12:02:08 <iwamatsu> #startmeeting CIP IRC weekly meeting
12:02:08 <collab-meetbot> Meeting started Thu Oct 22 12:02:08 2026 UTC and is due to finish in 60 minutes.  The chair is iwamatsu. Information about MeetBot at http://wiki.debian.org/MeetBot.
12:02:08 <collab-meetbot> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
12:02:08 <collab-meetbot> The meeting name has been set to 'cip_irc_weekly_meeting'
12:02:23 <iwamatsu> #topic AI review
12:02:45 <iwamatsu> No AI
12:02:54 <iwamatsu> anything else ?
12:02:58 <iwamatsu> 5
12:03:03 <iwamatsu> 4
12:03:05 <iwamatsu> 3
12:03:07 <iwamatsu> 2
12:03:08 <iwamatsu> 1
12:03:16 <iwamatsu> #topic Kernel maintenance updates
12:03:33 <pave1> I am reviewing 6.12.113 / 114.
12:03:34 <masami> This week reported 440 new CVEs and 1149 updated CVEs.
12:03:58 <iwamatsu> I was reviewing 6.12.109.
12:04:25 <iwamatsu> There are a lot of CVEs again this week...
12:04:58 <pave1> iwamatsu: Are there any "interesting" ones?
12:05:07 <pave1> From security news, apparently PHP has something major,
12:05:20 <pave1> and some certificate authority had secret key of "4".
12:05:26 <pave1> But I did not hear anything major about kernel.
12:06:16 <masami> CVE-2026-99999(PwnEscape) is new named vulnerability
12:06:54 <iwamatsu> CVE-2026-99999
12:06:55 <iwamatsu> yes
12:07:34 <pave1> I'll take a look. At least they have easy-to-remember nubmer :-)
12:07:57 <iwamatsu> There’s been some talk lately about issues involving PHP and certificates.
12:08:23 <iwamatsu> anything else?
12:08:26 <iwamatsu> 5
12:08:27 <iwamatsu> 4
12:08:29 <iwamatsu> 3
12:08:31 <iwamatsu> 2
12:08:32 <iwamatsu> 1
12:08:41 <iwamatsu> #topic Kernel release status
12:09:01 <iwamatsu> linux-4.19.y-cip is late.
12:09:24 <iwamatsu> maybe, uli is working this.
12:09:49 <iwamatsu> anything else?
12:09:50 <iwamatsu> 5
12:09:52 <iwamatsu> 4
12:09:54 <iwamatsu> 3
12:09:55 <iwamatsu> 2
12:09:57 <iwamatsu> 1
12:10:04 <iwamatsu> #topic Kernel testing
12:10:43 <iwamatsu> ping patersonc
12:10:44 <uli> hi, sorry for being late. 4.19 is still in progress.
12:11:01 <iwamatsu> uli: noted, thanks!
12:11:12 <patersonc> Hello
12:11:18 <iwamatsu> hi patersonc
12:11:23 <patersonc> I created an MR to add configs for 7.3
12:11:39 <patersonc> Once merged the stable-rc  pipelines should work
12:11:50 <pave1> Thank you!
12:11:53 <iwamatsu> Oh, sorry. I forgot it. I will check after this meeting.
12:12:03 <patersonc> Thanks
12:12:22 <iwamatsu> anything else?
12:12:37 <patersonc> Nope
12:12:46 <pave1> The 4 second -cip-rt delay detected by kernelci is on my radar,
12:13:01 <pave1> but I am assuming it is some kind of test/config problem. I may
12:13:05 <pave1> have some questions later.
12:13:15 <patersonc> Thanks
12:15:27 <iwamatsu> Regarding the KernelCI test result notification, I don't mind receiving the emails.
12:15:54 <iwamatsu> However, I align with the views of Pavel and Uli. therefore, please disable them.
12:15:55 <pave1> Lets not do this. cip-devel is supposed to be useful for development, automated spam
12:16:18 <pave1> will polute the archives etc.
12:16:20 <pave1> Aha :-)
12:17:38 <iwamatsu> :-)
12:17:46 <iwamatsu> 5
12:17:49 <iwamatsu> 4
12:17:52 <iwamatsu> 3
12:17:53 <iwamatsu> 2
12:17:54 <iwamatsu> 1
12:18:09 <iwamatsu> #topic AOB
12:18:36 <iwamatsu> patch review workflow/coordination
12:18:51 <pave1> CVE-2025-99999: if someone has information to share (such as
12:19:06 <pave1> sha of the fix, webpages, exploit, versions where fixes hit -stable)
12:19:23 <pave1> , please share them with cip-dev. Otherwise I'll try to compile something
12:19:25 <pave1> later.
12:19:58 <masami> mve-2026-99999. Mainline was fixed by 6785011f8b16abf40b1e9d8b2e332232b3e68822
12:20:09 <iwamatsu> patch review: Do you have any information regarding this?
12:20:25 <pave1> iwamatsu: I guess we do that over email?
12:20:35 <masami> all stable kernel were fixed.
12:21:28 <masami> you can read details from https://pwn.ai/blog/pwnescape
12:21:51 <iwamatsu> If we do not currently have any opinions or information, we will discuss the matter via the mailing list.
12:22:07 <pave1> masami: Thanks, I'm taking notes.
12:22:36 <iwamatsu> If there’s nothing else, let’s discuss it on the mailing list.
12:22:39 <pave1> masami: In your opinion, do we need to roll some
12:22:44 <pave1> early releases?
12:23:28 <iwamatsu> I think a special release is necessary.
12:23:57 <masami> This vulnerability is vm/container escape, so embed linux may not use these functionalities.
12:24:50 <iwamatsu> We need to verify that KVM is enabled.
12:25:21 <masami> yes
12:26:28 <pave1> Some notes said local user can also exploit it. I guess we decide on the mailing list?
12:27:33 <iwamatsu> KVM is set to 'm' on arm64 and x86 with some versions
12:28:04 <iwamatsu> pave1: OK. Lets talk on the mailing list.
12:28:28 <iwamatsu> anything else?
12:28:29 <iwamatsu> 5
12:28:30 <iwamatsu> 4
12:28:31 <iwamatsu> 3
12:28:34 <iwamatsu> 2
12:28:36 <iwamatsu> 1
12:28:51 <iwamatsu> #endmeeting