[QSA-1016261]
Linux kernel vulnerabilities

Qlustar Security Advisory 1016261

October 16th, 2026

Summary:

The system could crash or be made to run programs as an administrator.

Package(s)       : linux-image-ql-generic,
                   qlustar-module-core-jammy-amd64-13.4,
                   qlustar-module-core-noble-amd64-14.1
Qlustar releases : 13, 14
Affected versions: All versions prior to this update
Vulnerability    : privilege escalation/denial of service
Problem type     : local
Qlustar-specific : no
CVE Id(s)        : See upstream release notes

A number of vulnerabilities and bugs have been discovered in the 6.12.x Linux kernel series since the last Qlustar 14 release based on 6.12.112. They may lead to a denial of service or privilege escalation.

Note, that the most recent qlustar kernel 6.12.113-ql-generic-14-22 also contains a fix for the recently discovered PwnEscape vulnerability (Guest-to-Host KVM Escape, CVE-2026-99999), as well as the recently disclosed LPEs CVE-2026-98260.

Please check the following web pages that contain details of the fixes in each release after 6.12.112 up to the current Qlustar kernel 6.12.113:

Linux kernel 6.12.113

A number of vulnerabilities and bugs have been discovered in the 5.15.x Linux kernel series since the last Qlustar 13.0 release based on 5.15.222. They may lead to a denial of service or privilege escalation.

Note, that the most recent qlustar kernel 5.15.223-ql-generic-13.0-38 also contains a fix for the recently discovered PwnEscape vulnerability (Guest-to-Host KVM Escape, CVE-2026-99999).

Please check the following web pages that contain details of the fixes in each release after 5.15.222 up to the current Qlustar kernel 5.15.223:

Linux kernel 5.15.223

Update instructions:

The problem can be corrected by updating your system to the following or more recent package versions:

For Qlustar 14

linux-image-ql-generic                     6.12.113-ql-generic-14-22
qlustar-module-core-noble-amd64-14.1       14.1.15-b589f1661

For Qlustar 13

linux-image-ql-generic                     5.15.223-ql-generic-13.0-38
qlustar-module-core-jammy-amd64-13.4       13.4.14-b588f1660

Special Update instructions:

In addition to the steps described in the general Qlustar Update Instructions these updates require the following: