diff --git a/debian/changelog b/debian/changelog
index d95f78bfb..38fa6c477 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -298,6 +298,7 @@ linux (4.9.24-1) UNRELEASED; urgency=medium
     - dvb-usb-v2: avoid use-after-free
     - drm/nouveau/disp/mcp7x: disable dptmds workaround (Closes: #850219)
     - [x86] mm: Tighten x86 /dev/mem with zeroing reads (CVE-2017-7889)
+    - virtio-console: avoid DMA from stack (CVE-2017-8067)
 
   [ Ben Hutchings ]
   * w1: Really enable W1_MASTER_GPIO as module (Closes: #858975)