-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 07 Nov 2026 09:40:59 +0100 Source: linux Architecture: source Version: 6.12.116-1 Distribution: trixie-security Urgency: high Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 1152888 Changes: linux (6.12.116-1) trixie-security; urgency=high . * New upstream stable update: https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.116 - xen-netback: Fix UAF when reading statistics data (CVE-2026-100080) - xen-netback: defer xenvif_mcast_addr_list_free() (CVE-2026-100081) - xen-blkback: Avoid UAF when reading I/O statistics (CVE-2026-100082) . [ Salvatore Bonaccorso ] * ALSA: usb-audio: Use the right limit for PCM OOB check (Closes: #1152888) Checksums-Sha1: 2e830a6ac89dcc2f4ad2205326105798f40a0fb8 290418 linux_6.12.116-1.dsc e73a2af03d3a7686040f63da3552c2a2499963d4 151683860 linux_6.12.116.orig.tar.xz ccb608f7b6607c4fabc6b3ad78d70a3b475a4e22 1986608 linux_6.12.116-1.debian.tar.xz 70b7e7abe725e830799b359b2e56e59af87fdbea 6026 linux_6.12.116-1_source.buildinfo Checksums-Sha256: cef4db7d11833a771e04b844931a86387d5484def787a2a8f2cc6d9050385054 290418 linux_6.12.116-1.dsc 84f07a9eb2779253d11aefb8b6ee1cd2dd9aa80406cad111b04702ca9208d24e 151683860 linux_6.12.116.orig.tar.xz c2cec050ef5c92d0dbd2ed16db52a8ca00403ab4f84ccd5be02387ff169aa617 1986608 linux_6.12.116-1.debian.tar.xz f78a25a533f22585c8dfff370eb787495e733dd20eeaf5a9767faf6893aaa2b4 6026 linux_6.12.116-1_source.buildinfo Files: e106932a9608ff21b96d56a456def01f 290418 kernel optional linux_6.12.116-1.dsc 04c4f6f57708688745bb5440a3f3f3ed 151683860 kernel optional linux_6.12.116.orig.tar.xz 5cb43f829a34b5d196412fffef788edc 1986608 kernel optional linux_6.12.116-1.debian.tar.xz cdb8fb7cfb0a944a0c94578271a5ab4c 6026 kernel optional linux_6.12.116-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAmru5QNfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EoyEP/3e8SXDhOXtBbJucjdarwRUFroc3DjQJ ykteCw7YdWr1dBIyUwHQXYi7U174TSA4YDPNlbN8vB35hOZcW17XYZpquR87dmsn e7M2olzVXnGMY2SApMhhAMnB+OUP1G9OPD6Hh+ftMQhNRiDqoKk/e/lUFRprFQ60 A9cVjR6mVC2IGw8qCCmqBluVmkORxinVD1+703D6rg+XD/jhZLnqEaPPkxrrFL22 WgTG7rxxaaN3QLEZLWk0200d//NWLiZIbgRC3JXJLz00a6xbiszhYaZlkG9fRRe3 qiILGiNpxDG2h0IMUH5dr2MjQQkjZTlGe7zCaWP0idGdX+QJb3TASR+55GPeeD7Y 0kYHuv5vqG3sd1ULin0MrTvnruZdPmOg7pS9zGeeLGfNct6gwpJU0v5wk3KbqgrS ybqZDW1FH9560hpQAPW0VPHxZ5qJz/PvxsB1IfkKQPOXXZFo20ulxpnvWwWTWioV 01T1fMSQLGK1sYT96ERa/5iwOObjkWQmRy3KEQsaJvuGuT6a78SzfVFIaXgyvD5s OkvcgSxtoQfElVyftybzJLLC7vXnrDBdSt9+z+C2c9Dc5M9ISaEGFTASyavfwqp6 wWoF7QM9IJzXthXcmb4kRW8wA+7JzL0CA4NvoIzwNg3YFiSu5fdLJoCVpjY4D4QC xBsxYBV0qs0L =VtNQ -----END PGP SIGNATURE-----