the patch debian lists is the same patch the initial cve announcement links:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=e3f33b0a1d89d738e2b913dab519226eaf76e15b

CC: @dalias@hachyderm.io