{ "cveId": "CVE-2026-89999", "url": "https://patchblox.com/security/cve/CVE-2026-89999", "summary": "CVE-2026-89999 is fixed in 47 products on 1 platform, first by DEBIAN-CVE-2026-89999, released September 23, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "HID: wacom: validate report length in wacom_intuos_pro2_bt_irq", "description": "In the Linux kernel, the following vulnerability has been resolved: HID: wacom: validate report length in wacom_intuos_pro2_bt_irq wacom_intuos_pro2_bt_irq() receives the wire report length in \u0060len\u0060 but never consults it before parsing. After the report-id gate it unconditionally calls wacom_intuos_pro2_bt_pen() and then, selected by features.type, a fixed chain of sub-parsers, none of which receive \u0060len\u0060: \twacom_intuos_pro2_bt_pen(wacom); \tif (type == INTUOSP2_BT || type == INTUOSP2S_BT) { \t\twacom_intuos_pro2_bt_touch(wacom); \t\twacom_intuos_pro2_bt_pad(wacom); \t\twacom_intuos_pro2_bt_battery(wacom); \t} else { \t\twacom_intuos_gen3_bt_pad(wacom); \t\twacom_intuos_gen3_bt_battery(wacom); \t} Each sub-parser dereferences wacom-\u003Edata at fixed offsets. The furthest byte touched on each branch is: INTUOSP2_BT / INTUOSP2S_BT: wacom_intuos_pro2_bt_pad() reads data[285] \t(the touchring byte), so the report must be at least 286 bytes; INTUOSHT3_BT (\u0022gen3\u0022): wacom_intuos_gen3_bt_battery() reads data[45], \tso the report must be at least 46 bytes. features.type is selected from the VID/PID id_table entry and wacom_setup_device_quirks() force-registers the pen/pad/touch inputs for that type independent of the report descriptor, so a malicious or malfunctioning paired/spoofed Bluetooth peripheral can advertise that VID/PID and send an undersized report that still satisfies the data[0] == 0x80/0x81 gate. The driver then reads past the received report and forwards the bytes to userspace via evdev (MSC_SERIAL / ABS_MISC / ABS_WHEEL on the pen and pad input nodes), an out-of-bounds read with a concrete userspace read-back channel, and a true out-of-bounds read on transports whose backing buffer is sized to the (small) report descriptor rather than a fixed-size staging buffer. This is the same class of bug commit 2f1763f62909 (\u0022HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq\u0022) already hardened in the sibling wacom_intuos_bt_irq(), which guards each report id against its minimum length before parsing. Guard wacom_intuos_pro2_bt_irq() the same way: before parsing, reject reports shorter than the furthest offset the selected branch actually dereferences, warn, and bail out. Because the whole pen/touch/pad/ battery chain runs unconditionally per branch, a single up-front check against the maximum offset (286 bytes for INTUOSP2_BT/INTUOSP2S_BT, 46 bytes for the gen3 branch) bounds every sub-parser. Returning 0 on a short report also skips those calls for the same malformed report, which is the safe, conservative behavior.", "published": "2026-09-16T11:17:11Z", "severity": "Important", "cvss": 8.1, "cvssVector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "epss": 0.0037, "epssPercentile": 0.31092, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89999", "fixes": [ { "platform": "linux", "product": "kernel-64kb", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-azure", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-default-base", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1.150700.17.51.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-docs", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-livepatch-SLE15-SP7_Update_24", "release": "sles 15.7", "fixedVersion": "1-150700.15.3.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-obs-build", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-source", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-syms", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-debug-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-doc", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek-tools", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-devel", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-core", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-deprecated", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-desktop", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-extra-netfilter", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-usb", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 10", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-uek64k-modules-wireless", "release": "ol 9", "fixedVersion": "0:6.12.0-207.111.5.1.el9uek", "fix": "ELSA-2026-500374", "url": "https://patchblox.com/security/fix/linux/elsa-2026-500374", "released": "2026-10-07T00:00:00Z" }, { "platform": "linux", "product": "kernel-zfcpdump", "release": "sles 15.7", "fixedVersion": "6.4.0-150700.53.90.1", "fix": "SUSE-SU-2026:5091-1", "url": "https://patchblox.com/security/fix/linux/suse-su-2026-5091-1", "released": "2026-11-07T00:43:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.1.190-1", "fix": "DEBIAN-CVE-2026-89999", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89999", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.111-1", "fix": "DEBIAN-CVE-2026-89999", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89999", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.2.6-1", "fix": "DEBIAN-CVE-2026-89999", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89999", "released": "2026-09-23T19:19:02Z" }, { "platform": "linux", "product": "linux-6.12", "release": "Debian 12.15 (bookworm)", "fixedVersion": "6.12.111-1~deb12u1", "fix": "DEBIAN-CVE-2026-89999", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89999", "released": "2026-09-23T19:19:02Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T06:59:42Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }