{"id":"CLSA-2026-1785561693","summary":"kernel: Fix of 14 CVEs","details":"- scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses\n- scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process()\n- i40e: increase max descriptors for XL710\n- e1000e: fix heap overflow in e1000_set_eeprom\n- vsock: avoid to close connected socket after the timeout\n- ext4: fix use-after-free in ext4_orphan_cleanup\n- ext4: lost matching-pair of trace in ext4_truncate\n- ext4: allow ext4_truncate() to return an error\n- net: sched: sch_teql: fix null-pointer dereference\n- drm/virtio: move drm_connector_update_edid_property() call\n- cifs: fix strcat buffer overflow and reduce raciness in smb21_set_oplock_level()\n- cifs: serialise setting of cifsInodeInfo::oplock\n- cifs: serialise DIO and buffered IO\n- RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug {CVE-2025-38024}\n- netfilter: nf_tables: fix use-after-free in nf_tables_addchain()\n- iavf: Fix reset error handling\n- RDMA/rxe: Fix incomplete state save in rxe_requester\n- scsi: qla2xxx: Fix bsg_done() causing double free\n- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache {CVE-2026-31402}\n- net: check iov bounds in memcpy_from_msg() {CVE-2018-16885}\n- md/bitmap: fix GPF in write_page caused by resize race {CVE-2026-43163}\n- RDMA/rxe: Fix lines missed in backport of Fix incomplete state save in rxe_requester\n- ip6_tunnel: clear skb2-\u003ecb[] in ip4ip6_err() {CVE-2026-43037}\n- wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}\n- xfs: fix freemap adjustments when adding xattrs to leaf blocks {CVE-2026-43158}\n- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree {CVE-2026-43125}\n- RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}\n- tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198}\n- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}\n- net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684}\n- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete {CVE-2026-46116}\n- ALSA: aloop: Fix peer runtime UAF during format-change stop {CVE-2026-46090}\n- rtmutex: Skip remove_waiter() when waiter is not enqueued {CVE-2026-53166}\n- RDMA/rxe: Zero out index member of struct rxe_queue","modified":"2026-10-26T09:43:12.294065968Z","published":"2026-10-19T12:34:34Z","upstream":["CVE-2018-16885","CVE-2025-38024","CVE-2026-31402","CVE-2026-31684","CVE-2026-43037","CVE-2026-43110","CVE-2026-43125","CVE-2026-43158","CVE-2026-43163","CVE-2026-43198","CVE-2026-45852","CVE-2026-46090","CVE-2026-46116","CVE-2026-46181","CVE-2026-53166"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1785561693.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-16885"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35823"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38024"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23243"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31402"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31532"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31684"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43037"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43163"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43198"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45852"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46090"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46181"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1785561693.json"}}],"schema_version":"1.9.0"}