{"id":"CLSA-2026-1792236273","summary":"kernel: Fix of 76 CVEs","details":"- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}\n- smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637}\n- smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633}\n- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}\n- IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413}\n- IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414}\n- PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421}\n- usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}\n- HID: synchronize input before cleaning up a failed probe {CVE-2026-90329}\n- HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189}\n- ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116}\n- slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057}\n- ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786}\n- media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893}\n- scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033}\n- Squashfs: check block offset is not negative {CVE-2026-90203}\n- RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}\n- nfsd: validate symlink target length in NFSv4 CREATE {CVE-2026-89699}\n- sunrpc: route to a populated pool in svc_pool_for_cpu() {CVE-2026-89549}\n- isofs: fix out-of-bounds page array access on empty zisofs block {CVE-2026-89778}\n- dm array: validate array block headers on read {CVE-2026-89574}\n- nouveau/gem: reserve the bo in the info ioctl around the vma lookup {CVE-2026-89553}\n- iommu/vt-d: Force requesting ACS when tboot is enabled {CVE-2026-89448}\n- SUNRPC: always drain cache_cleaner before destroying a cache_detail {CVE-2026-89548}\n- SUNRPC: svcauth_gss: enforce krb5 token minimum length {CVE-2026-89550}\n- SUNRPC: harden gss_krb5_unwrap_v2 against short tokens {CVE-2026-89542}\n- slip: fix use-after-free in sl_sync() {CVE-2026-81001}\n- dm raid1: reserve space for NUL-terminator in build_constructor_string() {CVE-2026-89575}\n- net/iucv: filter frames in afiucv_hs_rcv() by ingress device {CVE-2026-81003}\n- netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() {CVE-2026-74569}\n- net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550}\n- drm/vmwgfx: validate DRAW_PRIMITIVES header size before division {CVE-2026-74444}\n- scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer {CVE-2026-74556}\n- ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set {CVE-2026-74498}\n- vxlan: re-fetch eth header after route_shortcircuit() {CVE-2026-80681}\n- net: pktgen: fix proc entry use-after-free {CVE-2026-74479}\n- char: tlclk: fix use-after-free in tlclk_cleanup() {CVE-2026-80622}\n- xfs: bounds-check buffer log item's dirty bitmap {CVE-2026-80536}\n- s390/qeth: validate user buffer length in SNMP and ARP query ioctls {CVE-2026-80584}\n- configfs_lookup(): don't leave -\u003es_dentry dangling on failure {CVE-2026-74359}\n- dmaengine: Fix possible use after free {CVE-2026-72476}\n- Bluetooth: btusb: fix use-after-free on registration failure {CVE-2026-64471}\n- sctp: fix addr_wq_timer race in sctp_free_addr_wq() {CVE-2026-72383}\n- ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() {CVE-2026-72323}\n- ALSA: 6fire: Fix UAF at error handling during probe {CVE-2026-74505}\n- wifi: ath9k: fix OOB access from firmware tx status queue ID {CVE-2026-74408}\n- ALSA: firewire: isight: bound the sample count to the packet payload {CVE-2026-64483}\n- sctp: validate embedded address parameter length {CVE-2026-74287}\n- netfilter: nf_queue: do not allow packet truncation below transport header offset {CVE-2022-36946}\n- nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129}\n- iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() {CVE-2026-68329}\n- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}\n- btrfs: abort transaction on failure to update inode for hole punching and reflinking {CVE-2026-98269}\n- smb: client: reject userspace cifs.idmap descriptions {CVE-2026-97564}\n- netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}\n- dmaengine: wait for RCU readers before releasing dma_device {CVE-2026-98342}\n- ALSA: 6fire: fix OOB write from device-reported iso length {CVE-2026-98312}\n- ALSA: core: Fix potential UAF after asynchronous card release {CVE-2026-98266}\n- wifi: iwlwifi: mvm: Fix a memory corruption issue {CVE-2023-52531}\n- sctp: fix err_chunk memory leaks in INIT handling {CVE-2026-72413}\n- ALSA: us122l: Prevent write upgrades for read mappings {CVE-2026-97931}\n- configfs: unhash the dentry before dropping the item in rmdir {CVE-2026-97949}\n- wifi: mwifiex: validate scan response extents {CVE-2026-98185}\n- IB/mlx4: Fix use-after-free on pkey sysfs registration failure {CVE-2026-98217}\n- Bluetooth: L2CAP: validate connectionless PSM length {CVE-2026-97408}\n- ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc() {CVE-2022-48702}\n- usb: xusbatm: don't rely on id table pointer arithmetic {CVE-2026-97539}\n- KEYS: encrypted: fix integer overflow of datablob_len {CVE-2026-98222}\n- wifi: brcmsmac: fix UAF in brcms_free_timer() {CVE-2026-98196}\n- ACPICA: Fix use-after-free in acpi_ds_terminate_control_method() {CVE-2026-97455}\n- ACPICA: Enhance buffer validation in acpi_ut_walk_aml_resources() {CVE-2026-97445}\n- netfilter: nf_conntrack_sip: fix OOB read in sip_skip_whitespace() {CVE-2026-98077}\n- Update to kernel 3.10.0-1160.167.1.el7\n- netfilter: synproxy: refresh tcphdr after skb_ensure_writable {CVE-2026-64007}\n- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O {CVE-2025-40026}","modified":"2026-10-26T09:43:34.558451639Z","published":"2026-10-17T11:25:59Z","upstream":["CVE-2022-36946","CVE-2022-48702","CVE-2023-52531","CVE-2025-40026","CVE-2026-64007","CVE-2026-64471","CVE-2026-64483","CVE-2026-68329","CVE-2026-72129","CVE-2026-72323","CVE-2026-72383","CVE-2026-72413","CVE-2026-72476","CVE-2026-74287","CVE-2026-74359","CVE-2026-74408","CVE-2026-74444","CVE-2026-74479","CVE-2026-74498","CVE-2026-74505","CVE-2026-74550","CVE-2026-74556","CVE-2026-74569","CVE-2026-80536","CVE-2026-80584","CVE-2026-80622","CVE-2026-80681","CVE-2026-81001","CVE-2026-81003","CVE-2026-89448","CVE-2026-89542","CVE-2026-89548","CVE-2026-89549","CVE-2026-89550","CVE-2026-89553","CVE-2026-89574","CVE-2026-89575","CVE-2026-89633","CVE-2026-89637","CVE-2026-89699","CVE-2026-89778","CVE-2026-89786","CVE-2026-89893","CVE-2026-90011","CVE-2026-90033","CVE-2026-90057","CVE-2026-90116","CVE-2026-90203","CVE-2026-90329","CVE-2026-90413","CVE-2026-90414","CVE-2026-90421","CVE-2026-93117","CVE-2026-93189","CVE-2026-97408","CVE-2026-97445","CVE-2026-97455","CVE-2026-97536","CVE-2026-97539","CVE-2026-97564","CVE-2026-97608","CVE-2026-97931","CVE-2026-97949","CVE-2026-98077","CVE-2026-98185","CVE-2026-98196","CVE-2026-98217","CVE-2026-98222","CVE-2026-98266","CVE-2026-98269","CVE-2026-98312","CVE-2026-98342","CVE-2026-98354","CVE-2026-98375","CVE-2026-99999"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1792236273.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-36946"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48702"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52531"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40026"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64471"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64483"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68329"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72129"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72323"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72383"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72413"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72476"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74287"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74359"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74444"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74479"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74498"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74505"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74550"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74556"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74569"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80536"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80584"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80622"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80681"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80829"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81001"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81003"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89448"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89542"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89548"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89549"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89550"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89553"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89574"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89575"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89633"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89637"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89699"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89778"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89786"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89893"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90011"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90033"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90057"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90116"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90203"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90329"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90413"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90414"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90421"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93117"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93189"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97408"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97445"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97455"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97536"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97539"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97564"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97608"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97931"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97949"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98077"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98185"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98186"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98196"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98217"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98222"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98266"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98269"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98312"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98342"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98354"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98375"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bpftool?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-doc?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/perf?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/python-perf?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.167.1.el7.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1792236273.json"}}],"schema_version":"1.9.0"}