{
  "cveId": "CVE-2026-89996",
  "url": "https://patchblox.com/security/cve/CVE-2026-89996",
  "summary": "CVE-2026-89996 is fixed in 74 products on 1 platform, first by DEBIAN-CVE-2026-89996, released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  dma-buf: dma-heap: don\u0027t publish fd before copy_...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  dma-buf: dma-heap: don\u0027t publish fd before copy_to_user() succeeds  DMA_HEAP_IOCTL_ALLOC allocates a dma-buf and installs an fd into the caller\u0027s fd table via dma_buf_fd() -\u003E fd_install() before dma_heap_ioctl() copies the result back to userspace.  If the trailing copy_to_user() fails, userspace never learns the fd number, but the fd (and the underlying dma-buf reference) are already visible to other threads in the same process and are leaked for the lifetime of the process.  The obvious \u0022close it on the failure path\u0022 fix is unsafe: once fd_install() has run, another thread can already dup() the fd, send it via SCM_RIGHTS, or close() it and let its number be reused, so a subsequent close_fd() from the ioctl path can operate on an unrelated file.  This was pointed out by Christian K\u00F6nig on v1 [1].  Restructure the allocation path so that fd_install() is the last, unfailable step of a successful ioctl:    1. heap-\u003Eops-\u003Eallocate()      creates the dma_buf.   2. get_unused_fd_flags()      reserves an fd number in the caller\u0027s                                 fd table without publishing it, so                                 no other thread can observe it.   3. copy_to_user()             delivers the fd number to userspace;                                 on failure the fd is returned with                                 put_unused_fd() and the dma_buf                                 reference is dropped with                                 dma_buf_put(), leaving no user-                                 visible state behind.   4. dma_buf_fd_install()       publishes the fd and emits the                                 trace_dma_buf_fd tracepoint -- from                                 here on the ioctl cannot fail.  A new dma_buf_fd_install() helper is introduced in dma-buf.c to wrap fd_install() together with the DMA_BUF_TRACE() call, preserving the export tracing that dma_buf_fd() provides.  dma_heap_ioctl_allocate() is refactored to return the struct dma_buf * directly (returning ERR_PTR on failure) so the caller holds the dmabuf reference across steps 3 and 4.  The failure at step 3 is easily reachable from userspace: pass a struct dma_heap_allocation_data that lives in a page whose protection is flipped to PROT_READ between copy_from_user() and copy_to_user() (e.g. via mprotect()).  Before this change each such ioctl leaks one dmabuf fd; after it, the fd table is unchanged on failure and only /dev/dma_heap/\u003Cname\u003E remains open.  No UAPI or heap-driver interface change.  [1] https://lore.kernel.org/dri-devel/175e98de-f414-47d7-81c1-c0fe0a8f7f62@amd.com/",
  "published": "2026-09-16T11:17:10Z",
  "severity": "IMPORTANT",
  "cvss": 5.3,
  "epss": 0.00212,
  "epssPercentile": 0.11548,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.12.113-138.209",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.54-121.166",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-debug-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-doc",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek-tools",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-devel",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-core",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-deprecated",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-desktop",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-extra-netfilter",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-usb",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 10",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel-uek64k-modules-wireless",
      "release": "ol 9",
      "fixedVersion": "0:6.12.0-208.112.5.el9uek",
      "fix": "ELSA-2026-500572",
      "url": "https://patchblox.com/security/fix/linux/elsa-2026-500572",
      "released": "2026-11-07T00:50:51Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.113-1",
      "fix": "DEBIAN-CVE-2026-89996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89996",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89996",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux-6.12",
      "release": "Debian 12.15 (bookworm)",
      "fixedVersion": "6.12.113-1~deb12u1",
      "fix": "DEBIAN-CVE-2026-89996",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89996",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.113-138.209.amzn2023",
      "fix": "ALAS2023-2026-3335",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3335",
      "released": "2026-11-07T01:06:52Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}