{"id":"CLSA-2026-1792243729","summary":"kernel: Fix of 53 CVEs","details":"- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}\n- vsock/vmci: fix UAF when peer resets connection during handshake {CVE-2026-64115}\n- af_unix: Fix UAF read of tail-\u003elen in unix_stream_data_wait() {CVE-2026-64109}\n- tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done {CVE-2026-63801}\n- tipc: fix double-free in tipc_buf_append() {CVE-2026-52993}\n- Drivers: hv: vmbus: Use after free in __vmbus_open() {CVE-2021-47049}\n- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}\n- scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown {CVE-2026-97536}\n- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() {CVE-2026-46209}\n- drm: Remove plane hsub/vsub alignment requirement for core helpers {CVE-2026-46209}\n- nfsd: make sure exp active before svc_export_show {CVE-2024-56558}\n- USB: serial: io_edgeport: cap received transmit credits {CVE-2026-68365}\n- ALSA: seq: close a re-opened queue timer in the destructor {CVE-2026-68202}\n- geneve: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-68142}\n- net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink {CVE-2026-63829}\n- drm/amd/display: Bound VBIOS record-chain walk loops {CVE-2026-53138}\n- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size {CVE-2026-53136}\n- RDMA/srp: Do not call scsi_done() from srp_abort() {CVE-2023-52515}\n- netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608}\n- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540}\n- RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354}\n- wifi: cfg80211: cancel sched scan results work on unregister {CVE-2026-68414}\n- ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF {CVE-2026-68398}\n- mm/khugepaged: fix -\u003eanon_vma race {CVE-2023-52935}\n- netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check {CVE-2026-52998}\n- drm/nouveau: fix u32 overflow in pushbuf reloc bounds check {CVE-2026-46006}\n- scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress {CVE-2023-52974}\n- drm/edid: fix OOB read in drm_parse_tiled_block() {CVE-2026-64546}\n- bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() {CVE-2026-64548}\n- NFSv4.2: fix LAYOUTSTATS send buffer exhaustion {CVE-2026-90103}\n- xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375}\n- Squashfs: check block offset is not negative {CVE-2026-90203}\n- tty: clear cdev pointer after cdev_add() failure {CVE-2026-90334}\n- wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length {CVE-2026-90382}\n- uio: Fix stale info pointer in failed registration path {CVE-2026-93054}\n- md/raid5-ppl: fix use-after-free in ppl_do_flush() {CVE-2026-93262}\n- net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689}\n- ipvs: clear IPv4 options after rebasing tunnel ICMP errors {CVE-2026-74669}\n- net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers {CVE-2026-74700}\n- ALSA: usx2y: bound the hwdep mmap fault offset {CVE-2026-74641}\n- ALSA: usx2y: Fix potential leaks of uninitialized memory {CVE-2026-74641}\n- bpf, sockmap: Fix sk_redir use-after-free in send verdict {CVE-2026-74589}\n- net/packet: reset the MAC header on the packet-socket transmit path {CVE-2026-74667}\n- drm/amdgpu: reject oversized IBs with per-ring packet limits {CVE-2026-80576}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- ipvlan: inherit needed_headroom and needed_tailroom from phy_dev {CVE-2026-74744}\n- nvmet: fix pre-auth out-of-bounds heap read in Discovery Get Log Page {CVE-2026-64320}\n- tipc: read le-\u003elink under the node lock in tipc_node_link_down() {CVE-2026-74609}\n- crypto: pcrypt - Fix handling of MAY_BACKLOG requests {CVE-2026-43493}\n- libceph: define and enforce CEPH_MAX_KEY_LEN {CVE-2026-43304}\n- nvme-tcp: fix UAF when detecting digest errors {CVE-2022-48686}\n- isdn: cpai: check ctr-\u003ecnr to avoid array index out of bound {CVE-2021-4439}\n- igbvf: fix double free in `igbvf_probe` {CVE-2021-47589}\n- scsi: mpt3sas: Fix kernel panic during drive powercycle test {CVE-2021-47565}\n- drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}","modified":"2026-10-26T09:43:54.281748239Z","published":"2026-10-17T15:34:24Z","upstream":["CVE-2021-4439","CVE-2021-47049","CVE-2021-47565","CVE-2021-47589","CVE-2022-48686","CVE-2023-52515","CVE-2023-52935","CVE-2023-52974","CVE-2024-56558","CVE-2025-38361","CVE-2026-43304","CVE-2026-43493","CVE-2026-46006","CVE-2026-46209","CVE-2026-46294","CVE-2026-52993","CVE-2026-52998","CVE-2026-53136","CVE-2026-53138","CVE-2026-63801","CVE-2026-63829","CVE-2026-64109","CVE-2026-64115","CVE-2026-64320","CVE-2026-64546","CVE-2026-64548","CVE-2026-68142","CVE-2026-68202","CVE-2026-68365","CVE-2026-68398","CVE-2026-68414","CVE-2026-74589","CVE-2026-74609","CVE-2026-74641","CVE-2026-74667","CVE-2026-74669","CVE-2026-74689","CVE-2026-74700","CVE-2026-74744","CVE-2026-74752","CVE-2026-80576","CVE-2026-90103","CVE-2026-90203","CVE-2026-90334","CVE-2026-90382","CVE-2026-93054","CVE-2026-93262","CVE-2026-97536","CVE-2026-97540","CVE-2026-97608","CVE-2026-98354","CVE-2026-98375","CVE-2026-99999"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1792243729.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-43389"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4439"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47049"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47565"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47589"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48686"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2162"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52515"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52935"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52974"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-56558"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38361"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43304"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43493"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46006"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46209"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46294"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52993"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52998"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53136"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53138"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63801"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63829"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64109"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64115"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64320"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68142"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68202"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68365"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68398"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68414"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74589"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74609"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74641"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74667"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74669"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74689"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74700"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74744"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74752"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80576"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90103"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90203"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90334"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90382"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93054"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93262"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97536"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97540"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97608"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98354"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98375"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/bpftool?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-core","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-core?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-cross-headers","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-cross-headers?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug-core","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug-core?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug-modules","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug-modules?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug-modules-extra","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug-modules-extra?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-debug-modules-internal","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-debug-modules-internal?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-headers?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-ipaclones-internal","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-ipaclones-internal?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-modules","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-modules?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-modules-extra","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-modules-extra?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-modules-internal","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-modules-internal?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-selftests-internal","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-selftests-internal?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-tools?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/perf?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}},{"package":{"name":"python3-perf","ecosystem":"TuxCare:CentOS:8.4","purl":"pkg:rpm/tuxcare/python3-perf?distro=centos-8.4"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.18.0-305.25.1.el8_4.tuxcare.els49"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1792243729.json"}}],"schema_version":"1.9.0"}