12:02:08 <iwamatsu> #startmeeting CIP IRC weekly meeting 12:02:08 <collab-meetbot> Meeting started Thu Oct 22 12:02:08 2026 UTC and is due to finish in 60 minutes. The chair is iwamatsu. Information about MeetBot at http://wiki.debian.org/MeetBot. 12:02:08 <collab-meetbot> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 12:02:08 <collab-meetbot> The meeting name has been set to 'cip_irc_weekly_meeting' 12:02:23 <iwamatsu> #topic AI review 12:02:45 <iwamatsu> No AI 12:02:54 <iwamatsu> anything else ? 12:02:58 <iwamatsu> 5 12:03:03 <iwamatsu> 4 12:03:05 <iwamatsu> 3 12:03:07 <iwamatsu> 2 12:03:08 <iwamatsu> 1 12:03:16 <iwamatsu> #topic Kernel maintenance updates 12:03:33 <pave1> I am reviewing 6.12.113 / 114. 12:03:34 <masami> This week reported 440 new CVEs and 1149 updated CVEs. 12:03:58 <iwamatsu> I was reviewing 6.12.109. 12:04:25 <iwamatsu> There are a lot of CVEs again this week... 12:04:58 <pave1> iwamatsu: Are there any "interesting" ones? 12:05:07 <pave1> From security news, apparently PHP has something major, 12:05:20 <pave1> and some certificate authority had secret key of "4". 12:05:26 <pave1> But I did not hear anything major about kernel. 12:06:16 <masami> CVE-2026-99999(PwnEscape) is new named vulnerability 12:06:54 <iwamatsu> CVE-2026-99999 12:06:55 <iwamatsu> yes 12:07:34 <pave1> I'll take a look. At least they have easy-to-remember nubmer :-) 12:07:57 <iwamatsu> There’s been some talk lately about issues involving PHP and certificates. 12:08:23 <iwamatsu> anything else? 12:08:26 <iwamatsu> 5 12:08:27 <iwamatsu> 4 12:08:29 <iwamatsu> 3 12:08:31 <iwamatsu> 2 12:08:32 <iwamatsu> 1 12:08:41 <iwamatsu> #topic Kernel release status 12:09:01 <iwamatsu> linux-4.19.y-cip is late. 12:09:24 <iwamatsu> maybe, uli is working this. 12:09:49 <iwamatsu> anything else? 12:09:50 <iwamatsu> 5 12:09:52 <iwamatsu> 4 12:09:54 <iwamatsu> 3 12:09:55 <iwamatsu> 2 12:09:57 <iwamatsu> 1 12:10:04 <iwamatsu> #topic Kernel testing 12:10:43 <iwamatsu> ping patersonc 12:10:44 <uli> hi, sorry for being late. 4.19 is still in progress. 12:11:01 <iwamatsu> uli: noted, thanks! 12:11:12 <patersonc> Hello 12:11:18 <iwamatsu> hi patersonc 12:11:23 <patersonc> I created an MR to add configs for 7.3 12:11:39 <patersonc> Once merged the stable-rc pipelines should work 12:11:50 <pave1> Thank you! 12:11:53 <iwamatsu> Oh, sorry. I forgot it. I will check after this meeting. 12:12:03 <patersonc> Thanks 12:12:22 <iwamatsu> anything else? 12:12:37 <patersonc> Nope 12:12:46 <pave1> The 4 second -cip-rt delay detected by kernelci is on my radar, 12:13:01 <pave1> but I am assuming it is some kind of test/config problem. I may 12:13:05 <pave1> have some questions later. 12:13:15 <patersonc> Thanks 12:15:27 <iwamatsu> Regarding the KernelCI test result notification, I don't mind receiving the emails. 12:15:54 <iwamatsu> However, I align with the views of Pavel and Uli. therefore, please disable them. 12:15:55 <pave1> Lets not do this. cip-devel is supposed to be useful for development, automated spam 12:16:18 <pave1> will polute the archives etc. 12:16:20 <pave1> Aha :-) 12:17:38 <iwamatsu> :-) 12:17:46 <iwamatsu> 5 12:17:49 <iwamatsu> 4 12:17:52 <iwamatsu> 3 12:17:53 <iwamatsu> 2 12:17:54 <iwamatsu> 1 12:18:09 <iwamatsu> #topic AOB 12:18:36 <iwamatsu> patch review workflow/coordination 12:18:51 <pave1> CVE-2025-99999: if someone has information to share (such as 12:19:06 <pave1> sha of the fix, webpages, exploit, versions where fixes hit -stable) 12:19:23 <pave1> , please share them with cip-dev. Otherwise I'll try to compile something 12:19:25 <pave1> later. 12:19:58 <masami> mve-2026-99999. Mainline was fixed by 6785011f8b16abf40b1e9d8b2e332232b3e68822 12:20:09 <iwamatsu> patch review: Do you have any information regarding this? 12:20:25 <pave1> iwamatsu: I guess we do that over email? 12:20:35 <masami> all stable kernel were fixed. 12:21:28 <masami> you can read details from https://pwn.ai/blog/pwnescape 12:21:51 <iwamatsu> If we do not currently have any opinions or information, we will discuss the matter via the mailing list. 12:22:07 <pave1> masami: Thanks, I'm taking notes. 12:22:36 <iwamatsu> If there’s nothing else, let’s discuss it on the mailing list. 12:22:39 <pave1> masami: In your opinion, do we need to roll some 12:22:44 <pave1> early releases? 12:23:28 <iwamatsu> I think a special release is necessary. 12:23:57 <masami> This vulnerability is vm/container escape, so embed linux may not use these functionalities. 12:24:50 <iwamatsu> We need to verify that KVM is enabled. 12:25:21 <masami> yes 12:26:28 <pave1> Some notes said local user can also exploit it. I guess we decide on the mailing list? 12:27:33 <iwamatsu> KVM is set to 'm' on arm64 and x86 with some versions 12:28:04 <iwamatsu> pave1: OK. Lets talk on the mailing list. 12:28:28 <iwamatsu> anything else? 12:28:29 <iwamatsu> 5 12:28:30 <iwamatsu> 4 12:28:31 <iwamatsu> 3 12:28:34 <iwamatsu> 2 12:28:36 <iwamatsu> 1 12:28:51 <iwamatsu> #endmeeting