advisories: add BRSAs for kernel-kit v9.6.1

advisories/9.6.1/BRSA-03hjxd4wbahg.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-03hjxd4wbahg"
+title = "kernel CVE-2026-98235"
+cve = "CVE-2026-98235"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/sched: act_api: release tail references on DELACTION failure"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-0dkshiat0eu0.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-0dkshiat0eu0"
+title = "kernel CVE-2026-97609"
+cve = "CVE-2026-97609"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: cttimeout: prevent UAF during module unload"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-0dnwnzafhpnd.toml

@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-0dnwnzafhpnd"
+title = "kernel CVE-2026-98644"
+cve = "CVE-2026-98644"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-0viznios9osy.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-0viznios9osy"
+title = "kernel CVE-2026-98320"
+cve = "CVE-2026-98320"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: hold reference on ct until flow is released"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-0xwq64nc1i1t.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-0xwq64nc1i1t"
+title = "kernel CVE-2026-93824"
+cve = "CVE-2026-93824"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-1betjv8xei73.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1betjv8xei73"
+title = "kernel CVE-2026-97441"
+cve = "CVE-2026-97441"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: ata: ahci: fail probe if BAR too small for claimed ports"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-1nvprkuxft0w.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-1nvprkuxft0w"
+title = "kernel CVE-2026-98233"
+cve = "CVE-2026-98233"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/packet: clear RX owner on VNET header error"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-1uzl2vuc6ihx.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-1uzl2vuc6ihx"
+title = "kernel CVE-2026-98046"
+cve = "CVE-2026-98046"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: bpf: Mark bpf_btf_find_by_name_kind() as sleepable"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-2dhfsn6dcuko.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2dhfsn6dcuko"
+title = "kernel CVE-2026-93813"
+cve = "CVE-2026-93813"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: tree-checker: validate INODE_REF's namelen"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-2eqotpnhtqdd.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2eqotpnhtqdd"
+title = "kernel CVE-2026-90048"
+cve = "CVE-2026-90048"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-2grulqduv963.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2grulqduv963"
+title = "kernel CVE-2026-98016"
+cve = "CVE-2026-98016"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free race in sample_restore_put()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-2xki3v8kv8af.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-2xki3v8kv8af"
+title = "kernel CVE-2026-98031"
+cve = "CVE-2026-98031"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: nexthop: Initialize extack in remove_nh_grp_entry()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-34yae8qa5qxn.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-34yae8qa5qxn"
+title = "kernel CVE-2026-93288"
+cve = "CVE-2026-93288"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_log: wait for rcu grace period before freeing pernet state"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-3d8lxujqkrih.toml

@@ -0,0 +1,22 @@
+[advisory]
+id = "BRSA-3d8lxujqkrih"
+title = "kernel CVE-2026-98373"
+cve = "CVE-2026-98373"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: preserve mremap address delta when skipping page tables"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-3es2gfpny7tz.toml

@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-3es2gfpny7tz"
+title = "kernel CVE-2026-98491"
+cve = "CVE-2026-98491"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-3nvzdyi7yikb.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-3nvzdyi7yikb"
+title = "kernel CVE-2026-98090"
+cve = "CVE-2026-98090"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: btrfs: restore active device pointers after failed sprout"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-46q2v4qlqaqc.toml

@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-46q2v4qlqaqc"
+title = "kernel CVE-2026-98479"
+cve = "CVE-2026-98479"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi_tcp: Check the data direction of a Data-In PDU"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.113"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.56"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-4amjfeuxtn0m.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-4amjfeuxtn0m"
+title = "kernel CVE-2026-97481"
+cve = "CVE-2026-97481"
+severity = "moderate"
+description = "In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["aarch64", "x86_64"]
+version = "9.6.1"

advisories/9.6.1/BRSA-4eulavlsu2pl.toml

@@ -0,0 +1,17 @@
+[advisory]
+id = "BRSA-4eulavlsu2pl"
+title = "kernel CVE-2026-97417"
+cve = "CVE-2026-97417"
+severity = "low"
+description = "In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack()"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.189"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-10-26T23:42:18Z
+arches = ["x86_64", "aarch64"]
+version = "9.6.1"