernel takes a pointer to the current creds and accesses these past a security hook invocation that replaces creds, like so: \u0060\u0060\u0060 const struct cred *cred = current_cred(); alloc_file_pseudo(...); uid_t uid = cred-\u003Eeuid; \u0060\u0060\u0060 I don\u0027t know if anything in the kernel actually does this, but I think it is very surprising that this pattern could lead to UAF. The second problem is that things go wrong when aa_replace_current_label() runs with overridden credentials. aa_replace_current_label() bails out if \u0060current_cred() != current_real_cred()\u0060 (mirroring the check in proc_pid_attr_write()), but this check can\u0027t actually reliably detect overridden credentials because the overridden creds can be the same as the objective creds. So in approximately the following scenario, things go wrong: 1. task begins with \u003Ccreds A\u003E (as both objective and subjective creds), with refcount=2 2. task grabs an extra reference on \u003Ccreds A\u003E for overriding 3. task calls override_creds(\u003Ccreds A\u003E), which returns a pointer to the old subjective creds (\u003Ccreds A\u003E) 4. task enters AppArmor LSM hook 5. AppArmor checks that objective/subjective creds are equal 6. AppArmor replaces both cred pointers with \u003Ccreds B\u003E and drops 2 refs on \u003Ccreds A\u003E 7. task leaves AppArmor LSM hook 8. task calls revert_creds(\u003Ccreds A\u003E) 9. now task-\u003Ecred is \u003Ccreds A\u003E while task-\u003Ereal_cred is \u003Ccreds B\u003E, but the task_struct logically holds two references to \u003Ccreds B\u003E 10. another task drops the extra reference on \u003Ccreds A\u003E that was used for overriding, refcount drops to 0 11. now task-\u003Ereal_cred points to freed creds At this point, any access to current_cred() will be UAF. I have a test case where I run aa-disable on a profile while a process using that profile is blocked on splice() from a FUSE passthrough file into a full pipe; after the profile update, the pipe becomes empty, splice() resumes, the credentials go out of sync, and a subsequent getuid() syscall results in a KASAN UAF splat. To fix this, instead of directly replacing creds, do it via task_work that will run at the end of the current syscall. (The point in time at which the cred replacement happens should have no correctness impact; it is just a performance optimization to avoid unnecessarily touching the refcount of the new label.) Note that AppArmor still performs direct cred replacements in the sb_pivotroot LSM hook after this change, and that direct cred replacements can still happen in VFS -\u003Ewrite() callbacks via proc_pid_attr_write(). There are two options for what to do with aa_dup_task_ctx(): Either explicitly reset new-\u003Elabel_replacement_pending after the entire aa_task_ctx has been copied, or switch to manually copying members over. I am switching to manually copying members over because that should make bugs more obvious.", "published": "2026-09-11T20:20:07Z", "severity": "Moderate", "cvss": 7.8, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00123, "epssPercentile": 0.02101, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89762", "fixes": [ { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.111-1", "fix": "DEBIAN-CVE-2026-89762", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89762", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.2.6-1", "fix": "DEBIAN-CVE-2026-89762", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89762", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux-6.12", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.12.111-1~deb12u1", "fix": "DEBIAN-CVE-2026-89762", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89762", "released": "2026-09-23T19:19:02Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T00:53:09Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }