{"id":"CLSA-2026-1783790425","summary":"kernel: Fix of 41 CVEs","details":"- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr {CVE-2025-68183}\n- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock {CVE-2026-53166}\n- rtmutex: Use waiter::task instead of current in remove_waiter() {CVE-2026-43499}\n- net: bonding: fix use-after-free in bond_xmit_broadcast() {CVE-2026-31419}\n- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold {CVE-2026-31408}\n- mptcp: fix slab-use-after-free in __inet_lookup_established {CVE-2026-31669}\n- svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}\n- ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078}\n- cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path {CVE-2026-43328}\n- drm/amd/display: Do not skip unrelated mode changes in DSC validation {CVE-2026-31488}\n- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}\n- net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check {CVE-2026-23448}\n- bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664}\n- mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() {CVE-2026-31586}\n- crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}\n- atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}\n- driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}\n- driver core: platform: use generic driver_override infrastructure {CVE-2026-31527}\n- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}\n- ext4: convert inline data to extents when truncate exceeds inline size {CVE-2026-31452}\n- usb: class: cdc-wdm: fix reordering issue in read code path {CVE-2026-43427}\n- xen/privcmd: fix double free via VMA splitting {CVE-2026-31787}\n- netfilter: nf_tables: release flowtable after rcu grace period on error {CVE-2026-23392}\n- wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}\n- netfilter: conntrack: switch to siphash {CVE-2021-3773}\n- gpiolib: cdev: fix NULL-pointer dereferences {CVE-2022-50453}\n- tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}\n- dlm: validate length in dlm_search_rsb_tree {CVE-2026-43125}\n- Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock {CVE-2026-31500}\n- tpm: fix reference counting for struct tpm_chip {CVE-2022-2977}\n- tracing: Fix wild-memory-access in register_synth_event() {CVE-2022-49799}\n- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}\n- ext4: block range must be validated before use in ext4_mb_clear_bb() {CVE-2022-50021}\n- netfilter: flowtable: strictly check for maximum number of actions {CVE-2026-43329}\n- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}\n- xen: fix buffer overflow in buildid_show() {CVE-2026-31786}\n- NTB: fix possible name leak in ntb_register_device() {CVE-2023-52652}\n- ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076}\n- erspan: do not use skb_mac_header() in ndo_start_xmit() {CVE-2023-53053}\n- net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}\n- ata: libata-transport: fix double ata_host_put() in ata_tport_add() {CVE-2022-49826}","modified":"2026-10-26T09:43:45.036040095Z","published":"2026-10-19T12:59:44Z","upstream":["CVE-2021-3773","CVE-2022-2977","CVE-2022-49006","CVE-2022-49799","CVE-2022-49826","CVE-2022-50021","CVE-2022-50453","CVE-2023-52652","CVE-2023-53053","CVE-2024-56664","CVE-2025-38068","CVE-2025-68183","CVE-2025-71068","CVE-2026-23076","CVE-2026-23078","CVE-2026-23392","CVE-2026-23397","CVE-2026-23448","CVE-2026-31402","CVE-2026-31408","CVE-2026-31419","CVE-2026-31452","CVE-2026-31488","CVE-2026-31500","CVE-2026-31527","CVE-2026-31586","CVE-2026-31669","CVE-2026-31688","CVE-2026-31786","CVE-2026-31787","CVE-2026-43050","CVE-2026-43051","CVE-2026-43052","CVE-2026-43088","CVE-2026-43125","CVE-2026-43328","CVE-2026-43329","CVE-2026-43427","CVE-2026-43493","CVE-2026-43499","CVE-2026-53166"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1783790425.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3773"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2977"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49006"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49287"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49799"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49826"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50021"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50453"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52652"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53053"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56664"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38068"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68183"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71068"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23076"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23078"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23392"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23397"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23448"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31402"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31419"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31452"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31488"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31500"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31527"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31669"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31786"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31787"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43050"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43051"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43052"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43088"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43125"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43328"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43329"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43427"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43493"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43499"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80676"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-core","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-core?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-cross-headers","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-cross-headers?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug-core","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-core?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug-modules","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug-modules-extra","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules-extra?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-debug-modules-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-debug-modules-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-ipaclones-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-ipaclones-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-modules","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-modules-extra","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules-extra?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-modules-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-modules-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-selftests-internal","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-selftests-internal?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/perf?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}},{"package":{"name":"python3-perf","ecosystem":"TuxCare:CentOS-Stream:8","purl":"pkg:rpm/tuxcare/python3-perf?distro=centos-stream-8"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-553.6.1.el8_10.tuxcare.els26"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos-stream8els/CLSA-2026-1783790425.json"}}],"schema_version":"1.9.0"}