{"id":"CLSA-2026-1782150058","summary":"kernel: Fix of 14 CVEs","details":"- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}\n- netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397}\n- bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099}\n- netlabel: fix out-of-bounds memory accesses {CVE-2019-25160}\n- ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879}\n- ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}\n- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040}\n- scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456}\n- ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}\n- Squashfs: check metadata block offset is within range {CVE-2026-23388}\n- ext4: work around deleting a file with i_nlink == 0 safely {CVE-2019-19447}\n- ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() {CVE-2019-15927}\n- scsi: libsas: fix a race condition when smp task timeout {CVE-2018-20836}\n- net: Set sk_prot_creator when cloning sockets to the right proto {CVE-2018-9568}\n- RDS: Heap OOB write in rds_message_alloc_sgs() {CVE-2018-5332}","modified":"2026-10-26T09:43:46.378058105Z","published":"2026-06-22T18:37:40Z","upstream":["CVE-2018-10879","CVE-2018-20836","CVE-2018-5332","CVE-2018-9568","CVE-2019-12456","CVE-2019-15927","CVE-2019-19447","CVE-2019-25160","CVE-2026-23076","CVE-2026-23099","CVE-2026-23388","CVE-2026-23397","CVE-2026-31778","CVE-2026-43040"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1782150058.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-10879"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-20836"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-5332"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-9568"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-12456"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15927"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19447"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25160"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23076"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23099"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23388"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23397"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43040"}],"affected":[{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-abi-whitelists","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-abi-whitelists?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-doc?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-firmware","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-firmware?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/perf?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:CentOS:6","purl":"pkg:rpm/tuxcare/python-perf?distro=centos-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els32"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1782150058.json"}}],"schema_version":"1.9.0"}