diff --git a/debian/changelog b/debian/changelog
index 9d3a046aeb59..6c7d789b109d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -5,6 +5,7 @@ linux (5.4.1-1~exp1) UNRELEASED; urgency=medium
     - Bluetooth: Fix invalid-free in bcsp_close()
     - ath9k_hw: fix uninitialized variable data
     - ath10k: Fix a NULL-ptr-deref bug in ath10k_usb_alloc_urb_from_pipe
+      (CVE-2019-15099)
     - ath10k: Fix HOST capability QMI incompatibility
     - ath10k: restore QCA9880-AR1A (v1) detection
     - Revert "Bluetooth: hci_ll: set operational frequency earlier"