From 02b5bf7c60bc48112ed12de1ee19645a08ffc602 Mon Sep 17 00:00:00 2001
From: Melody Lyu <tianlyu@amazon.com>
Date: Tue, 22 Sep 2026 03:57:38 +0000
Subject: [PATCH] advisories: add BRSAs for Kernel Kit v9.1.3

Signed-off-by: Melody Lyu <tianlyu@amazon.com>
---
 advisories/9.1.3/BRSA-03934f33ebd9.toml | 27 +++++++++++++++++++++++++
 advisories/9.1.3/BRSA-0768aa5a1ea3.toml | 16 +++++++++++++++
 advisories/9.1.3/BRSA-3d32972d82ca.toml | 16 +++++++++++++++
 advisories/9.1.3/BRSA-9bf7f24eda64.toml | 27 +++++++++++++++++++++++++
 advisories/9.1.3/BRSA-a24c9ef99463.toml | 16 +++++++++++++++
 5 files changed, 102 insertions(+)
 create mode 100644 advisories/9.1.3/BRSA-03934f33ebd9.toml
 create mode 100644 advisories/9.1.3/BRSA-0768aa5a1ea3.toml
 create mode 100644 advisories/9.1.3/BRSA-3d32972d82ca.toml
 create mode 100644 advisories/9.1.3/BRSA-9bf7f24eda64.toml
 create mode 100644 advisories/9.1.3/BRSA-a24c9ef99463.toml

diff --git a/advisories/9.1.3/BRSA-03934f33ebd9.toml b/advisories/9.1.3/BRSA-03934f33ebd9.toml
new file mode 100644
index 00000000..b64d4d62
--- /dev/null
+++ b/advisories/9.1.3/BRSA-03934f33ebd9.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-03934f33ebd9"
+title = "kernel CVE-2026-80844"
+cve = "CVE-2026-80844"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.186"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.103"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.48"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-09-18T21:56:08Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.3"
diff --git a/advisories/9.1.3/BRSA-0768aa5a1ea3.toml b/advisories/9.1.3/BRSA-0768aa5a1ea3.toml
new file mode 100644
index 00000000..fce17572
--- /dev/null
+++ b/advisories/9.1.3/BRSA-0768aa5a1ea3.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-0768aa5a1ea3"
+title = "Bottlerocket Kernel 6.1 Updates"
+severity = "high"
+description = "Kernel version 6.1.186 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.186"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-09-18T21:56:08Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.3"
diff --git a/advisories/9.1.3/BRSA-3d32972d82ca.toml b/advisories/9.1.3/BRSA-3d32972d82ca.toml
new file mode 100644
index 00000000..dfc4d2e2
--- /dev/null
+++ b/advisories/9.1.3/BRSA-3d32972d82ca.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-3d32972d82ca"
+title = "Bottlerocket Kernel 6.12 Updates"
+severity = "high"
+description = "Kernel version 6.12.103 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.103"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-09-18T21:56:08Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.3"
diff --git a/advisories/9.1.3/BRSA-9bf7f24eda64.toml b/advisories/9.1.3/BRSA-9bf7f24eda64.toml
new file mode 100644
index 00000000..5f63da35
--- /dev/null
+++ b/advisories/9.1.3/BRSA-9bf7f24eda64.toml
@@ -0,0 +1,27 @@
+[advisory]
+id = "BRSA-9bf7f24eda64"
+title = "kernel CVE-2026-81000"
+cve = "CVE-2026-81000"
+severity = "high"
+description = "In the Linux kernel, the following vulnerability has been resolved: net: tun: bound receive headroom"
+
+[[advisory.products]]
+package-name = "kernel-6.1"
+patched-version = "6.1.186"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.12"
+patched-version = "6.12.103"
+patched-epoch = "0"
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.48"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-09-18T21:56:08Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.3"
diff --git a/advisories/9.1.3/BRSA-a24c9ef99463.toml b/advisories/9.1.3/BRSA-a24c9ef99463.toml
new file mode 100644
index 00000000..29f67539
--- /dev/null
+++ b/advisories/9.1.3/BRSA-a24c9ef99463.toml
@@ -0,0 +1,16 @@
+[advisory]
+id = "BRSA-a24c9ef99463"
+title = "Bottlerocket Kernel 6.18 Updates"
+severity = "high"
+description = "Kernel version 6.18.48 is now available with important fixes. All users must upgrade. Advisory information for kernel is often published after new kernels become available. Bottlerocket recommends that you consume the latest kernel release for your LTS version."
+
+[[advisory.products]]
+package-name = "kernel-6.18"
+patched-version = "6.18.48"
+patched-epoch = "0"
+
+[updateinfo]
+author = "tianlyu"
+issue-date = 2026-09-18T21:56:08Z
+arches = ["x86_64", "aarch64"]
+version = "9.1.3"