{"id":"CLSA-2026-1782148320","summary":"kernel: Fix of 38 CVEs","details":"- i40e: remove read access to debugfs files {CVE-2025-39901}\n- e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093}\n- ext4: fix bug_on in __es_tree_search caused by bad boot loader inode {CVE-2022-50638}\n- usbip: validate number_of_packets in usbip_pack_ret_submit() {CVE-2026-31607}\n- md: fix resync softlockup when bitmap size is less than array size {CVE-2023-53357}\n- media: ngene: Fix out-of-bounds bug in ngene_command_config_free_buf() {CVE-2021-47288}\n- md/raid10: check slab-out-of-bounds in md_bitmap_get_counter {CVE-2023-53357}\n- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}\n- netfilter: ip6t_eui64: reject invalid MAC header for all packets {CVE-2026-31685}\n- scsi: pm8001: Fix use-after-free for aborted TMF sas_task {CVE-2022-48791}\n- media: dvb-net: fix OOB access in ULE extension header tables {CVE-2026-31405}\n- wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}\n- powercap: intel_rapl: fix UBSAN shift-out-of-bounds issue {CVE-2022-50366}\n- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() {CVE-2026-23455}\n- netfilter: xt_tcpmss: check remaining length before reading optlen {CVE-2026-43190}\n- selinux: Add boundary check in put_entry() {CVE-2022-50200}\n- tracing: Only have rmmod clear buffers that its events were active in {CVE-2022-49006}\n- ASoC: core: Fix use-after-free in snd_soc_exit() {CVE-2022-49842}\n- nvme: fix a possible use-after-free in controller reset during load {CVE-2022-48790}\n- scsi: qla4xxx: Add length check when parsing nlattrs {CVE-2023-53456}\n- net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}\n- xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}\n- ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}\n- ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}\n- igb: Fix igb_down hung on surprise removal {CVE-2023-53148}\n- dm raid: fix accesses beyond end of raid member array {CVE-2022-49674}\n- md: suspend array while updating raid_disks via sysfs {CVE-2025-71225}\n- usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}\n- atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}\n- cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572}\n- drivers: base: Free devm resources when unregistering a device {CVE-2023-53596}\n- wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}\n- Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}\n- usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720}\n- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) {CVE-2022-50093}\n- ext4: add bounds checking in get_max_inline_xattr_value_size() {CVE-2023-53285}\n- ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395}\n- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}\n- sysfs: Add sysfs_emit and sysfs_emit_at to format sysfs output {CVE-2023-53676}\n- mmc: vub300: fix warning - do not call blocking ops when !TASK_RUNNING {CVE-2022-50430}","modified":"2026-10-26T09:43:17.877873148Z","published":"2026-07-09T10:01:03Z","upstream":["CVE-2021-47288","CVE-2022-48790","CVE-2022-48791","CVE-2022-49006","CVE-2022-49674","CVE-2022-49842","CVE-2022-50021","CVE-2022-50093","CVE-2022-50200","CVE-2022-50366","CVE-2022-50430","CVE-2022-50638","CVE-2023-52572","CVE-2023-53148","CVE-2023-53285","CVE-2023-53357","CVE-2023-53395","CVE-2023-53456","CVE-2023-53596","CVE-2023-53676","CVE-2025-39901","CVE-2025-71093","CVE-2025-71225","CVE-2026-23448","CVE-2026-23455","CVE-2026-31405","CVE-2026-31452","CVE-2026-31607","CVE-2026-31685","CVE-2026-31720","CVE-2026-31787","CVE-2026-43020","CVE-2026-43050","CVE-2026-43051","CVE-2026-43052","CVE-2026-43110","CVE-2026-43190","CVE-2026-43427"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1782148320.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47288"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48790"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48791"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49006"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49674"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49842"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50021"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50093"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50200"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50366"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50430"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50638"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52572"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53148"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53285"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53357"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53395"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53456"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53596"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53676"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39901"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71093"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71225"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23448"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31405"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31452"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31607"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31685"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31720"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31787"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43020"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43050"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43051"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43052"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43110"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43190"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43427"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.144.1.el7.tuxcare.els7"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1782148320.json"}}],"schema_version":"1.9.0"}