{"id":"CLSA-2026-1780132980","summary":"kernel: Fix of 46 CVEs","details":"- tracing: Fix potential double free in create_var_ref() {CVE-2022-49410}\n- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216}\n- e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}\n- module: limit enabling module.sig_enforce {CVE-2021-35039}\n- Bluetooth: L2CAP: Fix l2cap_global_chan_by_psm {CVE-2022-42896}\n- HID: elan: Fix potential double free in elan_input_configured {CVE-2022-49508}\n- libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116}\n- scsi: qla2xxx: Fix improper freeing of purex item {CVE-2025-68741}\n- binfmt_misc: fix shift-out-of-bounds in check_special_flags {CVE-2022-50497}\n- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}\n- kernfs: fix use-after-free in __kernfs_remove {CVE-2022-50432}\n- rbd: avoid use-after-free in do_rbd_add() when rbd_dev_create() fails {CVE-2023-53307}\n- virtio_console: Assure used length from device is limited {CVE-2021-38160}\n- Squashfs: check metadata block offset is within range {CVE-2026-23388}\n- Input: powermate - fix use-after-free in powermate_config_complete {CVE-2023-52475}\n- wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}\n- cifs: Fix use-after-free in rdata-\u003eread_into_pages() {CVE-2023-52741}\n- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988}\n- selinux: Add boundary check in put_entry() {CVE-2022-50200}\n- nvmet: avoid potential UAF in nvmet_req_complete() {CVE-2023-53116}\n- ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}\n- drm/i915/perf: add sentinel to xehp_oa_b_counters {CVE-2023-53646}\n- net: mdio: validate parameter addr in mdiobus_get_phy() {CVE-2023-53019}\n- wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() {CVE-2023-53570}\n- vt: Clear selection before changing the font {CVE-2022-49948}\n- ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917}\n- netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}\n- net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907}\n- capabilities: fix undefined behavior in bit shift for CAP_TO_MASK {CVE-2022-49870}\n- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}\n- lwt: Fix return values of BPF xmit ops {CVE-2023-53338}\n- ata: ahci: Match EM_MAX_SLOTS with SATA_PMP_MAX_PORTS {CVE-2022-50315}\n- udf: Do not bother merging very long extents {CVE-2023-53506}\n- gfs2: Fix possible data races in gfs2_show_options() {CVE-2023-53622}\n- wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}\n- thermal: core: prevent potential string overflow {CVE-2023-52868}\n- drm/radeon: possible buffer overflow {CVE-2023-52867}\n- ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075}\n- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}\n- drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration {CVE-2024-46812}\n- Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}\n- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206}\n- ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}\n- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() {CVE-2026-43450}\n- smb: client: reject userspace cifs.spnego descriptions\n- ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}","modified":"2026-10-26T09:43:35.036052801Z","published":"2026-07-28T11:54:11Z","upstream":["CVE-2021-35039","CVE-2021-38160","CVE-2022-42896","CVE-2022-49410","CVE-2022-49508","CVE-2022-49870","CVE-2022-49907","CVE-2022-49917","CVE-2022-49948","CVE-2022-50200","CVE-2022-50315","CVE-2022-50366","CVE-2022-50432","CVE-2022-50497","CVE-2023-52475","CVE-2023-52531","CVE-2023-52741","CVE-2023-52867","CVE-2023-52868","CVE-2023-52988","CVE-2023-53000","CVE-2023-53019","CVE-2023-53075","CVE-2023-53116","CVE-2023-53285","CVE-2023-53307","CVE-2023-53321","CVE-2023-53338","CVE-2023-53506","CVE-2023-53570","CVE-2023-53622","CVE-2023-53646","CVE-2023-53668","CVE-2024-46812","CVE-2025-68741","CVE-2025-71093","CVE-2025-71116","CVE-2026-23216","CVE-2026-23388","CVE-2026-31602","CVE-2026-31778","CVE-2026-43020","CVE-2026-43040","CVE-2026-43206","CVE-2026-43450"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1780132980.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35039"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-38160"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42896"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49410"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49508"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49870"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49907"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49917"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49948"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50200"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50315"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50366"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50432"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50497"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52475"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52531"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52741"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52867"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52868"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52988"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53000"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53019"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53075"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53285"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53307"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53321"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53338"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53506"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53570"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53622"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53646"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53668"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46812"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68741"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71093"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23216"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23388"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31602"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43020"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43040"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43206"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43450"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46243"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-core","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-core?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-cross-headers","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-cross-headers?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug-core","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-core?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug-modules","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug-modules-extra","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules-extra?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-debug-modules-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-ipaclones-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-ipaclones-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-modules","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-modules-extra","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules-extra?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-modules-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-selftests-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-selftests-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perf?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}},{"package":{"name":"python3-perf","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/python3-perf?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els22"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1780132980.json"}}],"schema_version":"1.9.0"}