diff --git a/debian/changelog b/debian/changelog
index 42ab211ea..1117ed895 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -309,6 +309,8 @@ linux (4.18.13-1) UNRELEASED; urgency=medium
     - firmware: arm_scmi: fix divide by zero when sustained_perf_level is zero
     - afs: Fix cell specification to permit an empty address list
     - mm: madvise(MADV_DODUMP): allow hugetlbfs pages
+    - bpf: 32-bit RSH verification must truncate input before the ALU op
+      (CVE-2018-18445)
     - netfilter: xt_cluster: add dependency on conntrack module
     - [x86] HID: intel-ish-hid: Enable Sunrise Point-H ish driver
     - HID: add support for Apple Magic Keyboards
@@ -403,8 +405,6 @@ linux (4.18.13-1) UNRELEASED; urgency=medium
   [ Salvatore Bonaccorso ]
   * [x86] swiotlb: Enable swiotlb for > 4GiG RAM on 32-bit kernels
     (Closes: #908924)
-  * bpf: 32-bit RSH verification must truncate input before the ALU op
-    (CVE-2018-18445)
 
  -- Ben Hutchings <ben@decadent.org.uk>  Mon, 08 Oct 2018 19:02:53 +0100