{"id":"CLSA-2026-1789037015","summary":"kernel: Fix of 51 CVEs","details":"- net: openvswitch: fix skb leak on flow key update failure during ct {CVE-2026-74464}\n- can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error {CVE-2026-74456}\n- wifi: mwifiex: fix permanently busy scans after multiple roam iterations {CVE-2026-68469}\n- drm/amdgpu/gfx8: drop unecessary BUG_ON() {CVE-2026-68430}\n- sctp: auth: verify auth requirement when auth_chunk is NULL {CVE-2026-68300}\n- cdrom: fix stack out-of-bounds read in CDROMVOLCTRL {CVE-2026-68184}\n- wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read {CVE-2026-68351}\n- wifi: carl9170: fix buffer overflow in rx_stream failover path {CVE-2026-68349}\n- wifi: carl9170: fix OOB read from off-by-two in TX status handler {CVE-2026-68350}\n- net: sit: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72061}\n- net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72055}\n- net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72054}\n- net: ipip: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72053}\n- net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-72051}\n- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}\n- usb: free iso schedules on failed submit {CVE-2026-64348}\n- smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448}\n- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}\n- netfilter: ebtables: terminate table name before find_table_lock() {CVE-2026-64411}\n- netfilter: ebtables: zero chainstack array {CVE-2026-64413}\n- USB: idmouse: fix use-after-free on disconnect race {CVE-2026-64344}\n- USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341}\n- udf: validate VAT header length against the VAT inode size {CVE-2026-64323}\n- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}\n- can: bcm: track a single source interface for ANYDEV timeout/throttle ops {CVE-2026-72115}\n- can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() {CVE-2026-72117}\n- can: bcm: fix stale rx/tx ops after device removal {CVE-2026-72116}\n- can: bcm: add missing device refcount for CAN filter removal {CVE-2026-72113}\n- scsi: libiscsi: Move ehwait initialization to iscsi_session_setup() {CVE-2021-47328}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}\n- libceph: Avoid using invalid osd indices from primary_temp {CVE-2026-80558}\n- can: bcm: restore op-\u003eflags assignment lost in the bcm_tx_lock backport {CVE-2025-38004}\n- can: bcm: fix CAN frame rx/tx statistics {CVE-2026-72118}\n- can: bcm: add locking when updating filter and timer values {CVE-2026-72121}\n- can: bcm: fix out-of-bounds frame read introduced by the bcm_tx_lock backport {CVE-2025-38004}\n- mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() {CVE-2026-72308}\n- can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure {CVE-2026-72122}\n- can: bcm: fix warning in bcm_connect/proc_register {CVE-2026-72113}\n- ipv4: fix use-after-free in fib_nhc_update_mtu() {CVE-2026-74656}\n- perf/core: Fix group leader use-after-free after sibling detach {CVE-2026-74637}\n- sctp: fix use-after-free of cached ASCONF chunk {CVE-2026-74587}\n- sctp: clear control chunk transport if it is being removed {CVE-2026-74688}\n- ALSA: usb-audio: fix OOB write on Type II inbound URBs {CVE-2026-74682}\n- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}\n- enic: fix tx_hang_reset use-after-free on device removal {CVE-2026-74725}\n- udp: fix potential use-after-free in tunnel segmentation {CVE-2026-74705}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err() {CVE-2026-74597}\n- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}\n- vhost: reset the vring metadata cache on vring reconfiguration {CVE-2026-74580}\n- PCI: serialize driver_override to fix use-after-free in pci_match_device() {CVE-2026-53120}\n- iommu/vt-d: Clear Present bit before tearing down context entry {CVE-2026-45944}\n- ipmi: Add limits to event and receive message requests {CVE-2026-46177}\n- RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}\n- ext4: improve error handling from ext4_dirhash() {CVE-2023-53473}\n- scsi: iscsi: Fix conn use after free during resets {CVE-2021-47328}","modified":"2026-10-26T09:43:36.905161931Z","published":"2026-09-10T10:44:39Z","upstream":["CVE-2021-47328","CVE-2023-53473","CVE-2025-38004","CVE-2026-45944","CVE-2026-46177","CVE-2026-53120","CVE-2026-53186","CVE-2026-63829","CVE-2026-64322","CVE-2026-64323","CVE-2026-64341","CVE-2026-64344","CVE-2026-64348","CVE-2026-64411","CVE-2026-64413","CVE-2026-64422","CVE-2026-64448","CVE-2026-68184","CVE-2026-68300","CVE-2026-68349","CVE-2026-68350","CVE-2026-68351","CVE-2026-68430","CVE-2026-68469","CVE-2026-72051","CVE-2026-72053","CVE-2026-72054","CVE-2026-72055","CVE-2026-72061","CVE-2026-72113","CVE-2026-72115","CVE-2026-72116","CVE-2026-72117","CVE-2026-72118","CVE-2026-72121","CVE-2026-72122","CVE-2026-72308","CVE-2026-74456","CVE-2026-74464","CVE-2026-74580","CVE-2026-74587","CVE-2026-74597","CVE-2026-74630","CVE-2026-74637","CVE-2026-74641","CVE-2026-74656","CVE-2026-74682","CVE-2026-74688","CVE-2026-74705","CVE-2026-74725","CVE-2026-74752","CVE-2026-80558","CVE-2026-80576"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1789037015.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47328"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53473"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45944"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46177"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53120"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53186"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63829"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64323"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64341"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64344"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64348"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64411"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64413"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64422"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64448"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68184"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68300"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68349"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68350"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68351"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68430"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68469"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72051"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72053"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72054"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72055"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72061"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72113"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72115"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72117"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72118"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72122"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72308"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74456"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74464"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74580"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74587"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74597"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74630"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74637"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74641"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74656"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74682"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74688"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74705"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74725"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74752"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80558"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80576"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-doc?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:CentOS:7","purl":"pkg:rpm/tuxcare/python-perf?distro=centos-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.156.1.el7.tuxcare.els4"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1789037015.json"}}],"schema_version":"1.9.0"}