Can kernel-specific information from https://www.cve.org/
be applied to the kernels provided by Manjaro?
Can I, for example, conclude from the information on CVE-2026-23111 `https://www.cve.org/CVERecord/?id=CVE-2026-23111
...
unaffected from 6.12.70 through 6.12.*
unaffected from 6.18.10 through 6.18.*
unaffected from 6.19 `
that Manjaro kernels LTS 6.12.91-1, LTS 6.18.33-1 and Manjaro kernel 7.* are not affected?
If the fix has been incorporated into upstream sources, they will included when Manjaro releases the next kernel update.
You can always check what kernel your system uses
uname -r
Then draw your conclusion by comparing the versions
I’m not sure if I understand you correctly.
My understanding is that “upstream sources” refers to the sources provided by kernel.org to the distributions. The kernel version/release numbers remain unchanged when the distribution—i.e. Manjaro—delivers them.
To stick with my example:
In https://lore.kernel.org/linux-cve-announce/2026021300-CVE-2026-23111-9762@gregkh/ it states: "
The official CVE entry at
https://cve.org/CVERecord/?id=CVE-2026-23111
will be updated if fixes are backported, please check that for the most
up to date information about this issue."
Among other ranges, the range unaffected from 6.18.10 through 6.18.* is listed there. My computer shows “6.18.33-1-MANJARO” when running uname -r. Do I understand correctly that the kernel I am using falls within this range and is therefore “unaffected”?
If your answer is “yes,” I am relieved.
As I said - Manjaro kernels are built from upstream sources - if they implement the fixes then the answer is yes otherwise the answer is no.
Certain hardware related patches not available upstream are applied.
Please see core · GitLab for your specific kernel release
Although the term “upstream sources” was not fully clarified, I consider my question sufficiently answered.
let me clarify - upstream sources equals the source as found on kernel.org and already deduced in previous comment.
This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.