unredacted/linux-hardened-unredacted
2
1
Fork 0
Code Issues Pull requests 1 Projects Releases 13 Packages Wiki Activity Actions 1

Upstream linux-hardened tag v7.1.5-hardened1 available #26

New issue
Closed
opened 2026-07-25 02:00:48 +00:00 by unredacted_bot · 1 comment
unredacted_bot commented 2026-07-25 02:00:48 +00:00
Owner
Copy link

Upstream tag: v7.1.5-hardened1
Local latest: v7.1.4-hardened1

CVEs reported fixed in 7.1.5 since 7.1.4 (source: kernel.org CVE project).

Severity = Red Hat's rating (best-effort; the kernel CNA publishes no CVSS), not the project's own. List as of 2026-07-25T02:00Z — the feed can lag, so re-check vulns.git before building.

CVE-2026-52972 — Important (CVSS 7.0) — crypto: af_alg - Cap AEAD AD length to 0x80000000 
In order to prevent arithmetic overflows when checking the TX
buffer size, cap the associated data length to 0x80000000.

Action: review the upstream signature, then push a matching
local tag (git tag v7.1.5-hardened1 && git push origin v7.1.5-hardened1)
which triggers build-kernel.yml.

See docs/users/cve-policy.md for the SLA.

Upstream tag: v7.1.5-hardened1 Local latest: v7.1.4-hardened1 **CVEs reported fixed in `7.1.5` since `7.1.4`** (source: kernel.org CVE project). _Severity = Red Hat's rating (best-effort; the kernel CNA publishes no CVSS), not the project's own. List as of 2026-07-25T02:00Z — the feed can lag, so re-check vulns.git before building._ <details><summary><strong>CVE-2026-52972</strong> — Important (CVSS 7.0) — crypto: af_alg - Cap AEAD AD length to 0x80000000</summary> ```text In order to prevent arithmetic overflows when checking the TX buffer size, cap the associated data length to 0x80000000. ``` </details> Action: review the upstream signature, then push a matching local tag (`git tag v7.1.5-hardened1 && git push origin v7.1.5-hardened1`) which triggers build-kernel.yml. See docs/users/cve-policy.md for the SLA.
zach commented 2026-07-26 02:30:40 +00:00
Owner
Copy link

Released

Released
zach closed this issue 2026-07-26 02:30:40 +00:00
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
automated/seed-bump-284a871e22fb
feat/cve-list-in-issue
docs/accuracy-pass
feat/auto-seed-bump
fix/cve-watch-empty-local
fix/cve-watch-label-ids
fix/deferred-ci-hardening
fix/bughunt-cve-watch-repro-config-publish
v7.1.5-hardened1
v7.1.4-hardened1
v7.1.3-hardened1
v7.1.2-hardened1
v7.1.1-hardened1
v7.0.12-hardened1
v7.0.11-hardened2
v7.0.11-hardened1
v7.0.10-hardened1.5
v7.0.10-hardened1.4
v7.0.10-hardened1.3
v7.0.10-hardened1.2
v7.0.10-hardened1
v7.0.9-hardened1
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
unredacted/linux-hardened-unredacted#26
No description provided.