{"id":"CLSA-2026-1791796397","summary":"kernel: Fix of 32 CVEs","details":"- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}\n- net: account for encap headers in qdisc pkt len {CVE-2026-53091}\n- kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}\n- Update to kernel 3.10.0-1160.164.1.el7\n- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}\n- netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}\n- netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}\n- Revert \"netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}\"\n- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n- sctp: prevent peer transport count overflow {CVE-2026-74469}\n- xfrm: ah6: validate routing header segments_left {CVE-2026-80844}\n- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}\n- i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}\n- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}\n- USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}\n- netfilter: nft_rbtree: ignore inactive matching element with no descendants\n- netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper\n- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}\n- netfilter: conntrack: check netns when walking expect hash\n- netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}\n- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}\n- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}\n- ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}\n- macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}\n- dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}\n- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}\n- drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}\n- driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}\n- proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}\n- net: tun: bound receive headroom {CVE-2026-81000}\n- cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}\n- wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}\n- ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}\n- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}\n- bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}\n- net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}\n- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}\n- drm/amdgpu: fix bo-\u003epin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}\n- tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}\n- media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}\n- IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}\n- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}\n- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}\n- bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}\n- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}\n- tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix\n- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}\n- tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}","modified":"2026-10-26T09:43:35.854028307Z","published":"2026-10-19T12:29:41Z","upstream":["CVE-2022-49006","CVE-2023-0266","CVE-2023-52924","CVE-2024-53150","CVE-2025-39964","CVE-2026-31411","CVE-2026-31688","CVE-2026-43116","CVE-2026-43198","CVE-2026-52923","CVE-2026-53059","CVE-2026-53091","CVE-2026-53195","CVE-2026-53196","CVE-2026-53266","CVE-2026-64191","CVE-2026-64340","CVE-2026-64343","CVE-2026-64372","CVE-2026-64375","CVE-2026-68106","CVE-2026-68111","CVE-2026-68175","CVE-2026-68218","CVE-2026-68234","CVE-2026-68299","CVE-2026-68425","CVE-2026-72005","CVE-2026-72019","CVE-2026-72020","CVE-2026-72036","CVE-2026-72039","CVE-2026-72083","CVE-2026-72106","CVE-2026-74469","CVE-2026-74480","CVE-2026-74720","CVE-2026-80844","CVE-2026-81000"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1791796397.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4244"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39964"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-31411"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52923"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53059"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53195"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53196"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64191"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64340"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64343"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64372"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64375"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68106"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68111"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68175"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68218"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68234"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68299"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68425"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72005"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72019"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72020"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72036"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72039"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72083"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72106"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74469"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74720"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80676"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80844"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81000"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-doc?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.164.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1791796397.json"}}],"schema_version":"1.9.0"}