{"id":"CLSA-2026-1789460387","summary":"Fix of 134 CVEs","details":"   * CVE-2026-72463\n     - xfrm: Fix dev use-after-free in xfrm async resumption {CVE-2026-72463}\n   * CVE-2026-64600\n     - xfs: resample the data fork mapping after cycling ILOCK {CVE-2026-64600}\n   * CVE-2026-46175\n     - f2fs: fix fsck inconsistency caused by FGGC of node block {CVE-2026-46175}\n   * CVE-2025-68254\n     - staging: rtl8723bs: fix out-of-bounds read in OnBeacon ESR IE parsing\n       {CVE-2025-68254}\n   * CVE-2025-68255\n     - staging: rtl8723bs: fix stack buffer overflow in OnAssocReq IE parsing\n       {CVE-2025-68255}\n   * CVE-2026-64268\n     - RDMA/siw: bound Read Response placement to the RREAD length\n       {CVE-2026-64268}\n   * CVE-2025-68286\n     - drm/amd/display: Check NULL before accessing {CVE-2025-68286}\n   * CVE-2026-53024\n     - greybus: raw: fix use-after-free if write is called after disconnect\n       {CVE-2026-53024}\n   * CVE-2026-53025\n     - greybus: raw: fix use-after-free on cdev close {CVE-2026-53025}\n   * CVE-2026-52934\n     - batman-adv: tvlv: reject oversized TVLV packets {CVE-2026-52934}\n   * CVE-2025-68303\n     - platform/x86: intel: punit_ipc: fix memory corruption {CVE-2025-68303}\n   * CVE-2026-64280\n     - fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region()\n       {CVE-2026-64280}\n   * CVE-2026-64188\n     - net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()\n       {CVE-2026-64188}\n   * CVE-2026-64109\n     - af_unix: Fix UAF read of tail-\u003elen in unix_stream_data_wait()\n       {CVE-2026-64109}\n   * CVE-2026-64274\n     - Input: goodix - clamp the device-reported contact count {CVE-2026-64274}\n   * CVE-2026-64270\n     - Input: mms114 - reject an oversized device packet size {CVE-2026-64270}\n   * CVE-2026-64093\n     - batman-adv: tp_meter: directly shut down timer on cleanup {CVE-2026-64093}\n   * CVE-2026-64091\n     - batman-adv: tt: fix TOCTOU race for reported vlans {CVE-2026-64091}\n   * CVE-2026-53329\n     - drm/amd/display: Use krealloc_array() in dal_vector_reserve()\n       {CVE-2026-53329}\n   * CVE-2026-64298\n     - NFSv4: include MAY_WRITE in open permission mask for O_TRUNC\n       {CVE-2026-64298}\n   * CVE-2026-64276\n     - Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count\n       {CVE-2026-64276}\n   * CVE-2026-64273\n     - Input: iforce - bound the device-reported force-feedback effect index\n       {CVE-2026-64273}\n   * CVE-2026-64271\n     - Input: touchwin - reset the packet index on every complete packet\n       {CVE-2026-64271}\n   * CVE-2026-64266\n     - fuse: re-lock request before returning from fuse_ref_folio()\n       {CVE-2026-64266}\n   * CVE-2026-64191\n     - i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}\n   * CVE-2026-64189\n     - netfilter: ipset: fix race between dump and ip_set_list resize\n       {CVE-2026-64189}\n   * CVE-2026-31786\n     - Buffer overflow in drivers/xen/sys-hypervisor.c {CVE-2026-31786}\n   * CVE-2025-68799\n     - caif: fix integer underflow in cffrml_receive() {CVE-2025-68799}\n   * CVE-2025-68302\n     - net: sxgbe: fix potential NULL dereference in sxgbe_rx() {CVE-2025-68302}\n   * CVE-2025-40243\n     - hfs: fix KMSAN uninit-value issue in hfs_find_set_zero_bits()\n       {CVE-2025-40243}\n   * CVE-2025-40233\n     - ocfs2: clear extent cache after moving/defragmenting extents\n       {CVE-2025-40233}\n   * CVE-2026-23269\n     - apparmor: validate DFA start states are in bounds in unpack_pdb\n       {CVE-2026-23269}\n   * CVE-2026-43249\n     - 9p/xen: protect xen_9pfs_front_free against concurrent calls\n       {CVE-2026-43249}\n   * CVE-2026-31657\n     - batman-adv: hold claim backbone gateways by reference {CVE-2026-31657}\n   * CVE-2026-31598\n     - ocfs2: fix possible deadlock between unlink and dio_end_io_write\n       {CVE-2026-31598}\n   * CVE-2026-31768\n     - iio: adc: ti-adc161s626: use DMA-safe memory for spi_read()\n       {CVE-2026-31768}\n   * CVE-2026-23216\n     - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()\n       {CVE-2026-23216}\n   * CVE-2026-31597\n     - ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY\n       {CVE-2026-31597}\n   * CVE-2026-46174\n     - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op\n       cache {CVE-2026-46174}\n     - x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op\n       cache {CVE-2026-46174}\n   * CVE-2025-71152\n     - net: dsa: properly keep track of conduit reference {CVE-2025-71152}\n   * CVE-2026-53230\n     - net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list\n       {CVE-2026-53230}\n   * CVE-2026-53262\n     - l2tp: pppol2tp: hold reference to session in pppol2tp_ioctl()\n       {CVE-2026-53262}\n   * CVE-2026-31663\n     - xfrm: hold dev ref until after transport_finish NF_HOOK {CVE-2026-31663}\n   * CVE-2024-36013\n     - Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()\n       {CVE-2024-36013}\n   * CVE-2022-49328\n     - mt76: fix use-after-free by removing a non-RCU wcid pointer\n       {CVE-2022-49328}\n   * CVE-2026-52917\n     - sctp: diag: reject stale associations in dump_one path {CVE-2026-52917}\n   * CVE-2026-46150\n     - fanotify: fix false positive on permission events {CVE-2026-46150}\n   * CVE-2026-45984\n     - gfs2: Fix use-after-free in iomap inline data write path {CVE-2026-45984}\n   * CVE-2026-52943\n     - net: skbuff: fix missing zerocopy reference in pskb_carve helpers\n       {CVE-2026-52943}\n   * CVE-2026-52956\n     - libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()\n       {CVE-2026-52956}\n   * CVE-2022-49470\n     - Bluetooth: btmtksdio: fix use-after-free at btmtksdio_recv_event\n       {CVE-2022-49470}\n   * CVE-2026-46052\n     - ceph: only d_add() negative dentries when they are unhashed\n       {CVE-2026-46052}\n   * CVE-2026-53270\n     - ipvs: clear the svc scheduler ptr early on edit {CVE-2026-53270}\n   * CVE-2026-53133\n     - RDMA/umem: Fix truncation for block sizes \u003e= 4G {CVE-2026-53133}\n   * CVE-2026-53223\n     - net: guard timestamp cmsgs to real error queue skbs {CVE-2026-53223}\n   * CVE-2026-46181\n     - RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() {CVE-2026-46181}\n   * CVE-2026-53239\n     - xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()\n       {CVE-2026-53239}\n   * CVE-2026-45894\n     - iommu/vt-d: Clear Present bit before tearing down PASID entry\n       {CVE-2026-45894}\n   * CVE-2026-52924\n     - sctp: purge outqueue on stale COOKIE-ECHO handling {CVE-2026-52924}\n   * CVE-2026-53228\n     - ipv6: sit: reload inner IPv6 header after GSO offloads {CVE-2026-53228}\n   * CVE-2026-53212\n     - netfilter: nft_tunnel: fix use-after-free on object destroy\n       {CVE-2026-53212}\n   * CVE-2026-46056\n     - Bluetooth: hci_event: fix potential UAF in SSP passkey handlers\n       {CVE-2026-46056}\n   * CVE-2026-53009\n     - ice: fix double-free of tx_buf skb {CVE-2026-53009}\n   * CVE-2026-46116\n     - xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete\n       {CVE-2026-46116}\n   * CVE-2026-52912\n     - netfilter: nf_queue: hold bridge skb-\u003edev while queued {CVE-2026-52912}\n   * CVE-2026-43051\n     - HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq {CVE-2026-43051}\n   * CVE-2026-53016\n     - crypto: ccp - copy IV using skcipher ivsize {CVE-2026-53016}\n   * CVE-2026-46133\n     - RDMA/rxe: Reject unknown opcodes before ICRC processing {CVE-2026-46133}\n   * CVE-2026-46149\n     - scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()\n       {CVE-2026-46149}\n   * CVE-2026-23392\n     - netfilter: nf_tables: release flowtable after rcu grace period on error\n       {CVE-2026-23392}\n   * CVE-2026-31586\n     - mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()\n       {CVE-2026-31586}\n   * CVE-2026-43110\n     - wifi: brcmfmac: validate bsscfg indices in IF events {CVE-2026-43110}\n   * CVE-2026-52957\n     - libceph: Fix potential null-ptr-deref in decode_choose_args()\n       {CVE-2026-52957}\n   * CVE-2026-53120\n     - PCI: serialize driver_override to fix use-after-free in pci_match_device()\n       {CVE-2026-53120}\n   * CVE-2026-46099\n     - net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels {CVE-2026-46099}\n   * CVE-2026-53006\n     - ipv6: fix possible UAF in icmpv6_rcv() {CVE-2026-53006}\n   * CVE-2026-52993\n     - tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}\n   * CVE-2026-53112\n     - wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished\n       irq_prepare_bcn_tasklet {CVE-2026-53112}\n   * CVE-2026-52919\n     - batman-adv: fix tp_meter counter underflow during shutdown\n       {CVE-2026-52919}\n   * CVE-2026-46212\n     - batman-adv: bla: prevent use-after-free when deleting claims\n       {CVE-2026-46212}\n   * CVE-2026-53089\n     - bpf: Fix use-after-free in offloaded map/prog info fill {CVE-2026-53089}\n   * CVE-2025-68256\n     - staging: rtl8723bs: fix out-of-bounds read in rtw_get_ie() parser\n       {CVE-2025-68256}\n   * CVE-2026-46006\n     - drm/nouveau: fix u32 overflow in pushbuf reloc bounds check\n       {CVE-2026-46006}\n   * CVE-2026-45852\n     - RDMA/rxe: Fix double free in rxe_srq_from_init {CVE-2026-45852}\n   * CVE-2026-52931\n     - batman-adv: tp_meter: avoid use of uninit sender vars {CVE-2026-52931}\n   * CVE-2023-53218\n     - rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}\n   * CVE-2023-53596\n     - drivers: base: Free devm resources when unregistering a device\n       {CVE-2023-53596}\n   * CVE-2026-53072\n     - Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER\n       {CVE-2026-53072}\n   * CVE-2026-43334\n     - Bluetooth: SMP: force responder MITM requirements before building the\n       pairing response {CVE-2026-43334}\n   * CVE-2026-43226\n     - net/rds: No shortcut out of RDS_CONN_ERROR {CVE-2026-43226}\n   * CVE-2026-43494\n     - net/rds: reset op_nents when zerocopy page pin fails {CVE-2026-43494}\n   * CVE-2026-43116\n     - netfilter: ctnetlink: ensure safe access to master conntrack\n       {CVE-2026-43116}\n   * CVE-2026-31408\n     - Bluetooth: SCO: hold the sk before receiving a frame {CVE-2026-31408}\n   * CVE-2026-53131\n     - netfilter: reject use of unset mac header for non-ethernet devices\n       {CVE-2026-53131}\n   * CVE-2026-52986\n     - netfilter: nf_conntrack_sip: don't use simple_strtoul {CVE-2026-52986}\n   * CVE-2026-53002\n     - netfilter: conntrack: remove sprintf usage {CVE-2026-53002}\n   * CVE-2026-53186\n     - RDMA/srp: bound SRP_RSP sense copy by the received length {CVE-2026-53186}\n   * CVE-2026-52918\n     - Bluetooth: serialize accept_q access {CVE-2026-52918}\n   * CVE-2026-53256\n     - Bluetooth: RFCOMM: hold listener socket in rfcomm_connect_ind()\n       {CVE-2026-53256}\n   * CVE-2026-53253\n     - Bluetooth: bnep: reject short frames before parsing {CVE-2026-53253}\n   * CVE-2026-53254\n     - Bluetooth: RFCOMM: validate skb length in MCC handlers {CVE-2026-53254}\n   * CVE-2026-45942\n     - ext4: fix e4b bitmap inconsistency reports {CVE-2026-45942}\n   * CVE-2026-23243\n     - RDMA/umad: Reject negative data_len in ib_umad_write() {CVE-2026-23243}\n   * CVE-2026-46266\n     - inet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP\n       {CVE-2026-46266}\n   * CVE-2026-53275\n     - ipv6: mcast: Fix use-after-free when processing MLD queries\n       {CVE-2026-53275}\n   * CVE-2026-43190\n     - netfilter: xt_tcpmss: check remaining length before reading option length\n       {CVE-2026-43190}\n   * CVE-2026-53268\n     - netfilter: nf_conntrack_irc: fix possible out-of-bounds read\n       {CVE-2026-53268}\n   * CVE-2025-40271\n     - fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}\n   * CVE-2026-43049\n     - HID: logitech-hidpp: Prevent use-after-free on force feedback\n       initialisation failure {CVE-2026-43049}\n   * CVE-2023-54207\n     - HID: uclogic: Correct devm device reference for hidinput input_dev name\n       {CVE-2023-54207}\n   * CVE-2026-23098\n     - netrom: fix double-free in nr_route_frame() {CVE-2026-23098}\n   * CVE-2026-31580\n     - bcache: fix cached_dev.sb_bio use-after-free and crash {CVE-2026-31580}\n   * CVE-2022-50066\n     - net: atlantic: fix aq_vec index out of range error {CVE-2022-50066}\n   * CVE-2026-43458\n     - serial: caif: hold tty-\u003elink reference in ldisc_open and ser_release\n       {CVE-2026-43458}\n   * CVE-2024-46859\n     - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses\n       {CVE-2024-46859}\n   * CVE-2023-53473\n     - ext4: improve error handling from ext4_dirhash() {CVE-2023-53473}\n   * CVE-2026-31685\n     - netfilter: ip6t_eui64: reject invalid MAC header for all packets\n       {CVE-2026-31685}\n   * CVE-2026-31637\n     - rxrpc: reject undecryptable rxkad response tickets {CVE-2026-31637}\n   * CVE-2026-23190\n     - ASoC: amd: fix memory leak in acp3x pdm dma ops {CVE-2026-23190}\n   * CVE-2025-68214\n     - timers: Fix NULL function pointer race in timer_shutdown_sync()\n       {CVE-2025-68214}\n   * CVE-2026-46043\n     - RDMA/rxe: Validate pad and ICRC before payload_size() in rxe_rcv\n       {CVE-2026-46043}\n   * CVE-2025-68787\n     - netrom: Fix memory leak in nr_sendmsg() {CVE-2025-68787}\n   * CVE-2026-23455\n     - netfilter: nf_conntrack_h323: check for zero length in DecodeQ931()\n       {CVE-2026-23455}\n   * CVE-2022-50303\n     - drm/amdkfd: Fix double release compute pasid {CVE-2022-50303}\n   * CVE-2026-22999\n     - net/sched: sch_qfq: do not free existing class in qfq_change_class()\n       {CVE-2026-22999}\n   * CVE-2026-43117\n     - btrfs: tracepoints: get correct superblock from dentry in event\n       btrfs_sync_file() {CVE-2026-43117}\n   * CVE-2026-43050\n     - atm: lec: fix use-after-free in sock_def_readable() {CVE-2026-43050}\n   * CVE-2026-31759\n     - usb: ulpi: fix double free in ulpi_register_interface() error path\n       {CVE-2026-31759}\n   * CVE-2026-31578\n     - media: as102: fix to not free memory after the device is registered in\n       as102_usb_probe() {CVE-2026-31578}\n   * CVE-2026-53011\n     - net/sched: taprio: fix use-after-free in advance_sched() on schedule\n       switch {CVE-2026-53011}\n   * CVE-2026-46227\n     - sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL\n       {CVE-2026-46227}\n   * CVE-2026-46120\n     - ip6_gre: Use cached t-\u003enet in ip6erspan_changelink(). {CVE-2026-46120}\n   * CVE-2026-53224\n     - sctp: validate embedded INIT chunk and address list lengths in COOKIE_ECHO\n       {CVE-2026-53224}\n   * CVE-2026-53246\n     - sctp: validate cached peer INIT chunk length in COOKIE_ECHO\n       {CVE-2026-53246}\n   * Miscellaneous upstream changes\n     - dkms-build: prefer a pre-seeded DKMS package from debian/dkms-packages\n   * Bump ABI 5.4.0-237","modified":"2026-10-26T09:43:34.816385923Z","published":"2026-09-15T08:21:40Z","upstream":["CVE-2022-49328","CVE-2022-49470","CVE-2022-50066","CVE-2022-50303","CVE-2023-53218","CVE-2023-53473","CVE-2023-53596","CVE-2023-54207","CVE-2024-36013","CVE-2024-46859","CVE-2025-40233","CVE-2025-40243","CVE-2025-40271","CVE-2025-68214","CVE-2025-68254","CVE-2025-68255","CVE-2025-68256","CVE-2025-68286","CVE-2025-68302","CVE-2025-68303","CVE-2025-68787","CVE-2025-68799","CVE-2025-71152","CVE-2026-22999","CVE-2026-23098","CVE-2026-23190","CVE-2026-23216","CVE-2026-23243","CVE-2026-23269","CVE-2026-23392","CVE-2026-23455","CVE-2026-31408","CVE-2026-31578","CVE-2026-31580","CVE-2026-31586","CVE-2026-31597","CVE-2026-31598","CVE-2026-31637","CVE-2026-31657","CVE-2026-31663","CVE-2026-31685","CVE-2026-31759","CVE-2026-31768","CVE-2026-31786","CVE-2026-43049","CVE-2026-43050","CVE-2026-43051","CVE-2026-43110","CVE-2026-43116","CVE-2026-43117","CVE-2026-43190","CVE-2026-43226","CVE-2026-43249","CVE-2026-43334","CVE-2026-43458","CVE-2026-43494","CVE-2026-45852","CVE-2026-45894","CVE-2026-45942","CVE-2026-45984","CVE-2026-46006","CVE-2026-46043","CVE-2026-46052","CVE-2026-46056","CVE-2026-46099","CVE-2026-46116","CVE-2026-46120","CVE-2026-46133","CVE-2026-46149","CVE-2026-46150","CVE-2026-46174","CVE-2026-46175","CVE-2026-46181","CVE-2026-46212","CVE-2026-46227","CVE-2026-46266","CVE-2026-52912","CVE-2026-52917","CVE-2026-52918","CVE-2026-52919","CVE-2026-52924","CVE-2026-52931","CVE-2026-52934","CVE-2026-52943","CVE-2026-52956","CVE-2026-52957","CVE-2026-52986","CVE-2026-52993","CVE-2026-53002","CVE-2026-53006","CVE-2026-53009","CVE-2026-53011","CVE-2026-53016","CVE-2026-53024","CVE-2026-53025","CVE-2026-53072","CVE-2026-53089","CVE-2026-53112","CVE-2026-53120","CVE-2026-53131","CVE-2026-53133","CVE-2026-53186","CVE-2026-53212","CVE-2026-53223","CVE-2026-53224","CVE-2026-53228","CVE-2026-53230","CVE-2026-53239","CVE-2026-53246","CVE-2026-53253","CVE-2026-53254","CVE-2026-53256","CVE-2026-53262","CVE-2026-53268","CVE-2026-53270","CVE-2026-53275","CVE-2026-53329","CVE-2026-64091","CVE-2026-64093","CVE-2026-64109","CVE-2026-64188","CVE-2026-64189","CVE-2026-64191","CVE-2026-64266","CVE-2026-64268","CVE-2026-64270","CVE-2026-64271","CVE-2026-64273","CVE-2026-64274","CVE-2026-64276","CVE-2026-64280","CVE-2026-64298","CVE-2026-64600","CVE-2026-72463"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1789460387.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49328"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-49470"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50066"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50303"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53473"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53596"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54207"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36013"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-46859"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40233"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40243"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40271"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-54518"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68214"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68254"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68255"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68256"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68286"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68302"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68303"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68787"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68799"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71152"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22999"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23098"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23190"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23216"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23243"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23269"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23392"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-23455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31578"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31580"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31597"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31598"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31637"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31657"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31663"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31685"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31759"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31768"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31786"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43049"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43050"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43051"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43110"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43117"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43190"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43226"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43249"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43334"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43458"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43494"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45852"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45894"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45942"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45984"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46006"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46043"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46052"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46056"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46099"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46120"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46133"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46149"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46150"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46174"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46175"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46181"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46212"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46227"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52912"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52917"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52918"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52919"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52924"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52931"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52934"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52943"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52956"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52957"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52986"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52993"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53002"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53006"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53009"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53011"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53016"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53024"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53025"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53072"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53089"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53112"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53120"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53131"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53133"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53186"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53212"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53223"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53224"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53228"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53230"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53239"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53246"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53253"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53254"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53256"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53262"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53270"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53275"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53329"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64091"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64093"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64109"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64188"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64189"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64191"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64268"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64270"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64271"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64273"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64274"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64276"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64280"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64298"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64600"}],"affected":[{"package":{"name":"linux-buildinfo-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-buildinfo-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-buildinfo-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-buildinfo-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-cloud-tools-5.4.0-237","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-5.4.0-237?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-cloud-tools-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-cloud-tools-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-cloud-tools-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-doc","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-doc?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-headers-5.4.0-237","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-headers-5.4.0-237?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-headers-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-headers-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-headers-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-headers-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-image-unsigned-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-image-unsigned-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-libc-dev","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-libc-dev?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-modules-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-modules-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-modules-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-modules-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-modules-extra-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-modules-extra-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-source-5.4.0","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-source-5.4.0?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-tools-5.4.0-237","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-tools-5.4.0-237?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-tools-5.4.0-237-generic","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-tools-5.4.0-237-generic?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-tools-5.4.0-237-lowlatency","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-tools-5.4.0-237-lowlatency?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-tools-common","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-tools-common?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}},{"package":{"name":"linux-tools-host","ecosystem":"TuxCare:Ubuntu:20.04","purl":"pkg:deb/tuxcare/linux-tools-host?distro=ubuntu-20.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.0-237.257+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1789460387.json"}}],"schema_version":"1.9.0"}