diff --git a/advisories/9.6.1/BRSA-03hjxd4wbahg.toml b/advisories/9.6.1/BRSA-03hjxd4wbahg.toml
new file mode 100644
index 00000000..f29bfc0d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-03hjxd4wbahg.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-03hjxd4wbahg"
+title = "kernel CVE-2026-98235"
+cve = "CVE-2026-98235"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-0dkshiat0eu0.toml b/advisories/9.6.1/BRSA-0dkshiat0eu0.toml
new file mode 100644
index 00000000..e63cb3c2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-0dkshiat0eu0.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-0dkshiat0eu0"
+title = "kernel CVE-2026-97609"
+cve = "CVE-2026-97609"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-0dnwnzafhpnd.toml b/advisories/9.6.1/BRSA-0dnwnzafhpnd.toml
new file mode 100644
index 00000000..87a34bec
--- /dev/null
+++ b/advisories/9.6.1/BRSA-0dnwnzafhpnd.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-0dnwnzafhpnd"
+title = "kernel CVE-2026-98644"
+cve = "CVE-2026-98644"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-0viznios9osy.toml b/advisories/9.6.1/BRSA-0viznios9osy.toml
new file mode 100644
index 00000000..d6f08093
--- /dev/null
+++ b/advisories/9.6.1/BRSA-0viznios9osy.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-0viznios9osy"
+title = "kernel CVE-2026-98320"
+cve = "CVE-2026-98320"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-0xwq64nc1i1t.toml b/advisories/9.6.1/BRSA-0xwq64nc1i1t.toml
new file mode 100644
index 00000000..af1faa0a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-0xwq64nc1i1t.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-0xwq64nc1i1t"
+title = "kernel CVE-2026-93824"
+cve = "CVE-2026-93824"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-1betjv8xei73.toml b/advisories/9.6.1/BRSA-1betjv8xei73.toml
new file mode 100644
index 00000000..72e1a84d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-1betjv8xei73.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1betjv8xei73"
+title = "kernel CVE-2026-97441"
+cve = "CVE-2026-97441"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-1nvprkuxft0w.toml b/advisories/9.6.1/BRSA-1nvprkuxft0w.toml
new file mode 100644
index 00000000..caa3c809
--- /dev/null
+++ b/advisories/9.6.1/BRSA-1nvprkuxft0w.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-1nvprkuxft0w"
+title = "kernel CVE-2026-98233"
+cve = "CVE-2026-98233"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-1uzl2vuc6ihx.toml b/advisories/9.6.1/BRSA-1uzl2vuc6ihx.toml
new file mode 100644
index 00000000..3dc2076b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-1uzl2vuc6ihx.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1uzl2vuc6ihx"
+title = "kernel CVE-2026-98046"
+cve = "CVE-2026-98046"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-2dhfsn6dcuko.toml b/advisories/9.6.1/BRSA-2dhfsn6dcuko.toml
new file mode 100644
index 00000000..0e80bf07
--- /dev/null
+++ b/advisories/9.6.1/BRSA-2dhfsn6dcuko.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2dhfsn6dcuko"
+title = "kernel CVE-2026-93813"
+cve = "CVE-2026-93813"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-2eqotpnhtqdd.toml b/advisories/9.6.1/BRSA-2eqotpnhtqdd.toml
new file mode 100644
index 00000000..afe303fd
--- /dev/null
+++ b/advisories/9.6.1/BRSA-2eqotpnhtqdd.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2eqotpnhtqdd"
+title = "kernel CVE-2026-90048"
+cve = "CVE-2026-90048"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-2grulqduv963.toml b/advisories/9.6.1/BRSA-2grulqduv963.toml
new file mode 100644
index 00000000..26cbf0f9
--- /dev/null
+++ b/advisories/9.6.1/BRSA-2grulqduv963.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2grulqduv963"
+title = "kernel CVE-2026-98016"
+cve = "CVE-2026-98016"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-2xki3v8kv8af.toml b/advisories/9.6.1/BRSA-2xki3v8kv8af.toml
new file mode 100644
index 00000000..bf640396
--- /dev/null
+++ b/advisories/9.6.1/BRSA-2xki3v8kv8af.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2xki3v8kv8af"
+title = "kernel CVE-2026-98031"
+cve = "CVE-2026-98031"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-34yae8qa5qxn.toml b/advisories/9.6.1/BRSA-34yae8qa5qxn.toml
new file mode 100644
index 00000000..fc6165bb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-34yae8qa5qxn.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-34yae8qa5qxn"
+title = "kernel CVE-2026-93288"
+cve = "CVE-2026-93288"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-3d8lxujqkrih.toml b/advisories/9.6.1/BRSA-3d8lxujqkrih.toml
new file mode 100644
index 00000000..18a848a2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-3d8lxujqkrih.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-3d8lxujqkrih"
+title = "kernel CVE-2026-98373"
+cve = "CVE-2026-98373"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-3es2gfpny7tz.toml b/advisories/9.6.1/BRSA-3es2gfpny7tz.toml
new file mode 100644
index 00000000..ef41cc7f
--- /dev/null
+++ b/advisories/9.6.1/BRSA-3es2gfpny7tz.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-3es2gfpny7tz"
+title = "kernel CVE-2026-98491"
+cve = "CVE-2026-98491"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-3nvzdyi7yikb.toml b/advisories/9.6.1/BRSA-3nvzdyi7yikb.toml
new file mode 100644
index 00000000..66e1a420
--- /dev/null
+++ b/advisories/9.6.1/BRSA-3nvzdyi7yikb.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-3nvzdyi7yikb"
+title = "kernel CVE-2026-98090"
+cve = "CVE-2026-98090"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-46q2v4qlqaqc.toml b/advisories/9.6.1/BRSA-46q2v4qlqaqc.toml
new file mode 100644
index 00000000..06e03675
--- /dev/null
+++ b/advisories/9.6.1/BRSA-46q2v4qlqaqc.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-46q2v4qlqaqc"
+title = "kernel CVE-2026-98479"
+cve = "CVE-2026-98479"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-4amjfeuxtn0m.toml b/advisories/9.6.1/BRSA-4amjfeuxtn0m.toml
new file mode 100644
index 00000000..909b1f22
--- /dev/null
+++ b/advisories/9.6.1/BRSA-4amjfeuxtn0m.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-4amjfeuxtn0m"
+title = "kernel CVE-2026-97481"
+cve = "CVE-2026-97481"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-4eulavlsu2pl.toml b/advisories/9.6.1/BRSA-4eulavlsu2pl.toml
new file mode 100644
index 00000000..2f035282
--- /dev/null
+++ b/advisories/9.6.1/BRSA-4eulavlsu2pl.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-4eulavlsu2pl"
+title = "kernel CVE-2026-97417"
+cve = "CVE-2026-97417"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-4n5v6ttxny4j.toml b/advisories/9.6.1/BRSA-4n5v6ttxny4j.toml
new file mode 100644
index 00000000..3eed82c2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-4n5v6ttxny4j.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-4n5v6ttxny4j"
+title = "kernel CVE-2026-98553"
+cve = "CVE-2026-98553"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: autofs: fix sbi->pipe file reference leak in autofs_kill_sb()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-56x6c4yrb0zy.toml b/advisories/9.6.1/BRSA-56x6c4yrb0zy.toml
new file mode 100644
index 00000000..e86871ef
--- /dev/null
+++ b/advisories/9.6.1/BRSA-56x6c4yrb0zy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-56x6c4yrb0zy"
+title = "kernel CVE-2026-93795"
+cve = "CVE-2026-93795"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix leaks and online flag on radix_tree_insert failure"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-5n9ilrepiqlm.toml b/advisories/9.6.1/BRSA-5n9ilrepiqlm.toml
new file mode 100644
index 00000000..9bfbafa9
--- /dev/null
+++ b/advisories/9.6.1/BRSA-5n9ilrepiqlm.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-5n9ilrepiqlm"
+title = "kernel CVE-2026-93800"
+cve = "CVE-2026-93800"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix use-after-free on reloc root after error in insert_dirty_subvol()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-5pjg3ppxopyx.toml b/advisories/9.6.1/BRSA-5pjg3ppxopyx.toml
new file mode 100644
index 00000000..5588e7c6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-5pjg3ppxopyx.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-5pjg3ppxopyx"
+title = "kernel CVE-2026-68399"
+cve = "CVE-2026-68399"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-5xrs66dhvyz1.toml b/advisories/9.6.1/BRSA-5xrs66dhvyz1.toml
new file mode 100644
index 00000000..b9fab698
--- /dev/null
+++ b/advisories/9.6.1/BRSA-5xrs66dhvyz1.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-5xrs66dhvyz1"
+title = "kernel CVE-2026-97905"
+cve = "CVE-2026-97905"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: cpufreq: zero-initialize policy cpumask before sysfs publication"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-6dgcilmbswef.toml b/advisories/9.6.1/BRSA-6dgcilmbswef.toml
new file mode 100644
index 00000000..5a995a24
--- /dev/null
+++ b/advisories/9.6.1/BRSA-6dgcilmbswef.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-6dgcilmbswef"
+title = "kernel CVE-2026-98088"
+cve = "CVE-2026-98088"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid out-of-bounds cpumask_of_node() call in _base_assign_reply_queues()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-6hj2icwikyrq.toml b/advisories/9.6.1/BRSA-6hj2icwikyrq.toml
new file mode 100644
index 00000000..d95766c4
--- /dev/null
+++ b/advisories/9.6.1/BRSA-6hj2icwikyrq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-6hj2icwikyrq"
+title = "kernel CVE-2026-98071"
+cve = "CVE-2026-98071"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: clear cp_flags bits individually in rds_conn_path_reset()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-6pguyllacjat.toml b/advisories/9.6.1/BRSA-6pguyllacjat.toml
new file mode 100644
index 00000000..de09c943
--- /dev/null
+++ b/advisories/9.6.1/BRSA-6pguyllacjat.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-6pguyllacjat"
+title = "kernel CVE-2026-98063"
+cve = "CVE-2026-98063"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref in btf_var_show()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-6vd0i2apvvh7.toml b/advisories/9.6.1/BRSA-6vd0i2apvvh7.toml
new file mode 100644
index 00000000..7ceb5355
--- /dev/null
+++ b/advisories/9.6.1/BRSA-6vd0i2apvvh7.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-6vd0i2apvvh7"
+title = "kernel CVE-2026-97951"
+cve = "CVE-2026-97951"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: target: iscsi: Fix hang for aborted WRITE_PENDING commands"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-7ip38jvzaczq.toml b/advisories/9.6.1/BRSA-7ip38jvzaczq.toml
new file mode 100644
index 00000000..e54ec939
--- /dev/null
+++ b/advisories/9.6.1/BRSA-7ip38jvzaczq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-7ip38jvzaczq"
+title = "kernel CVE-2026-98070"
+cve = "CVE-2026-98070"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire RDS_IN_XMIT in rds_tcp_reset_callbacks()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-7pmvfed6r9eu.toml b/advisories/9.6.1/BRSA-7pmvfed6r9eu.toml
new file mode 100644
index 00000000..878fae8e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-7pmvfed6r9eu.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-7pmvfed6r9eu"
+title = "kernel CVE-2026-97415"
+cve = "CVE-2026-97415"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate names in ROOT_REF and ROOT_BACKREF"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-8csrxukx4eyt.toml b/advisories/9.6.1/BRSA-8csrxukx4eyt.toml
new file mode 100644
index 00000000..8dc8a60b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-8csrxukx4eyt.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-8csrxukx4eyt"
+title = "kernel CVE-2026-74289"
+cve = "CVE-2026-74289"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don't dump dying fib_info in fib_leaf_notify()."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-8ffhi9zypkso.toml b/advisories/9.6.1/BRSA-8ffhi9zypkso.toml
new file mode 100644
index 00000000..3950bdee
--- /dev/null
+++ b/advisories/9.6.1/BRSA-8ffhi9zypkso.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-8ffhi9zypkso"
+title = "kernel CVE-2026-98354"
+cve = "CVE-2026-98354"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Fix receive buffer leak when PKey enforcement fails"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-8lbcv0t8kgjf.toml b/advisories/9.6.1/BRSA-8lbcv0t8kgjf.toml
new file mode 100644
index 00000000..d9598ee8
--- /dev/null
+++ b/advisories/9.6.1/BRSA-8lbcv0t8kgjf.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-8lbcv0t8kgjf"
+title = "kernel CVE-2026-98174"
+cve = "CVE-2026-98174"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix rlist race and missing initialization"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-8pdacswgseoo.toml b/advisories/9.6.1/BRSA-8pdacswgseoo.toml
new file mode 100644
index 00000000..c2c014f1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-8pdacswgseoo.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-8pdacswgseoo"
+title = "kernel CVE-2026-97421"
+cve = "CVE-2026-97421"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-8voxpqutcigh.toml b/advisories/9.6.1/BRSA-8voxpqutcigh.toml
new file mode 100644
index 00000000..ecbb36d0
--- /dev/null
+++ b/advisories/9.6.1/BRSA-8voxpqutcigh.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-8voxpqutcigh"
+title = "kernel CVE-2026-98495"
+cve = "CVE-2026-98495"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: arp: terminate device name before lookup"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-96voroe6bqul.toml b/advisories/9.6.1/BRSA-96voroe6bqul.toml
new file mode 100644
index 00000000..ad030d60
--- /dev/null
+++ b/advisories/9.6.1/BRSA-96voroe6bqul.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-96voroe6bqul"
+title = "kernel CVE-2026-97566"
+cve = "CVE-2026-97566"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: kernel: drop pending ADD_ADDR when removing ID0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-99awpzr5ngvv.toml b/advisories/9.6.1/BRSA-99awpzr5ngvv.toml
new file mode 100644
index 00000000..b19e0b2a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-99awpzr5ngvv.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-99awpzr5ngvv"
+title = "kernel CVE-2026-97523"
+cve = "CVE-2026-97523"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: close race between scheduler and state change"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-99zevkneils0.toml b/advisories/9.6.1/BRSA-99zevkneils0.toml
new file mode 100644
index 00000000..3e1fabb4
--- /dev/null
+++ b/advisories/9.6.1/BRSA-99zevkneils0.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-99zevkneils0"
+title = "kernel CVE-2026-89638"
+cve = "CVE-2026-89638"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-9mqedro5wzua.toml b/advisories/9.6.1/BRSA-9mqedro5wzua.toml
new file mode 100644
index 00000000..22c3deb6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-9mqedro5wzua.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-9mqedro5wzua"
+title = "kernel CVE-2026-98647"
+cve = "CVE-2026-98647"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix divide-by-zero in btf_struct_walk()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-9u1opilzcxsc.toml b/advisories/9.6.1/BRSA-9u1opilzcxsc.toml
new file mode 100644
index 00000000..5f208a6c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-9u1opilzcxsc.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-9u1opilzcxsc"
+title = "kernel CVE-2026-97925"
+cve = "CVE-2026-97925"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tick/broadcast: Plug clockevents replacement race"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-9zx73z2xjhe7.toml b/advisories/9.6.1/BRSA-9zx73z2xjhe7.toml
new file mode 100644
index 00000000..e592b8ce
--- /dev/null
+++ b/advisories/9.6.1/BRSA-9zx73z2xjhe7.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-9zx73z2xjhe7"
+title = "kernel CVE-2026-98363"
+cve = "CVE-2026-98363"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scpi: reject DVFS OPP count above MAX_DVFS_OPPS"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-a8ufgnxrnbae.toml b/advisories/9.6.1/BRSA-a8ufgnxrnbae.toml
new file mode 100644
index 00000000..acdb72fe
--- /dev/null
+++ b/advisories/9.6.1/BRSA-a8ufgnxrnbae.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-a8ufgnxrnbae"
+title = "kernel CVE-2026-98374"
+cve = "CVE-2026-98374"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-acmwopfgu8vd.toml b/advisories/9.6.1/BRSA-acmwopfgu8vd.toml
new file mode 100644
index 00000000..a6e83350
--- /dev/null
+++ b/advisories/9.6.1/BRSA-acmwopfgu8vd.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-acmwopfgu8vd"
+title = "kernel CVE-2026-98404"
+cve = "CVE-2026-98404"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: drm/virtio: Fix a NULL vs ERR_PTR() bug in virtio_gpu_user_framebuffer_create()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-adhn1x28blgr.toml b/advisories/9.6.1/BRSA-adhn1x28blgr.toml
new file mode 100644
index 00000000..c800aef0
--- /dev/null
+++ b/advisories/9.6.1/BRSA-adhn1x28blgr.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-adhn1x28blgr"
+title = "kernel CVE-2026-98610"
+cve = "CVE-2026-98610"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ahqob33yoqo4.toml b/advisories/9.6.1/BRSA-ahqob33yoqo4.toml
new file mode 100644
index 00000000..2a582aaf
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ahqob33yoqo4.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ahqob33yoqo4"
+title = "kernel CVE-2026-98077"
+cve = "CVE-2026-98077"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-aidvxex0yjha.toml b/advisories/9.6.1/BRSA-aidvxex0yjha.toml
new file mode 100644
index 00000000..a818fcbc
--- /dev/null
+++ b/advisories/9.6.1/BRSA-aidvxex0yjha.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-aidvxex0yjha"
+title = "kernel CVE-2026-98201"
+cve = "CVE-2026-98201"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: Input: zero ff_effect before compat copy in input_ff_effect_from_user"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-alwhmrahmla3.toml b/advisories/9.6.1/BRSA-alwhmrahmla3.toml
new file mode 100644
index 00000000..2616fd70
--- /dev/null
+++ b/advisories/9.6.1/BRSA-alwhmrahmla3.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-alwhmrahmla3"
+title = "kernel CVE-2026-98643"
+cve = "CVE-2026-98643"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of rtt_min in sock_ops"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-an6fd4txqqqn.toml b/advisories/9.6.1/BRSA-an6fd4txqqqn.toml
new file mode 100644
index 00000000..a3aac875
--- /dev/null
+++ b/advisories/9.6.1/BRSA-an6fd4txqqqn.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-an6fd4txqqqn"
+title = "kernel CVE-2026-89971"
+cve = "CVE-2026-89971"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: nvme: skip the zoned limits update if the zone info query failed"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-asgaumbguejt.toml b/advisories/9.6.1/BRSA-asgaumbguejt.toml
new file mode 100644
index 00000000..97c9c49e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-asgaumbguejt.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-asgaumbguejt"
+title = "kernel CVE-2026-97901"
+cve = "CVE-2026-97901"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-auyf20buhfhs.toml b/advisories/9.6.1/BRSA-auyf20buhfhs.toml
new file mode 100644
index 00000000..c98e4de6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-auyf20buhfhs.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-auyf20buhfhs"
+title = "kernel CVE-2026-93244"
+cve = "CVE-2026-93244"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: simpledrm: Improve stride validation"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-azbqn2fxqmes.toml b/advisories/9.6.1/BRSA-azbqn2fxqmes.toml
new file mode 100644
index 00000000..c3fdc83e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-azbqn2fxqmes.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-azbqn2fxqmes"
+title = "kernel CVE-2026-97939"
+cve = "CVE-2026-97939"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipmr: account multicast table and route memory"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-bazyfvfiyhfw.toml b/advisories/9.6.1/BRSA-bazyfvfiyhfw.toml
new file mode 100644
index 00000000..fecce7e4
--- /dev/null
+++ b/advisories/9.6.1/BRSA-bazyfvfiyhfw.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-bazyfvfiyhfw"
+title = "kernel CVE-2026-98319"
+cve = "CVE-2026-98319"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm_pending_vblank_event leak in error path for out_fence_ptr"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-biwafrsblgjs.toml b/advisories/9.6.1/BRSA-biwafrsblgjs.toml
new file mode 100644
index 00000000..d5eff03a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-biwafrsblgjs.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-biwafrsblgjs"
+title = "kernel CVE-2026-93231"
+cve = "CVE-2026-93231"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: lockd: fix swapped arguments in nlmsvc_match_ip()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-blc7ncl0p2k3.toml b/advisories/9.6.1/BRSA-blc7ncl0p2k3.toml
new file mode 100644
index 00000000..fea0abe2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-blc7ncl0p2k3.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-blc7ncl0p2k3"
+title = "kernel CVE-2026-98276"
+cve = "CVE-2026-98276"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: lock the socket in sock_gettstamp()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-bqsp60bkepmq.toml b/advisories/9.6.1/BRSA-bqsp60bkepmq.toml
new file mode 100644
index 00000000..e3edea80
--- /dev/null
+++ b/advisories/9.6.1/BRSA-bqsp60bkepmq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-bqsp60bkepmq"
+title = "kernel CVE-2026-93785"
+cve = "CVE-2026-93785"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: cifs: validate idmap key payload length"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-btu9czidplvo.toml b/advisories/9.6.1/BRSA-btu9czidplvo.toml
new file mode 100644
index 00000000..7509837c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-btu9czidplvo.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-btu9czidplvo"
+title = "kernel CVE-2026-80734"
+cve = "CVE-2026-80734"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: initialize inode mapping flags for cached inodes"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-bxk2tkvwdlfu.toml b/advisories/9.6.1/BRSA-bxk2tkvwdlfu.toml
new file mode 100644
index 00000000..19cdb766
--- /dev/null
+++ b/advisories/9.6.1/BRSA-bxk2tkvwdlfu.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-bxk2tkvwdlfu"
+title = "kernel CVE-2026-98262"
+cve = "CVE-2026-98262"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ata: libahci: clear PxCLBU and PxFBU for AHCI_HFLAG_32BIT_ONLY"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-c6ra5feny0j1.toml b/advisories/9.6.1/BRSA-c6ra5feny0j1.toml
new file mode 100644
index 00000000..88cf4074
--- /dev/null
+++ b/advisories/9.6.1/BRSA-c6ra5feny0j1.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-c6ra5feny0j1"
+title = "kernel CVE-2026-98375"
+cve = "CVE-2026-98375"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-cj2lcl1suuik.toml b/advisories/9.6.1/BRSA-cj2lcl1suuik.toml
new file mode 100644
index 00000000..8368086e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-cj2lcl1suuik.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-cj2lcl1suuik"
+title = "kernel CVE-2026-98171"
+cve = "CVE-2026-98171"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-cnbnxtnsswtp.toml b/advisories/9.6.1/BRSA-cnbnxtnsswtp.toml
new file mode 100644
index 00000000..a08b2def
--- /dev/null
+++ b/advisories/9.6.1/BRSA-cnbnxtnsswtp.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-cnbnxtnsswtp"
+title = "kernel CVE-2026-74496"
+cve = "CVE-2026-74496"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: fou: Fix use-after-free in fou_create()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-crdjwlmpy7w6.toml b/advisories/9.6.1/BRSA-crdjwlmpy7w6.toml
new file mode 100644
index 00000000..ea1b6c56
--- /dev/null
+++ b/advisories/9.6.1/BRSA-crdjwlmpy7w6.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-crdjwlmpy7w6"
+title = "kernel CVE-2026-98169"
+cve = "CVE-2026-98169"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential OOB read in smb3_enum_snapshots()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-cssqc1i5dxoj.toml b/advisories/9.6.1/BRSA-cssqc1i5dxoj.toml
new file mode 100644
index 00000000..e3c4ba6b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-cssqc1i5dxoj.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-cssqc1i5dxoj"
+title = "kernel CVE-2026-98221"
+cve = "CVE-2026-98221"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2_load_cmd() boundary check"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-d3mgdpuai741.toml b/advisories/9.6.1/BRSA-d3mgdpuai741.toml
new file mode 100644
index 00000000..71c68c27
--- /dev/null
+++ b/advisories/9.6.1/BRSA-d3mgdpuai741.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-d3mgdpuai741"
+title = "kernel CVE-2026-97611"
+cve = "CVE-2026-97611"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix use-after-free of the flow table mask array"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dbiimif0rva8.toml b/advisories/9.6.1/BRSA-dbiimif0rva8.toml
new file mode 100644
index 00000000..b668d636
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dbiimif0rva8.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-dbiimif0rva8"
+title = "kernel CVE-2026-93810"
+cve = "CVE-2026-93810"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double fput"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dfaxq5jh44fg.toml b/advisories/9.6.1/BRSA-dfaxq5jh44fg.toml
new file mode 100644
index 00000000..665ca560
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dfaxq5jh44fg.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-dfaxq5jh44fg"
+title = "kernel CVE-2026-97619"
+cve = "CVE-2026-97619"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: io_uring/rw: end write accounting from ->ki_complete"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dihitipwqkpa.toml b/advisories/9.6.1/BRSA-dihitipwqkpa.toml
new file mode 100644
index 00000000..f7260fe8
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dihitipwqkpa.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-dihitipwqkpa"
+title = "kernel CVE-2026-97444"
+cve = "CVE-2026-97444"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in two places"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dqqjp3p4khsz.toml b/advisories/9.6.1/BRSA-dqqjp3p4khsz.toml
new file mode 100644
index 00000000..41ebd9fb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dqqjp3p4khsz.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-dqqjp3p4khsz"
+title = "kernel CVE-2026-97448"
+cve = "CVE-2026-97448"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add validation for node in acpi_ns_build_normalized_path()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-drwam49j4cl5.toml b/advisories/9.6.1/BRSA-drwam49j4cl5.toml
new file mode 100644
index 00000000..6747a698
--- /dev/null
+++ b/advisories/9.6.1/BRSA-drwam49j4cl5.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-drwam49j4cl5"
+title = "kernel CVE-2026-93798"
+cve = "CVE-2026-93798"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: fix reloc root cleanup in merge_reloc_roots()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dtgfrldzazrh.toml b/advisories/9.6.1/BRSA-dtgfrldzazrh.toml
new file mode 100644
index 00000000..3c0dc8d0
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dtgfrldzazrh.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-dtgfrldzazrh"
+title = "kernel CVE-2026-72315"
+cve = "CVE-2026-72315"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-duumxwnntcdi.toml b/advisories/9.6.1/BRSA-duumxwnntcdi.toml
new file mode 100644
index 00000000..7cfea3cb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-duumxwnntcdi.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-duumxwnntcdi"
+title = "kernel CVE-2026-98368"
+cve = "CVE-2026-98368"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: esp: downgrade zerocopy managed frags before mutating skb frags"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dvxmk5wv2xxg.toml b/advisories/9.6.1/BRSA-dvxmk5wv2xxg.toml
new file mode 100644
index 00000000..82867059
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dvxmk5wv2xxg.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-dvxmk5wv2xxg"
+title = "kernel CVE-2026-98251"
+cve = "CVE-2026-98251"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: openvswitch: avoid reallocating confirmed conntrack labels"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-dz29ybt40vrg.toml b/advisories/9.6.1/BRSA-dz29ybt40vrg.toml
new file mode 100644
index 00000000..40d5cf15
--- /dev/null
+++ b/advisories/9.6.1/BRSA-dz29ybt40vrg.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-dz29ybt40vrg"
+title = "kernel CVE-2026-98084"
+cve = "CVE-2026-98084"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-eanohgwdsgdm.toml b/advisories/9.6.1/BRSA-eanohgwdsgdm.toml
new file mode 100644
index 00000000..31280184
--- /dev/null
+++ b/advisories/9.6.1/BRSA-eanohgwdsgdm.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-eanohgwdsgdm"
+title = "kernel CVE-2026-98301"
+cve = "CVE-2026-98301"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: bridge: mst: move switchdev call outside rcu"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ebvkp9qgpvyi.toml b/advisories/9.6.1/BRSA-ebvkp9qgpvyi.toml
new file mode 100644
index 00000000..997c0fd1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ebvkp9qgpvyi.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ebvkp9qgpvyi"
+title = "kernel CVE-2026-97998"
+cve = "CVE-2026-97998"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: cope with concurrent instance destruction"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-edmjwjgodayr.toml b/advisories/9.6.1/BRSA-edmjwjgodayr.toml
new file mode 100644
index 00000000..0e234506
--- /dev/null
+++ b/advisories/9.6.1/BRSA-edmjwjgodayr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-edmjwjgodayr"
+title = "kernel CVE-2026-98091"
+cve = "CVE-2026-98091"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: detach failed sprout device from transaction update list"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-elnxdeuqmojc.toml b/advisories/9.6.1/BRSA-elnxdeuqmojc.toml
new file mode 100644
index 00000000..f5447d8a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-elnxdeuqmojc.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-elnxdeuqmojc"
+title = "Bottlerocket Kernel 6.18 Updates"
+severity = "high"
+description = "Kernel version 6.18.56 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-eosoahxnyzfh.toml b/advisories/9.6.1/BRSA-eosoahxnyzfh.toml
new file mode 100644
index 00000000..b82c8854
--- /dev/null
+++ b/advisories/9.6.1/BRSA-eosoahxnyzfh.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-eosoahxnyzfh"
+title = "kernel CVE-2026-98303"
+cve = "CVE-2026-98303"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: reject RTN_UNREACHABLE input routes in icmp_route_lookup"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-etx5qptlnvaw.toml b/advisories/9.6.1/BRSA-etx5qptlnvaw.toml
new file mode 100644
index 00000000..08d1f441
--- /dev/null
+++ b/advisories/9.6.1/BRSA-etx5qptlnvaw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-etx5qptlnvaw"
+title = "kernel CVE-2026-97597"
+cve = "CVE-2026-97597"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: flowlabel: cap duplicate leases per socket"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ew3mgctwwwru.toml b/advisories/9.6.1/BRSA-ew3mgctwwwru.toml
new file mode 100644
index 00000000..b0056e4c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ew3mgctwwwru.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-ew3mgctwwwru"
+title = "kernel CVE-2026-98222"
+cve = "CVE-2026-98222"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: KEYS: encrypted: fix integer overflow of datablob_len"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-f0oqyouzlwuq.toml b/advisories/9.6.1/BRSA-f0oqyouzlwuq.toml
new file mode 100644
index 00000000..72244eba
--- /dev/null
+++ b/advisories/9.6.1/BRSA-f0oqyouzlwuq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-f0oqyouzlwuq"
+title = "kernel CVE-2026-98012"
+cve = "CVE-2026-98012"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: sfq: clamp quantum in change path"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-faql4anxow7t.toml b/advisories/9.6.1/BRSA-faql4anxow7t.toml
new file mode 100644
index 00000000..6e00e7cc
--- /dev/null
+++ b/advisories/9.6.1/BRSA-faql4anxow7t.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-faql4anxow7t"
+title = "kernel CVE-2026-98531"
+cve = "CVE-2026-98531"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-feyhddwxyqy0.toml b/advisories/9.6.1/BRSA-feyhddwxyqy0.toml
new file mode 100644
index 00000000..3f72ac7c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-feyhddwxyqy0.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-feyhddwxyqy0"
+title = "kernel CVE-2026-98382"
+cve = "CVE-2026-98382"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Reject dev-bound-only programs on other devices"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-fhgdeig8b4sy.toml b/advisories/9.6.1/BRSA-fhgdeig8b4sy.toml
new file mode 100644
index 00000000..125322a3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-fhgdeig8b4sy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-fhgdeig8b4sy"
+title = "kernel CVE-2026-98095"
+cve = "CVE-2026-98095"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header()."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-fjbexibmu6di.toml b/advisories/9.6.1/BRSA-fjbexibmu6di.toml
new file mode 100644
index 00000000..ba60dc8f
--- /dev/null
+++ b/advisories/9.6.1/BRSA-fjbexibmu6di.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-fjbexibmu6di"
+title = "kernel CVE-2026-97568"
+cve = "CVE-2026-97568"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: syncookies: remember the request backup flag"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-frx2nli0icfy.toml b/advisories/9.6.1/BRSA-frx2nli0icfy.toml
new file mode 100644
index 00000000..23d616ba
--- /dev/null
+++ b/advisories/9.6.1/BRSA-frx2nli0icfy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-frx2nli0icfy"
+title = "kernel CVE-2026-98023"
+cve = "CVE-2026-98023"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: vxlan: reject dynamic fdb entries that reference a nexthop id"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-fvqpqncsfd5v.toml b/advisories/9.6.1/BRSA-fvqpqncsfd5v.toml
new file mode 100644
index 00000000..97e8202b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-fvqpqncsfd5v.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-fvqpqncsfd5v"
+title = "kernel CVE-2026-98590"
+cve = "CVE-2026-98590"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix bpf_sock context code generation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-g24dstxcv8rz.toml b/advisories/9.6.1/BRSA-g24dstxcv8rz.toml
new file mode 100644
index 00000000..55e93543
--- /dev/null
+++ b/advisories/9.6.1/BRSA-g24dstxcv8rz.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-g24dstxcv8rz"
+title = "kernel CVE-2026-97559"
+cve = "CVE-2026-97559"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fail DACL rewrite when the new DACL exceeds 64K"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-g8d9q99nqfir.toml b/advisories/9.6.1/BRSA-g8d9q99nqfir.toml
new file mode 100644
index 00000000..0176f09b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-g8d9q99nqfir.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-g8d9q99nqfir"
+title = "kernel CVE-2026-97438"
+cve = "CVE-2026-97438"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate index entry key bounds"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-gcn7wksgayfw.toml b/advisories/9.6.1/BRSA-gcn7wksgayfw.toml
new file mode 100644
index 00000000..fd8e8ace
--- /dev/null
+++ b/advisories/9.6.1/BRSA-gcn7wksgayfw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-gcn7wksgayfw"
+title = "kernel CVE-2026-98130"
+cve = "CVE-2026-98130"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix a TOCTOU race in SCTP_CMD_TIMER_START"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-gel0xkqdugmx.toml b/advisories/9.6.1/BRSA-gel0xkqdugmx.toml
new file mode 100644
index 00000000..cc268a8e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-gel0xkqdugmx.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-gel0xkqdugmx"
+title = "kernel CVE-2026-98567"
+cve = "CVE-2026-98567"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: xps: reject an out of range traffic class"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ggsvx8cwcytt.toml b/advisories/9.6.1/BRSA-ggsvx8cwcytt.toml
new file mode 100644
index 00000000..0d721cd8
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ggsvx8cwcytt.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ggsvx8cwcytt"
+title = "kernel CVE-2026-97450"
+cve = "CVE-2026-97450"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate handler object type in two places"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ghqggwgijty4.toml b/advisories/9.6.1/BRSA-ghqggwgijty4.toml
new file mode 100644
index 00000000..d747595e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ghqggwgijty4.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ghqggwgijty4"
+title = "kernel CVE-2026-98170"
+cve = "CVE-2026-98170"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move_smb2_ea_to_cifs()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-gmsuphzle0me.toml b/advisories/9.6.1/BRSA-gmsuphzle0me.toml
new file mode 100644
index 00000000..0c24f72f
--- /dev/null
+++ b/advisories/9.6.1/BRSA-gmsuphzle0me.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-gmsuphzle0me"
+title = "kernel CVE-2026-68161"
+cve = "CVE-2026-68161"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-gsplwl0bcua3.toml b/advisories/9.6.1/BRSA-gsplwl0bcua3.toml
new file mode 100644
index 00000000..43917256
--- /dev/null
+++ b/advisories/9.6.1/BRSA-gsplwl0bcua3.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-gsplwl0bcua3"
+title = "kernel CVE-2026-98074"
+cve = "CVE-2026-98074"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bonding: do not clear curr_active_slave prematurely when releasing all slaves"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-h1gwliemligk.toml b/advisories/9.6.1/BRSA-h1gwliemligk.toml
new file mode 100644
index 00000000..4d020264
--- /dev/null
+++ b/advisories/9.6.1/BRSA-h1gwliemligk.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-h1gwliemligk"
+title = "kernel CVE-2026-89996"
+cve = "CVE-2026-89996"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-h57bhspmfwfz.toml b/advisories/9.6.1/BRSA-h57bhspmfwfz.toml
new file mode 100644
index 00000000..87e24ce6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-h57bhspmfwfz.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-h57bhspmfwfz"
+title = "kernel CVE-2026-98205"
+cve = "CVE-2026-98205"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: Input: evdev - zero absinfo before partial copy in EVIOCSABS"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hhzoz8i4nemy.toml b/advisories/9.6.1/BRSA-hhzoz8i4nemy.toml
new file mode 100644
index 00000000..ef494752
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hhzoz8i4nemy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hhzoz8i4nemy"
+title = "kernel CVE-2026-97452"
+cve = "CVE-2026-97452"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Prevent adding invalid references"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hiuzqb8rtynw.toml b/advisories/9.6.1/BRSA-hiuzqb8rtynw.toml
new file mode 100644
index 00000000..fe137f4e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hiuzqb8rtynw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hiuzqb8rtynw"
+title = "kernel CVE-2026-98075"
+cve = "CVE-2026-98075"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: reject BPF_PSEUDO_FUNC reference to the main program"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hiycqeghyjau.toml b/advisories/9.6.1/BRSA-hiycqeghyjau.toml
new file mode 100644
index 00000000..d7e5ddb1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hiycqeghyjau.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hiycqeghyjau"
+title = "kernel CVE-2026-98175"
+cve = "CVE-2026-98175"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: cancel reconnect work in clean_demultiplex_info()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hn8t5rlfljej.toml b/advisories/9.6.1/BRSA-hn8t5rlfljej.toml
new file mode 100644
index 00000000..f7b2975a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hn8t5rlfljej.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hn8t5rlfljej"
+title = "kernel CVE-2026-98123"
+cve = "CVE-2026-98123"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: sctp: fix soft lockup from unpadded ASCONF-ACK parameter iteration"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hsxb0p8kifer.toml b/advisories/9.6.1/BRSA-hsxb0p8kifer.toml
new file mode 100644
index 00000000..0491601a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hsxb0p8kifer.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-hsxb0p8kifer"
+title = "kernel CVE-2026-98306"
+cve = "CVE-2026-98306"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: seg6: set IPSKB_L3SLAVE from IP6SKB_L3SLAVE on IPIP decapsulation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hvyhkedlxa4k.toml b/advisories/9.6.1/BRSA-hvyhkedlxa4k.toml
new file mode 100644
index 00000000..237a8813
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hvyhkedlxa4k.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hvyhkedlxa4k"
+title = "kernel CVE-2026-98064"
+cve = "CVE-2026-98064"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NULL-ptr-deref when showing a void BTF type"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-hzlcvtjo89h7.toml b/advisories/9.6.1/BRSA-hzlcvtjo89h7.toml
new file mode 100644
index 00000000..59e308a5
--- /dev/null
+++ b/advisories/9.6.1/BRSA-hzlcvtjo89h7.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-hzlcvtjo89h7"
+title = "kernel CVE-2026-98080"
+cve = "CVE-2026-98080"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: do not force reloc root creation during qgroup_account_snapshot()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-idogxjih1owf.toml b/advisories/9.6.1/BRSA-idogxjih1owf.toml
new file mode 100644
index 00000000..17f6c291
--- /dev/null
+++ b/advisories/9.6.1/BRSA-idogxjih1owf.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-idogxjih1owf"
+title = "kernel CVE-2026-98573"
+cve = "CVE-2026-98573"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ifgb47e3chaw.toml b/advisories/9.6.1/BRSA-ifgb47e3chaw.toml
new file mode 100644
index 00000000..06522aef
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ifgb47e3chaw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ifgb47e3chaw"
+title = "kernel CVE-2026-90013"
+cve = "CVE-2026-90013"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tracing: Take trace_array reference when opening options file"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ihjtadh7qgey.toml b/advisories/9.6.1/BRSA-ihjtadh7qgey.toml
new file mode 100644
index 00000000..e57f8c25
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ihjtadh7qgey.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-ihjtadh7qgey"
+title = "kernel CVE-2026-98378"
+cve = "CVE-2026-98378"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Skip unsettled links in link iterator"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-indejaxstkqu.toml b/advisories/9.6.1/BRSA-indejaxstkqu.toml
new file mode 100644
index 00000000..c69e8070
--- /dev/null
+++ b/advisories/9.6.1/BRSA-indejaxstkqu.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-indejaxstkqu"
+title = "kernel CVE-2026-98554"
+cve = "CVE-2026-98554"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: vlan: ensure sufficient headroom in vlan_dev_hard_header()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-iogtzrj6jbgp.toml b/advisories/9.6.1/BRSA-iogtzrj6jbgp.toml
new file mode 100644
index 00000000..8ea35c01
--- /dev/null
+++ b/advisories/9.6.1/BRSA-iogtzrj6jbgp.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-iogtzrj6jbgp"
+title = "kernel CVE-2026-97938"
+cve = "CVE-2026-97938"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: reboot: fix cad_pid use-after-free race"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-iwhrubmnqu6p.toml b/advisories/9.6.1/BRSA-iwhrubmnqu6p.toml
new file mode 100644
index 00000000..650ed5d2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-iwhrubmnqu6p.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-iwhrubmnqu6p"
+title = "kernel CVE-2026-98532"
+cve = "CVE-2026-98532"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: do not let ipv6_find_hdr() return an offset past the packet end"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ixwecthxesl2.toml b/advisories/9.6.1/BRSA-ixwecthxesl2.toml
new file mode 100644
index 00000000..e43c8016
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ixwecthxesl2.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-ixwecthxesl2"
+title = "kernel CVE-2026-98625"
+cve = "CVE-2026-98625"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: publish HW_DEAD after worker is done"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-izdtyimbbjac.toml b/advisories/9.6.1/BRSA-izdtyimbbjac.toml
new file mode 100644
index 00000000..813803bb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-izdtyimbbjac.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-izdtyimbbjac"
+title = "kernel CVE-2026-97618"
+cve = "CVE-2026-97618"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: io_uring/net: don't overconsume buffers when using MSG_TRUNC"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-izxvfvh1sndb.toml b/advisories/9.6.1/BRSA-izxvfvh1sndb.toml
new file mode 100644
index 00000000..81593f7c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-izxvfvh1sndb.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-izxvfvh1sndb"
+title = "kernel CVE-2026-98017"
+cve = "CVE-2026-98017"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: defer qdisc freeing after failed creation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-j0jbn2axjzws.toml b/advisories/9.6.1/BRSA-j0jbn2axjzws.toml
new file mode 100644
index 00000000..9cd38844
--- /dev/null
+++ b/advisories/9.6.1/BRSA-j0jbn2axjzws.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-j0jbn2axjzws"
+title = "kernel CVE-2026-97446"
+cve = "CVE-2026-97446"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix NULL pointer dereference in acpi_ns_custom_package()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-j6pq9zj8hlpj.toml b/advisories/9.6.1/BRSA-j6pq9zj8hlpj.toml
new file mode 100644
index 00000000..72f8f2ee
--- /dev/null
+++ b/advisories/9.6.1/BRSA-j6pq9zj8hlpj.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-j6pq9zj8hlpj"
+title = "kernel CVE-2026-98161"
+cve = "CVE-2026-98161"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: nvdimm: pmem: keep PREFLUSH before data writes"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-j7kxe46bo6lr.toml b/advisories/9.6.1/BRSA-j7kxe46bo6lr.toml
new file mode 100644
index 00000000..5c5493c3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-j7kxe46bo6lr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-j7kxe46bo6lr"
+title = "kernel CVE-2026-72463"
+cve = "CVE-2026-72463"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix dev use-after-free in xfrm async resumption"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-jatwiy3fgjbn.toml b/advisories/9.6.1/BRSA-jatwiy3fgjbn.toml
new file mode 100644
index 00000000..08428edf
--- /dev/null
+++ b/advisories/9.6.1/BRSA-jatwiy3fgjbn.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-jatwiy3fgjbn"
+title = "kernel CVE-2026-89520"
+cve = "CVE-2026-89520"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-jfjavyontyvt.toml b/advisories/9.6.1/BRSA-jfjavyontyvt.toml
new file mode 100644
index 00000000..05e0c6da
--- /dev/null
+++ b/advisories/9.6.1/BRSA-jfjavyontyvt.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-jfjavyontyvt"
+title = "kernel CVE-2026-98214"
+cve = "CVE-2026-98214"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-jtlnvfiri0cl.toml b/advisories/9.6.1/BRSA-jtlnvfiri0cl.toml
new file mode 100644
index 00000000..a0b9684c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-jtlnvfiri0cl.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-jtlnvfiri0cl"
+title = "kernel CVE-2026-98369"
+cve = "CVE-2026-98369"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: add missing rcu_read_lock(), skb_dst_force() and dev_hold() for xfrm_trans_reinject()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-k1ikhuff1gpi.toml b/advisories/9.6.1/BRSA-k1ikhuff1gpi.toml
new file mode 100644
index 00000000..01a4e391
--- /dev/null
+++ b/advisories/9.6.1/BRSA-k1ikhuff1gpi.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-k1ikhuff1gpi"
+title = "kernel CVE-2026-98261"
+cve = "CVE-2026-98261"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: cifs: Fix server use-after-free in cifs_chan_skip_or_disable()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-k6x5subfz6vo.toml b/advisories/9.6.1/BRSA-k6x5subfz6vo.toml
new file mode 100644
index 00000000..6b4dbfa2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-k6x5subfz6vo.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-k6x5subfz6vo"
+title = "kernel CVE-2026-97449"
+cve = "CVE-2026-97449"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Add package limit checks in parser functions"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-keddzdypkk8i.toml b/advisories/9.6.1/BRSA-keddzdypkk8i.toml
new file mode 100644
index 00000000..412e8355
--- /dev/null
+++ b/advisories/9.6.1/BRSA-keddzdypkk8i.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-keddzdypkk8i"
+title = "kernel CVE-2026-98234"
+cve = "CVE-2026-98234"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: cap hh_flows_limit at change time"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-kelkal6ovas8.toml b/advisories/9.6.1/BRSA-kelkal6ovas8.toml
new file mode 100644
index 00000000..9088a9c0
--- /dev/null
+++ b/advisories/9.6.1/BRSA-kelkal6ovas8.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-kelkal6ovas8"
+title = "kernel CVE-2026-98377"
+cve = "CVE-2026-98377"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: vlan: require the MAC header to be present in __vlan_insert_inner_tag()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-kenvkuzgzr9d.toml b/advisories/9.6.1/BRSA-kenvkuzgzr9d.toml
new file mode 100644
index 00000000..f4a629eb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-kenvkuzgzr9d.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-kenvkuzgzr9d"
+title = "kernel CVE-2026-89633"
+cve = "CVE-2026-89633"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-koqqsy3tytfj.toml b/advisories/9.6.1/BRSA-koqqsy3tytfj.toml
new file mode 100644
index 00000000..e1d6de84
--- /dev/null
+++ b/advisories/9.6.1/BRSA-koqqsy3tytfj.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-koqqsy3tytfj"
+title = "kernel CVE-2026-98380"
+cve = "CVE-2026-98380"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: reject IDR error pointers when deleting actions"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-koypyltksaxm.toml b/advisories/9.6.1/BRSA-koypyltksaxm.toml
new file mode 100644
index 00000000..e4dbf57b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-koypyltksaxm.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-koypyltksaxm"
+title = "kernel CVE-2026-98547"
+cve = "CVE-2026-98547"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: af_packet: fix integer overflow in prb_calc_retire_blk_tmo()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ky4abkhwu3pg.toml b/advisories/9.6.1/BRSA-ky4abkhwu3pg.toml
new file mode 100644
index 00000000..8e81a2d3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ky4abkhwu3pg.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ky4abkhwu3pg"
+title = "kernel CVE-2026-93781"
+cve = "CVE-2026-93781"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: core: Do not block on tag allocation in scsi_eh_lock_door()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-l3vjxzfook4g.toml b/advisories/9.6.1/BRSA-l3vjxzfook4g.toml
new file mode 100644
index 00000000..9e251e03
--- /dev/null
+++ b/advisories/9.6.1/BRSA-l3vjxzfook4g.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-l3vjxzfook4g"
+title = "kernel CVE-2026-98775"
+cve = "CVE-2026-98775"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: nitro_enclaves: fix use-after-free on SLOT_ALLOC failure"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lijlhxxegodr.toml b/advisories/9.6.1/BRSA-lijlhxxegodr.toml
new file mode 100644
index 00000000..873663c0
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lijlhxxegodr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-lijlhxxegodr"
+title = "kernel CVE-2026-98231"
+cve = "CVE-2026-98231"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: serialize state GC with device state flush"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lkb3ynn53nm5.toml b/advisories/9.6.1/BRSA-lkb3ynn53nm5.toml
new file mode 100644
index 00000000..7b764412
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lkb3ynn53nm5.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-lkb3ynn53nm5"
+title = "kernel CVE-2026-97594"
+cve = "CVE-2026-97594"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: landlock: Fix use-after-free of the source's parent directory"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lkwdus7tadna.toml b/advisories/9.6.1/BRSA-lkwdus7tadna.toml
new file mode 100644
index 00000000..4e0bb085
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lkwdus7tadna.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-lkwdus7tadna"
+title = "kernel CVE-2026-97558"
+cve = "CVE-2026-97558"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix cifsFileInfo reference leak in deferred close"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lrfym1edyzkr.toml b/advisories/9.6.1/BRSA-lrfym1edyzkr.toml
new file mode 100644
index 00000000..2defd0ea
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lrfym1edyzkr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-lrfym1edyzkr"
+title = "kernel CVE-2026-98101"
+cve = "CVE-2026-98101"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use copy-on-write RCU updates in ip6_mc_source()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lshrvi8xi2ac.toml b/advisories/9.6.1/BRSA-lshrvi8xi2ac.toml
new file mode 100644
index 00000000..c6e58c91
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lshrvi8xi2ac.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-lshrvi8xi2ac"
+title = "kernel CVE-2026-89648"
+cve = "CVE-2026-89648"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph_parse_deleg_inos()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ltdxbqhw0zht.toml b/advisories/9.6.1/BRSA-ltdxbqhw0zht.toml
new file mode 100644
index 00000000..7888283e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ltdxbqhw0zht.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ltdxbqhw0zht"
+title = "kernel CVE-2026-97964"
+cve = "CVE-2026-97964"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ppp_synctty: ensure a writeable skb header"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ltf0z9ntsbzz.toml b/advisories/9.6.1/BRSA-ltf0z9ntsbzz.toml
new file mode 100644
index 00000000..af355751
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ltf0z9ntsbzz.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ltf0z9ntsbzz"
+title = "kernel CVE-2026-97556"
+cve = "CVE-2026-97556"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: avoid leaking refcount when cifs_sb_tlink() fails"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lx7v2ih4rl5b.toml b/advisories/9.6.1/BRSA-lx7v2ih4rl5b.toml
new file mode 100644
index 00000000..22cb92e3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lx7v2ih4rl5b.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-lx7v2ih4rl5b"
+title = "kernel CVE-2026-97608"
+cve = "CVE-2026-97608"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_log: unregister loggers before per-net teardown"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-lzl5fzauyucz.toml b/advisories/9.6.1/BRSA-lzl5fzauyucz.toml
new file mode 100644
index 00000000..19a45933
--- /dev/null
+++ b/advisories/9.6.1/BRSA-lzl5fzauyucz.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-lzl5fzauyucz"
+title = "kernel CVE-2026-98260"
+cve = "CVE-2026-98260"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: exec: Cleanup POSIX timers right after de_thread()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-m9uvchnieyba.toml b/advisories/9.6.1/BRSA-m9uvchnieyba.toml
new file mode 100644
index 00000000..4baaf636
--- /dev/null
+++ b/advisories/9.6.1/BRSA-m9uvchnieyba.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-m9uvchnieyba"
+title = "kernel CVE-2026-98541"
+cve = "CVE-2026-98541"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-mcetz6kul4wh.toml b/advisories/9.6.1/BRSA-mcetz6kul4wh.toml
new file mode 100644
index 00000000..5b696754
--- /dev/null
+++ b/advisories/9.6.1/BRSA-mcetz6kul4wh.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-mcetz6kul4wh"
+title = "kernel CVE-2026-98010"
+cve = "CVE-2026-98010"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: drr: clamp quantum in change class"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-mdsgo1bjzjvc.toml b/advisories/9.6.1/BRSA-mdsgo1bjzjvc.toml
new file mode 100644
index 00000000..9695303c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-mdsgo1bjzjvc.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-mdsgo1bjzjvc"
+title = "kernel CVE-2026-98022"
+cve = "CVE-2026-98022"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-mitvbwv1quch.toml b/advisories/9.6.1/BRSA-mitvbwv1quch.toml
new file mode 100644
index 00000000..d5cfe33c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-mitvbwv1quch.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-mitvbwv1quch"
+title = "kernel CVE-2026-97454"
+cve = "CVE-2026-97454"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: add boundary checks in acpi_ps_get_next_field()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-mjw6hw3su6ax.toml b/advisories/9.6.1/BRSA-mjw6hw3su6ax.toml
new file mode 100644
index 00000000..48a1bbaf
--- /dev/null
+++ b/advisories/9.6.1/BRSA-mjw6hw3su6ax.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-mjw6hw3su6ax"
+title = "kernel CVE-2026-98014"
+cve = "CVE-2026-98014"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, prevent mc_list repopulation during vport disable"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-mlu6c4cyp39a.toml b/advisories/9.6.1/BRSA-mlu6c4cyp39a.toml
new file mode 100644
index 00000000..3efd0d7d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-mlu6c4cyp39a.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-mlu6c4cyp39a"
+title = "kernel CVE-2026-98015"
+cve = "CVE-2026-98015"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-moavkn0yjekt.toml b/advisories/9.6.1/BRSA-moavkn0yjekt.toml
new file mode 100644
index 00000000..d2b0a0b2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-moavkn0yjekt.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-moavkn0yjekt"
+title = "kernel CVE-2026-98158"
+cve = "CVE-2026-98158"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ppp_async: drop the errored frame instead of resetting its headroom"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-n83m6dbfz6du.toml b/advisories/9.6.1/BRSA-n83m6dbfz6du.toml
new file mode 100644
index 00000000..97b548bc
--- /dev/null
+++ b/advisories/9.6.1/BRSA-n83m6dbfz6du.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-n83m6dbfz6du"
+title = "kernel CVE-2026-98636"
+cve = "CVE-2026-98636"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: squashfs: Add dictionary size range check to prevent shift-out-of-bounds"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nbfxc9kz3bu6.toml b/advisories/9.6.1/BRSA-nbfxc9kz3bu6.toml
new file mode 100644
index 00000000..dc945da1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nbfxc9kz3bu6.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-nbfxc9kz3bu6"
+title = "kernel CVE-2026-97906"
+cve = "CVE-2026-97906"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bootconfig: Fix integer overflow in initrd size check"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ne3bgq7ykdl0.toml b/advisories/9.6.1/BRSA-ne3bgq7ykdl0.toml
new file mode 100644
index 00000000..1db194a7
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ne3bgq7ykdl0.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ne3bgq7ykdl0"
+title = "kernel CVE-2026-93243"
+cve = "CVE-2026-93243"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mm/secretmem: properly account locked pages"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ni5ypqie4osg.toml b/advisories/9.6.1/BRSA-ni5ypqie4osg.toml
new file mode 100644
index 00000000..fc3a2640
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ni5ypqie4osg.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ni5ypqie4osg"
+title = "kernel CVE-2026-98230"
+cve = "CVE-2026-98230"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: use hlist_del_init_rcu for state_cache and state_cache_input"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nkuairhlrcsk.toml b/advisories/9.6.1/BRSA-nkuairhlrcsk.toml
new file mode 100644
index 00000000..02eb073a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nkuairhlrcsk.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-nkuairhlrcsk"
+title = "kernel CVE-2026-98076"
+cve = "CVE-2026-98076"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Fix use-after-free on field name/type of events with multiple probes"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nmx7rxyx6i5d.toml b/advisories/9.6.1/BRSA-nmx7rxyx6i5d.toml
new file mode 100644
index 00000000..7cf7ba0a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nmx7rxyx6i5d.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-nmx7rxyx6i5d"
+title = "kernel CVE-2026-97483"
+cve = "CVE-2026-97483"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: usb: core: hcd: fix possible deadlock in rh control transfers"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nok8oeqgea74.toml b/advisories/9.6.1/BRSA-nok8oeqgea74.toml
new file mode 100644
index 00000000..2402164e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nok8oeqgea74.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-nok8oeqgea74"
+title = "kernel CVE-2026-98343"
+cve = "CVE-2026-98343"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: dmaengine: fix use-after-free in dma_chan_put() and dma_release_channel()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ns9o13wljcdl.toml b/advisories/9.6.1/BRSA-ns9o13wljcdl.toml
new file mode 100644
index 00000000..c69876de
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ns9o13wljcdl.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ns9o13wljcdl"
+title = "kernel CVE-2026-98245"
+cve = "CVE-2026-98245"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in mark_block_group_to_copy()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nsehj1bpnck6.toml b/advisories/9.6.1/BRSA-nsehj1bpnck6.toml
new file mode 100644
index 00000000..88824592
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nsehj1bpnck6.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-nsehj1bpnck6"
+title = "kernel CVE-2026-97451"
+cve = "CVE-2026-97451"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix integer overflow in acpi_ex_opcode_3A_1T_1R() (mid_op)"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-nuolwpjrv0cu.toml b/advisories/9.6.1/BRSA-nuolwpjrv0cu.toml
new file mode 100644
index 00000000..44a726a6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-nuolwpjrv0cu.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-nuolwpjrv0cu"
+title = "kernel CVE-2026-98167"
+cve = "CVE-2026-98167"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix server->total_read for compound encrypted PDUs"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-o7kfra1chleh.toml b/advisories/9.6.1/BRSA-o7kfra1chleh.toml
new file mode 100644
index 00000000..e2b364e6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-o7kfra1chleh.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-o7kfra1chleh"
+title = "kernel CVE-2026-90227"
+cve = "CVE-2026-90227"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-og0mch5mkcsj.toml b/advisories/9.6.1/BRSA-og0mch5mkcsj.toml
new file mode 100644
index 00000000..f246139e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-og0mch5mkcsj.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-og0mch5mkcsj"
+title = "kernel CVE-2026-98300"
+cve = "CVE-2026-98300"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: tcp: Don't call skb_clone_and_charge_r() for close()d listener in tcp_v6_do_rcv()."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ontj5ulvnv1l.toml b/advisories/9.6.1/BRSA-ontj5ulvnv1l.toml
new file mode 100644
index 00000000..b6a1d9b3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ontj5ulvnv1l.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-ontj5ulvnv1l"
+title = "kernel CVE-2026-98537"
+cve = "CVE-2026-98537"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in flush dependency check"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-oobrdy9bpcan.toml b/advisories/9.6.1/BRSA-oobrdy9bpcan.toml
new file mode 100644
index 00000000..84c02458
--- /dev/null
+++ b/advisories/9.6.1/BRSA-oobrdy9bpcan.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-oobrdy9bpcan"
+title = "kernel CVE-2026-98624"
+cve = "CVE-2026-98624"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_queue: hold nfnl mutex in event notifier"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ootgpxidmy5p.toml b/advisories/9.6.1/BRSA-ootgpxidmy5p.toml
new file mode 100644
index 00000000..3002c905
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ootgpxidmy5p.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ootgpxidmy5p"
+title = "kernel CVE-2026-98405"
+cve = "CVE-2026-98405"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix missing iov bounds check in parse_posix_sids()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-oshg35lwj42y.toml b/advisories/9.6.1/BRSA-oshg35lwj42y.toml
new file mode 100644
index 00000000..1fb7a8c4
--- /dev/null
+++ b/advisories/9.6.1/BRSA-oshg35lwj42y.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-oshg35lwj42y"
+title = "kernel CVE-2026-98255"
+cve = "CVE-2026-98255"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-p6pfnlqrbspx.toml b/advisories/9.6.1/BRSA-p6pfnlqrbspx.toml
new file mode 100644
index 00000000..eef0db15
--- /dev/null
+++ b/advisories/9.6.1/BRSA-p6pfnlqrbspx.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-p6pfnlqrbspx"
+title = "kernel CVE-2026-98322"
+cve = "CVE-2026-98322"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_nat: fully initialise new_addr in netmap setup"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-pdjrvadtjwtm.toml b/advisories/9.6.1/BRSA-pdjrvadtjwtm.toml
new file mode 100644
index 00000000..02099891
--- /dev/null
+++ b/advisories/9.6.1/BRSA-pdjrvadtjwtm.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-pdjrvadtjwtm"
+title = "kernel CVE-2026-98379"
+cve = "CVE-2026-98379"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rpfilter: reject routes without inet6_dev"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-pdr1j3qcjqsw.toml b/advisories/9.6.1/BRSA-pdr1j3qcjqsw.toml
new file mode 100644
index 00000000..d2da0263
--- /dev/null
+++ b/advisories/9.6.1/BRSA-pdr1j3qcjqsw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-pdr1j3qcjqsw"
+title = "kernel CVE-2026-98269"
+cve = "CVE-2026-98269"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on failure to update inode for hole punching and reflinking"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-phcixxpnjre4.toml b/advisories/9.6.1/BRSA-phcixxpnjre4.toml
new file mode 100644
index 00000000..359a8d9d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-phcixxpnjre4.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-phcixxpnjre4"
+title = "kernel CVE-2026-98168"
+cve = "CVE-2026-98168"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix reparse buffer bounds in cifs_query_reparse_point()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-picsdhrjeqhj.toml b/advisories/9.6.1/BRSA-picsdhrjeqhj.toml
new file mode 100644
index 00000000..04931bfb
--- /dev/null
+++ b/advisories/9.6.1/BRSA-picsdhrjeqhj.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-picsdhrjeqhj"
+title = "kernel CVE-2026-98173"
+cve = "CVE-2026-98173"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of iface in cifs_try_adding_channels()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-pkhtqcqtaosp.toml b/advisories/9.6.1/BRSA-pkhtqcqtaosp.toml
new file mode 100644
index 00000000..a8a43779
--- /dev/null
+++ b/advisories/9.6.1/BRSA-pkhtqcqtaosp.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-pkhtqcqtaosp"
+title = "kernel CVE-2026-98253"
+cve = "CVE-2026-98253"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma: Serialize join and leave on copy_to_user failure"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-pphjge8zzmth.toml b/advisories/9.6.1/BRSA-pphjge8zzmth.toml
new file mode 100644
index 00000000..6f9ac6f1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-pphjge8zzmth.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-pphjge8zzmth"
+title = "kernel CVE-2026-97959"
+cve = "CVE-2026-97959"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_route: free emptied bucket on filter move"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-pyaqqxnau9a4.toml b/advisories/9.6.1/BRSA-pyaqqxnau9a4.toml
new file mode 100644
index 00000000..4bef8494
--- /dev/null
+++ b/advisories/9.6.1/BRSA-pyaqqxnau9a4.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-pyaqqxnau9a4"
+title = "kernel CVE-2026-98157"
+cve = "CVE-2026-98157"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: EDAC/device_sysfs: Use kstrtouint() for poll_msec to prevent truncation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-q07ww4sfveww.toml b/advisories/9.6.1/BRSA-q07ww4sfveww.toml
new file mode 100644
index 00000000..5b7b1021
--- /dev/null
+++ b/advisories/9.6.1/BRSA-q07ww4sfveww.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-q07ww4sfveww"
+title = "kernel CVE-2026-89500"
+cve = "CVE-2026-89500"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Make cpu_buffer::free_page a buffer_data_read_page"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-q36xey9evq73.toml b/advisories/9.6.1/BRSA-q36xey9evq73.toml
new file mode 100644
index 00000000..d4127624
--- /dev/null
+++ b/advisories/9.6.1/BRSA-q36xey9evq73.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-q36xey9evq73"
+title = "kernel CVE-2026-90146"
+cve = "CVE-2026-90146"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: move offload check into dev_xdp_install()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-q8a82ceoondy.toml b/advisories/9.6.1/BRSA-q8a82ceoondy.toml
new file mode 100644
index 00000000..dd11f565
--- /dev/null
+++ b/advisories/9.6.1/BRSA-q8a82ceoondy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-q8a82ceoondy"
+title = "kernel CVE-2026-97899"
+cve = "CVE-2026-97899"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: drm/i915: Fix memory leak in query_perf_config_list()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ql9jaybfyn4q.toml b/advisories/9.6.1/BRSA-ql9jaybfyn4q.toml
new file mode 100644
index 00000000..d854bfc9
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ql9jaybfyn4q.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ql9jaybfyn4q"
+title = "kernel CVE-2026-97598"
+cve = "CVE-2026-97598"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: bound automatic table ID allocation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-quiyere1yzbn.toml b/advisories/9.6.1/BRSA-quiyere1yzbn.toml
new file mode 100644
index 00000000..2a20a681
--- /dev/null
+++ b/advisories/9.6.1/BRSA-quiyere1yzbn.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-quiyere1yzbn"
+title = "kernel CVE-2026-98432"
+cve = "CVE-2026-98432"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-quptyqqaaw5n.toml b/advisories/9.6.1/BRSA-quptyqqaaw5n.toml
new file mode 100644
index 00000000..8f2a77aa
--- /dev/null
+++ b/advisories/9.6.1/BRSA-quptyqqaaw5n.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-quptyqqaaw5n"
+title = "Bottlerocket Kernel 6.12 Updates"
+severity = "high"
+description = "Kernel version 6.12.113 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-rrqrkbiwlcbm.toml b/advisories/9.6.1/BRSA-rrqrkbiwlcbm.toml
new file mode 100644
index 00000000..2c7fab6d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-rrqrkbiwlcbm.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-rrqrkbiwlcbm"
+title = "kernel CVE-2026-98229"
+cve = "CVE-2026-98229"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: save input state data before secpath resets"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-rseqgctq5zph.toml b/advisories/9.6.1/BRSA-rseqgctq5zph.toml
new file mode 100644
index 00000000..364dc47d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-rseqgctq5zph.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-rseqgctq5zph"
+title = "kernel CVE-2026-98384"
+cve = "CVE-2026-98384"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-rw0v4f1kee9f.toml b/advisories/9.6.1/BRSA-rw0v4f1kee9f.toml
new file mode 100644
index 00000000..e404c618
--- /dev/null
+++ b/advisories/9.6.1/BRSA-rw0v4f1kee9f.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-rw0v4f1kee9f"
+title = "kernel CVE-2026-93787"
+cve = "CVE-2026-93787"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: bound dirent name against end of SMB response in cifs_filldir"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-rw9y8sxueeou.toml b/advisories/9.6.1/BRSA-rw9y8sxueeou.toml
new file mode 100644
index 00000000..14743e23
--- /dev/null
+++ b/advisories/9.6.1/BRSA-rw9y8sxueeou.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-rw9y8sxueeou"
+title = "kernel CVE-2026-98069"
+cve = "CVE-2026-98069"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: acquire the fastpath locks in rds_conn_shutdown()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-s0zm9cxfswhk.toml b/advisories/9.6.1/BRSA-s0zm9cxfswhk.toml
new file mode 100644
index 00000000..bbd25b4b
--- /dev/null
+++ b/advisories/9.6.1/BRSA-s0zm9cxfswhk.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-s0zm9cxfswhk"
+title = "kernel CVE-2026-97940"
+cve = "CVE-2026-97940"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: fix fib6 walker UAF on seq stop"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-s1g1ja84lsal.toml b/advisories/9.6.1/BRSA-s1g1ja84lsal.toml
new file mode 100644
index 00000000..63127b2c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-s1g1ja84lsal.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-s1g1ja84lsal"
+title = "kernel CVE-2026-97445"
+cve = "CVE-2026-97445"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-s4ocvhaqygha.toml b/advisories/9.6.1/BRSA-s4ocvhaqygha.toml
new file mode 100644
index 00000000..cb394844
--- /dev/null
+++ b/advisories/9.6.1/BRSA-s4ocvhaqygha.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-s4ocvhaqygha"
+title = "kernel CVE-2026-97950"
+cve = "CVE-2026-97950"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: configfs: pin the symlink target's dirent instead of chasing ->ci_dentry"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-s64xmt7vwufq.toml b/advisories/9.6.1/BRSA-s64xmt7vwufq.toml
new file mode 100644
index 00000000..6847bf75
--- /dev/null
+++ b/advisories/9.6.1/BRSA-s64xmt7vwufq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-s64xmt7vwufq"
+title = "kernel CVE-2026-98215"
+cve = "CVE-2026-98215"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: selinux: preserve user SID across nested backing files"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-saxdoefgygh3.toml b/advisories/9.6.1/BRSA-saxdoefgygh3.toml
new file mode 100644
index 00000000..94df043f
--- /dev/null
+++ b/advisories/9.6.1/BRSA-saxdoefgygh3.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-saxdoefgygh3"
+title = "kernel CVE-2026-98232"
+cve = "CVE-2026-98232"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: core: Validate MODE SENSE lengths in scsi_cdl_enable()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-sczxzpsnalpb.toml b/advisories/9.6.1/BRSA-sczxzpsnalpb.toml
new file mode 100644
index 00000000..e4f07324
--- /dev/null
+++ b/advisories/9.6.1/BRSA-sczxzpsnalpb.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-sczxzpsnalpb"
+title = "kernel CVE-2026-97420"
+cve = "CVE-2026-97420"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: NUL-terminate replaced sysctl value"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-sdv9mgkxpxzs.toml b/advisories/9.6.1/BRSA-sdv9mgkxpxzs.toml
new file mode 100644
index 00000000..88917191
--- /dev/null
+++ b/advisories/9.6.1/BRSA-sdv9mgkxpxzs.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-sdv9mgkxpxzs"
+title = "kernel CVE-2026-93287"
+cve = "CVE-2026-93287"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: i2c: smbus: reject oversized block transfers in the common path"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-sf6a7cgeiioe.toml b/advisories/9.6.1/BRSA-sf6a7cgeiioe.toml
new file mode 100644
index 00000000..0a29958d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-sf6a7cgeiioe.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-sf6a7cgeiioe"
+title = "kernel CVE-2026-98271"
+cve = "CVE-2026-98271"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskb_carve()"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-sjy1oytfix36.toml b/advisories/9.6.1/BRSA-sjy1oytfix36.toml
new file mode 100644
index 00000000..b12079d2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-sjy1oytfix36.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-sjy1oytfix36"
+title = "kernel CVE-2026-97904"
+cve = "CVE-2026-97904"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: cpufreq: initialize policy rwsem before sysfs publication"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-sk8vkf0g3nl3.toml b/advisories/9.6.1/BRSA-sk8vkf0g3nl3.toml
new file mode 100644
index 00000000..e57c748e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-sk8vkf0g3nl3.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-sk8vkf0g3nl3"
+title = "kernel CVE-2026-98413"
+cve = "CVE-2026-98413"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: selinux: always fill AVC decision in avc_has_perm_noaudit()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-slemqbrvakie.toml b/advisories/9.6.1/BRSA-slemqbrvakie.toml
new file mode 100644
index 00000000..11d47d2c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-slemqbrvakie.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-slemqbrvakie"
+title = "kernel CVE-2026-98388"
+cve = "CVE-2026-98388"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: exec: do_close_on_exec() before taking exec_update_lock"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-slgjskg7b8cj.toml b/advisories/9.6.1/BRSA-slgjskg7b8cj.toml
new file mode 100644
index 00000000..f59203b6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-slgjskg7b8cj.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-slgjskg7b8cj"
+title = "kernel CVE-2026-98383"
+cve = "CVE-2026-98383"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-slwvjozmfsu3.toml b/advisories/9.6.1/BRSA-slwvjozmfsu3.toml
new file mode 100644
index 00000000..91bf7363
--- /dev/null
+++ b/advisories/9.6.1/BRSA-slwvjozmfsu3.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-slwvjozmfsu3"
+title = "kernel CVE-2026-72402"
+cve = "CVE-2026-72402"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mask pseudo pointer values in verifier logs"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-smexhcj8fzfv.toml b/advisories/9.6.1/BRSA-smexhcj8fzfv.toml
new file mode 100644
index 00000000..74e74db6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-smexhcj8fzfv.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-smexhcj8fzfv"
+title = "kernel CVE-2026-97455"
+cve = "CVE-2026-97455"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix use-after-free in acpi_ds_terminate_control_method()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-suht1apid7z3.toml b/advisories/9.6.1/BRSA-suht1apid7z3.toml
new file mode 100644
index 00000000..9a364ca2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-suht1apid7z3.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-suht1apid7z3"
+title = "kernel CVE-2026-89503"
+cve = "CVE-2026-89503"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Fix subbuf resize race with ring_buffer_alloc_read_page() ring_buffer_alloc_read_page() is racy with ring_buffer_subbuf_order_set,"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-svq8kjygxefk.toml b/advisories/9.6.1/BRSA-svq8kjygxefk.toml
new file mode 100644
index 00000000..eb906333
--- /dev/null
+++ b/advisories/9.6.1/BRSA-svq8kjygxefk.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-svq8kjygxefk"
+title = "kernel CVE-2026-97949"
+cve = "CVE-2026-97949"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: configfs: unhash the dentry before dropping the item in rmdir"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-tctx7jr1jzgn.toml b/advisories/9.6.1/BRSA-tctx7jr1jzgn.toml
new file mode 100644
index 00000000..55a2adb8
--- /dev/null
+++ b/advisories/9.6.1/BRSA-tctx7jr1jzgn.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-tctx7jr1jzgn"
+title = "kernel CVE-2026-97453"
+cve = "CVE-2026-97453"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: validate byte_count in acpi_ps_get_next_package_length()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-tgffd67h57sj.toml b/advisories/9.6.1/BRSA-tgffd67h57sj.toml
new file mode 100644
index 00000000..e29604c4
--- /dev/null
+++ b/advisories/9.6.1/BRSA-tgffd67h57sj.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-tgffd67h57sj"
+title = "kernel CVE-2026-98241"
+cve = "CVE-2026-98241"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: xfrm: use full sockets in local error paths"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-tmi5zbkpcp9i.toml b/advisories/9.6.1/BRSA-tmi5zbkpcp9i.toml
new file mode 100644
index 00000000..ec27af1e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-tmi5zbkpcp9i.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-tmi5zbkpcp9i"
+title = "kernel CVE-2026-97596"
+cve = "CVE-2026-97596"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipvs: reject invalid states in connection template sync records"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-toyaxetpitjf.toml b/advisories/9.6.1/BRSA-toyaxetpitjf.toml
new file mode 100644
index 00000000..bc7d3f12
--- /dev/null
+++ b/advisories/9.6.1/BRSA-toyaxetpitjf.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-toyaxetpitjf"
+title = "kernel CVE-2026-98089"
+cve = "CVE-2026-98089"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bonding: alb: fix uninitialized transport header access in alb_determine_nd()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-trfnfqiegoeu.toml b/advisories/9.6.1/BRSA-trfnfqiegoeu.toml
new file mode 100644
index 00000000..39315f42
--- /dev/null
+++ b/advisories/9.6.1/BRSA-trfnfqiegoeu.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-trfnfqiegoeu"
+title = "kernel CVE-2026-97476"
+cve = "CVE-2026-97476"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: rds: filter RDS_INFO_* getsockopt by caller's netns"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-tsxgllqubywj.toml b/advisories/9.6.1/BRSA-tsxgllqubywj.toml
new file mode 100644
index 00000000..08163a42
--- /dev/null
+++ b/advisories/9.6.1/BRSA-tsxgllqubywj.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-tsxgllqubywj"
+title = "kernel CVE-2026-98359"
+cve = "CVE-2026-98359"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/core: Reject unregistering netdevs in ib_get_eth_speed"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-tuqffntrg3pr.toml b/advisories/9.6.1/BRSA-tuqffntrg3pr.toml
new file mode 100644
index 00000000..1d0a07ae
--- /dev/null
+++ b/advisories/9.6.1/BRSA-tuqffntrg3pr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-tuqffntrg3pr"
+title = "kernel CVE-2026-98068"
+cve = "CVE-2026-98068"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: don't let rds_conn_shutdown() consume a concurrent drop"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-u6zqwgyfcgeo.toml b/advisories/9.6.1/BRSA-u6zqwgyfcgeo.toml
new file mode 100644
index 00000000..99cb9ba2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-u6zqwgyfcgeo.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-u6zqwgyfcgeo"
+title = "kernel CVE-2026-98614"
+cve = "CVE-2026-98614"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: sctp: avoid livelock while updating retransmit path"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ucyu2zth79hl.toml b/advisories/9.6.1/BRSA-ucyu2zth79hl.toml
new file mode 100644
index 00000000..4d5d84ba
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ucyu2zth79hl.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ucyu2zth79hl"
+title = "kernel CVE-2026-97958"
+cve = "CVE-2026-97958"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_api: Don't replay RTM_GETCHAIN in tc_ctl_chain()."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-uez0ur918xiy.toml b/advisories/9.6.1/BRSA-uez0ur918xiy.toml
new file mode 100644
index 00000000..c4e2e3ad
--- /dev/null
+++ b/advisories/9.6.1/BRSA-uez0ur918xiy.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-uez0ur918xiy"
+title = "kernel CVE-2026-97567"
+cve = "CVE-2026-97567"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: prevent race between disconnect() and rtx"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ulojlewxz3y6.toml b/advisories/9.6.1/BRSA-ulojlewxz3y6.toml
new file mode 100644
index 00000000..045008fd
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ulojlewxz3y6.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-ulojlewxz3y6"
+title = "kernel CVE-2026-98249"
+cve = "CVE-2026-98249"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: pass HVC_SET_VECTORS args to the resume hvc"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-uplnvimvflty.toml b/advisories/9.6.1/BRSA-uplnvimvflty.toml
new file mode 100644
index 00000000..c81908b2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-uplnvimvflty.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-uplnvimvflty"
+title = "kernel CVE-2026-97430"
+cve = "CVE-2026-97430"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: xhci: Prevent queuing new commands if xhci is inaccessible"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-uzo2frq1pztc.toml b/advisories/9.6.1/BRSA-uzo2frq1pztc.toml
new file mode 100644
index 00000000..29864bc3
--- /dev/null
+++ b/advisories/9.6.1/BRSA-uzo2frq1pztc.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-uzo2frq1pztc"
+title = "kernel CVE-2026-98248"
+cve = "CVE-2026-98248"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: arm64: percpu: Fix LSE operations on {8,16}-bit types"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-v9yrynshv5nl.toml b/advisories/9.6.1/BRSA-v9yrynshv5nl.toml
new file mode 100644
index 00000000..46daea3a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-v9yrynshv5nl.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-v9yrynshv5nl"
+title = "kernel CVE-2026-89766"
+cve = "CVE-2026-89766"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: pidfd: hold exec_update_lock around namespace ioctl"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vc8xof6svrg8.toml b/advisories/9.6.1/BRSA-vc8xof6svrg8.toml
new file mode 100644
index 00000000..82f8b7b5
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vc8xof6svrg8.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vc8xof6svrg8"
+title = "kernel CVE-2026-97456"
+cve = "CVE-2026-97456"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: ACPICA: Fix condition check in acpi_ps_parse_loop()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vcacfs5w7luc.toml b/advisories/9.6.1/BRSA-vcacfs5w7luc.toml
new file mode 100644
index 00000000..b1b40393
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vcacfs5w7luc.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vcacfs5w7luc"
+title = "kernel CVE-2026-89912"
+cve = "CVE-2026-89912"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vf2p8vaq3ykq.toml b/advisories/9.6.1/BRSA-vf2p8vaq3ykq.toml
new file mode 100644
index 00000000..e67b36c1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vf2p8vaq3ykq.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vf2p8vaq3ykq"
+title = "kernel CVE-2026-97612"
+cve = "CVE-2026-97612"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: mpls: clear inner_protocol when the last label is popped"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vjpkqhpn6ema.toml b/advisories/9.6.1/BRSA-vjpkqhpn6ema.toml
new file mode 100644
index 00000000..81ac147d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vjpkqhpn6ema.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vjpkqhpn6ema"
+title = "kernel CVE-2026-90002"
+cve = "CVE-2026-90002"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ftrace: Take trace_array reference before accessing its ftrace_ops"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vnuvzjihoyqm.toml b/advisories/9.6.1/BRSA-vnuvzjihoyqm.toml
new file mode 100644
index 00000000..660caa25
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vnuvzjihoyqm.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-vnuvzjihoyqm"
+title = "kernel CVE-2026-98626"
+cve = "CVE-2026-98626"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Restrict CO-RE poisoning to relocatable instructions"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vrrgdkz7g4hm.toml b/advisories/9.6.1/BRSA-vrrgdkz7g4hm.toml
new file mode 100644
index 00000000..263dc0c9
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vrrgdkz7g4hm.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-vrrgdkz7g4hm"
+title = "kernel CVE-2026-98252"
+cve = "CVE-2026-98252"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpm_get_nlmsg_request()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vwfo0fer2jjb.toml b/advisories/9.6.1/BRSA-vwfo0fer2jjb.toml
new file mode 100644
index 00000000..9d95588e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vwfo0fer2jjb.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vwfo0fer2jjb"
+title = "kernel CVE-2026-97995"
+cve = "CVE-2026-97995"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: virtio_console: do not free control-out buffers on remove"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vzpnawpgegmu.toml b/advisories/9.6.1/BRSA-vzpnawpgegmu.toml
new file mode 100644
index 00000000..d4b3956e
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vzpnawpgegmu.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vzpnawpgegmu"
+title = "kernel CVE-2026-98104"
+cve = "CVE-2026-98104"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: cls_u32: fix duplicate handle when node ID pool is exhausted"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-vzzfgiw4uwfe.toml b/advisories/9.6.1/BRSA-vzzfgiw4uwfe.toml
new file mode 100644
index 00000000..998f67b6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-vzzfgiw4uwfe.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-vzzfgiw4uwfe"
+title = "kernel CVE-2026-98098"
+cve = "CVE-2026-98098"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL deref in tipc_named_node_up() on empty publication list"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-wldqjyxw3cgl.toml b/advisories/9.6.1/BRSA-wldqjyxw3cgl.toml
new file mode 100644
index 00000000..89e49db7
--- /dev/null
+++ b/advisories/9.6.1/BRSA-wldqjyxw3cgl.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-wldqjyxw3cgl"
+title = "kernel CVE-2026-98078"
+cve = "CVE-2026-98078"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipvs: fix reversed sequence option serialization"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-wnbfdgrkvlqo.toml b/advisories/9.6.1/BRSA-wnbfdgrkvlqo.toml
new file mode 100644
index 00000000..973b85a2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-wnbfdgrkvlqo.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-wnbfdgrkvlqo"
+title = "kernel CVE-2026-98342"
+cve = "CVE-2026-98342"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: dmaengine: wait for RCU readers before releasing dma_device"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-wr6ttafqu9o3.toml b/advisories/9.6.1/BRSA-wr6ttafqu9o3.toml
new file mode 100644
index 00000000..b41a5dc2
--- /dev/null
+++ b/advisories/9.6.1/BRSA-wr6ttafqu9o3.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-wr6ttafqu9o3"
+title = "kernel CVE-2026-97524"
+cve = "CVE-2026-97524"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mptcp: avoid unneeded actions on subflow reset"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-wsgr57ovp6iw.toml b/advisories/9.6.1/BRSA-wsgr57ovp6iw.toml
new file mode 100644
index 00000000..9bd2e015
--- /dev/null
+++ b/advisories/9.6.1/BRSA-wsgr57ovp6iw.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-wsgr57ovp6iw"
+title = "kernel CVE-2026-89796"
+cve = "CVE-2026-89796"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: avoid infinite kdamond_merge_regions() internal loop"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-x6xvhd26anlv.toml b/advisories/9.6.1/BRSA-x6xvhd26anlv.toml
new file mode 100644
index 00000000..9ae56020
--- /dev/null
+++ b/advisories/9.6.1/BRSA-x6xvhd26anlv.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-x6xvhd26anlv"
+title = "kernel CVE-2026-98588"
+cve = "CVE-2026-98588"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-x9mdmxb3ypea.toml b/advisories/9.6.1/BRSA-x9mdmxb3ypea.toml
new file mode 100644
index 00000000..bf9b1f59
--- /dev/null
+++ b/advisories/9.6.1/BRSA-x9mdmxb3ypea.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-x9mdmxb3ypea"
+title = "kernel CVE-2026-98485"
+cve = "CVE-2026-98485"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xarwi8q0sr5d.toml b/advisories/9.6.1/BRSA-xarwi8q0sr5d.toml
new file mode 100644
index 00000000..afeb5f68
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xarwi8q0sr5d.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-xarwi8q0sr5d"
+title = "kernel CVE-2026-98299"
+cve = "CVE-2026-98299"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tcp: do not let tcp_rmem be set below 4096"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xisaga9wyi8i.toml b/advisories/9.6.1/BRSA-xisaga9wyi8i.toml
new file mode 100644
index 00000000..6cc615c1
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xisaga9wyi8i.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-xisaga9wyi8i"
+title = "kernel CVE-2026-97416"
+cve = "CVE-2026-97416"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: balance: fix potential bg lookup failure in btrfs_may_alloc_data_chunk()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xndpl9wnyxyb.toml b/advisories/9.6.1/BRSA-xndpl9wnyxyb.toml
new file mode 100644
index 00000000..d9fbe59f
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xndpl9wnyxyb.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-xndpl9wnyxyb"
+title = "kernel CVE-2026-97439"
+cve = "CVE-2026-97439"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: preserve non-DOS attribute bits in system.dos_attrib"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xu7pyb4duzsc.toml b/advisories/9.6.1/BRSA-xu7pyb4duzsc.toml
new file mode 100644
index 00000000..75a8265c
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xu7pyb4duzsc.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-xu7pyb4duzsc"
+title = "kernel CVE-2026-98072"
+cve = "CVE-2026-98072"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/rds: use wq_has_sleeper() in release_in_xmit()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xvlv9zaovf65.toml b/advisories/9.6.1/BRSA-xvlv9zaovf65.toml
new file mode 100644
index 00000000..392b942d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xvlv9zaovf65.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-xvlv9zaovf65"
+title = "kernel CVE-2026-98381"
+cve = "CVE-2026-98381"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: veth: manage XDP program pointers during channel resize"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-xwlvs0hstrtz.toml b/advisories/9.6.1/BRSA-xwlvs0hstrtz.toml
new file mode 100644
index 00000000..6e2b4d35
--- /dev/null
+++ b/advisories/9.6.1/BRSA-xwlvs0hstrtz.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-xwlvs0hstrtz"
+title = "kernel CVE-2026-97564"
+cve = "CVE-2026-97564"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.idmap descriptions"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-y1g67maubuql.toml b/advisories/9.6.1/BRSA-y1g67maubuql.toml
new file mode 100644
index 00000000..03c70d75
--- /dev/null
+++ b/advisories/9.6.1/BRSA-y1g67maubuql.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-y1g67maubuql"
+title = "kernel CVE-2026-98034"
+cve = "CVE-2026-98034"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark NULL kptr stores precise"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-y51ifaaxdwtg.toml b/advisories/9.6.1/BRSA-y51ifaaxdwtg.toml
new file mode 100644
index 00000000..9057191d
--- /dev/null
+++ b/advisories/9.6.1/BRSA-y51ifaaxdwtg.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-y51ifaaxdwtg"
+title = "kernel CVE-2026-97437"
+cve = "CVE-2026-97437"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ntfs3: fix out-of-bounds read in ntfs_dir_emit() and hdr_find_e()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-yacphl7f2mc0.toml b/advisories/9.6.1/BRSA-yacphl7f2mc0.toml
new file mode 100644
index 00000000..d2111662
--- /dev/null
+++ b/advisories/9.6.1/BRSA-yacphl7f2mc0.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-yacphl7f2mc0"
+title = "kernel CVE-2026-68289"
+cve = "CVE-2026-68289"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-yftmbe7kgjpo.toml b/advisories/9.6.1/BRSA-yftmbe7kgjpo.toml
new file mode 100644
index 00000000..d21a1456
--- /dev/null
+++ b/advisories/9.6.1/BRSA-yftmbe7kgjpo.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-yftmbe7kgjpo"
+title = "kernel CVE-2026-98011"
+cve = "CVE-2026-98011"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: hhf: clamp quantum in change and init paths"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-yqaindjkanr5.toml b/advisories/9.6.1/BRSA-yqaindjkanr5.toml
new file mode 100644
index 00000000..f70de608
--- /dev/null
+++ b/advisories/9.6.1/BRSA-yqaindjkanr5.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-yqaindjkanr5"
+title = "kernel CVE-2026-98364"
+cve = "CVE-2026-98364"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: hold net_device reference under RCU in bundle creation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ysqn090end6r.toml b/advisories/9.6.1/BRSA-ysqn090end6r.toml
new file mode 100644
index 00000000..241cd7c8
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ysqn090end6r.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-ysqn090end6r"
+title = "kernel CVE-2026-97472"
+cve = "CVE-2026-97472"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-yu3rg6nsxkgr.toml b/advisories/9.6.1/BRSA-yu3rg6nsxkgr.toml
new file mode 100644
index 00000000..bf5ad931
--- /dev/null
+++ b/advisories/9.6.1/BRSA-yu3rg6nsxkgr.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-yu3rg6nsxkgr"
+title = "kernel CVE-2026-97484"
+cve = "CVE-2026-97484"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: usbip: vhci_hcd: fix NULL deref in status_show_vhci"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ywihoct68xw3.toml b/advisories/9.6.1/BRSA-ywihoct68xw3.toml
new file mode 100644
index 00000000..83447b3a
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ywihoct68xw3.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-ywihoct68xw3"
+title = "kernel CVE-2026-98621"
+cve = "CVE-2026-98621"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: gue: reject invalid REMCSUM offsets"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-ywul70k76gel.toml b/advisories/9.6.1/BRSA-ywul70k76gel.toml
new file mode 100644
index 00000000..c5bc8439
--- /dev/null
+++ b/advisories/9.6.1/BRSA-ywul70k76gel.toml
@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-ywul70k76gel"
+title = "kernel CVE-2026-98344"
+cve = "CVE-2026-98344"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: dmaengine: Fix device kref underflow in dma_chan_put()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-z2vdyyq0tte9.toml b/advisories/9.6.1/BRSA-z2vdyyq0tte9.toml
new file mode 100644
index 00000000..d17c2a87
--- /dev/null
+++ b/advisories/9.6.1/BRSA-z2vdyyq0tte9.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-z2vdyyq0tte9"
+title = "Bottlerocket Kernel 6.1 Updates"
+severity = "high"
+description = "Kernel version 6.1.189 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"
diff --git a/advisories/9.6.1/BRSA-zjdir6glgvax.toml b/advisories/9.6.1/BRSA-zjdir6glgvax.toml
new file mode 100644
index 00000000..39848ba6
--- /dev/null
+++ b/advisories/9.6.1/BRSA-zjdir6glgvax.toml
@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-zjdir6glgvax"
+title = "kernel CVE-2026-93817"
+cve = "CVE-2026-93817"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: perf: Fix addr_filter_ranges lifetime"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"