7.3.1: stable
Version:7.3.1 (stable)
Released:2026-10-30
Source:linux-7.3.1.tar.xz
PGP Signature:linux-7.3.1.tar.sign
Patch:full
ChangeLog:ChangeLog-7.3.1
CVE-2026-43598
CVE-2026-43598
Fixup for CVE-2026-19553
Backport fix for CVE-2026-112900.
Backport fix for CVE-2026-112398
Backport fix for CVE-2026-112393.
Backport fix for CVE-2026-112900.
Backport fix for CVE-2026-112398
Backport fix for CVE-2026-112393.
Backport fix for CVE-2026-112892.
Security
GHSA-h664-qxhh-gx3w CVE-2026-109545 GHSA-2q8j-chww-3pcq CVE-ID requested GHSA-5mqr-9575-x89w CVE-ID requested GHSA-rjg6-phr3-3rxw CVE-ID requested GHSA-g73j-fj87-wmqq CVE-ID requested GHSA-v965-wr7f-xw6w CVE-ID requested GHSA-5p93-qmch-h65j CVE-ID requested GHSA-x33j-3x4g-f32j CVE-ID requested GHSA-xvmm-58jj-c6gf CVE-ID requestedFixes
MAINTAINERS: add Moritz TCTI: validate the response header length TCTI: add missing size checks for response buffers FAPI: fix quoting of empty event logs FAPI: check the number of branches for policy lists FAPI: validate key size before extracting the public key FAPI: add a missing bounds check on PCR_Select deserialization FAPI: check buffer size in RSASSA and RSAPSS signature conversion FAPI: reject eventlog entries with an empty template value FAPI: bound eventlog entry name reads by the template size FAPI: verify the eventlog digest window fits the template buffer FAPI: fix file leak on read error FAPI: fix tests failing with physical TPMs FAPI: fix buffer overflow in ifapi_set_auth_primary ESYS: fix compilation without SM4 support ESYS: fix OpenSSL 3.X engine context handling for internal crypto SYS: harden the response size checks SYS: validate the length of no-session responses SYS: validate the length of encrypted parameter responses SYS: validate the length of response authorization parameters SYS: use response size instead of buffer size during unmarshalling MU: bound subtype unmarshalling to the TPM2B size field IO: retry poll calls on EINTR and EAGAIN