{"id":"CLSA-2026-1792020435","summary":"kernel: Fix of 68 CVEs","details":"- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- wifi: libipw: fix key index receive bound checks {CVE-2026-93803}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}\n- reboot: fix cad_pid use-after-free race {CVE-2026-97938}\n- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}\n- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}\n- xfrm: hold net_device reference under RCU in bundle creation {CVE-2026-98364}\n- wifi: libipw: reject too-short beacon and probe responses {CVE-2026-98349}\n- wifi: libipw: reject too-short association responses {CVE-2026-98348}\n- net: lock the socket in sock_gettstamp() {CVE-2026-98276}\n- ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}\n- wifi: libertas_tf: fix UAF in lbtf_free_adapter() {CVE-2026-98194}\n- wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() {CVE-2026-72070}\n- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}\n- ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data {CVE-2026-74388}\n- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n- sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}\n- KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug {CVE-2026-68093}\n- inet: frags: strip GSO state from fragments before reassembly {CVE-2026-80590}\n- misc: sgi-gru: remove interrupt-context page-table walks {CVE-2026-90383}\n- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}\n- slip: fix use-after-free in sl_sync() {CVE-2026-81001}\n- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n- nfsd: gate nfs3 setacl by argp-\u003emask {CVE-2026-89671}\n- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n- sctp: keep chunk-\u003etransport in step with the list it is queued on {CVE-2026-74588}\n- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}\n- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}\n- sctp: add INIT verification after cookie unpacking {CVE-2026-72398}\n- sctp: validate embedded address parameter length {CVE-2026-74287}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- ALSA: seq: midi: Serialize output teardown with event_input {CVE-2026-74387}\n- ipv6: mcast: Fix potential UAF in MLD delayed work {CVE-2026-72322}\n- ipv6: prevent in6_dev_get() from resurrecting inet6_dev {CVE-2026-74630}\n- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n- sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid {CVE-2026-68320}\n- net/sched: fix packet loop on netem when duplicate is on {CVE-2026-63983}\n- fbdev: fix use-after-free in store_modes() {CVE-2026-63826}\n- ipv6: exthdrs: refresh nh after handling HAO option {CVE-2026-63922}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- Squashfs: check block offset is not negative {CVE-2026-90203}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}\n- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}\n- ecryptfs: reject oversized encrypted_key_size in parse_tag_3_packet {CVE-2026-89607}\n- dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}\n- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}\n- sctp: drop a chunk if its transport was removed {CVE-2026-89478}\n- udf: validate sparing table length as an entry count, not a byte count {CVE-2026-64322}\n- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}\n- wifi: libipw: reject TKIP frames without a full MIC {CVE-2026-98193}\n- bridge: stp: Fix a potential use-after-free when deleting a bridge {CVE-2026-72389}\n- net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422}\n- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}\n- Bluetooth: serialize accept_q access {CVE-2026-52918}\n- fix signedness mess in rw_verify_area() on 64bit architectures {CVE-2019-18675}\n- smb: client: reject userspace cifs.spnego descriptions {CVE-2026-46243}\n- KEYS: Add a key type op to permit the key description to be vetted {CVE-2026-46243}\n- ALSA: usb-audio: Fix a DMA to stack memory bug {CVE-2024-53197}\n- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices {CVE-2024-53197}\n- HID: core: zero-initialize the report buffer {CVE-2024-50302}","modified":"2026-10-26T09:43:12.660914399Z","published":"2026-10-14T23:28:20Z","upstream":["CVE-2019-18675","CVE-2024-50302","CVE-2024-53197","CVE-2026-46243","CVE-2026-52918","CVE-2026-53266","CVE-2026-63826","CVE-2026-63922","CVE-2026-63983","CVE-2026-64322","CVE-2026-64340","CVE-2026-64422","CVE-2026-64471","CVE-2026-68093","CVE-2026-68202","CVE-2026-68320","CVE-2026-68365","CVE-2026-72070","CVE-2026-72322","CVE-2026-72389","CVE-2026-72398","CVE-2026-72413","CVE-2026-74287","CVE-2026-74359","CVE-2026-74387","CVE-2026-74388","CVE-2026-74556","CVE-2026-74588","CVE-2026-74630","CVE-2026-74641","CVE-2026-74689","CVE-2026-80536","CVE-2026-80590","CVE-2026-80622","CVE-2026-81001","CVE-2026-89478","CVE-2026-89549","CVE-2026-89550","CVE-2026-89575","CVE-2026-89607","CVE-2026-89633","CVE-2026-89671","CVE-2026-89699","CVE-2026-89893","CVE-2026-90033","CVE-2026-90057","CVE-2026-90116","CVE-2026-90203","CVE-2026-90383","CVE-2026-90421","CVE-2026-93803","CVE-2026-97408","CVE-2026-97445","CVE-2026-97455","CVE-2026-97536","CVE-2026-97539","CVE-2026-97540","CVE-2026-97931","CVE-2026-97938","CVE-2026-97949","CVE-2026-98077","CVE-2026-98193","CVE-2026-98194","CVE-2026-98266","CVE-2026-98276","CVE-2026-98348","CVE-2026-98349","CVE-2026-98364","CVE-2026-98375"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792020435.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53197"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46243"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52918"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63826"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63922"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63983"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64340"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64422"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64471"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68093"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68202"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68320"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68365"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72070"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72322"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72389"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72398"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72413"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74287"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74359"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74387"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74388"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74556"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74588"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74630"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74641"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74689"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80536"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80590"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80622"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80829"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81001"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89478"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89549"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89550"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89575"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89607"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89633"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89671"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89699"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89893"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90033"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90057"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90203"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90383"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90421"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93803"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97445"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97536"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97539"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97540"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97931"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97938"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97949"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98077"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98193"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98194"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98276"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98348"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98349"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98364"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98375"}],"affected":[{"package":{"name":"kernel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-abi-whitelists","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-abi-whitelists?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-doc?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-firmware","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-firmware?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els36"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792020435.json"}}],"schema_version":"1.9.0"}