{"id":"CLSA-2026-1792249415","summary":"kernel-uek: Fix of 17 CVEs","details":"- ipv4: validate checksum_start before completing checksum {CVE-2026-99999}\n- nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366}\n- nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196}\n- tracing: Set the trace clock before registering the histogram trigger {CVE-2026-97935}\n- tracing: Fix use-after-free with same-name named triggers {CVE-2026-89746}\n- svcrdma: Reject inline replies that overflow the pull-up buffer {CVE-2026-89530}\n- RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path {CVE-2026-74377}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- ceph: fix UAF in check_new_map() on session freed during unlock {CVE-2026-89654}\n- dm array: validate array block headers on read {CVE-2026-89574}\n- usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117}\n- wifi: ath9k_htc: don't store usb_device_id {CVE-2026-97541}\n- fbdev: fix use-after-free in store_modes() {CVE-2026-63826}\n- fbcon: Set fb_display[i]-\u003emode to NULL when the mode is released {CVE-2025-40323}\n- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835}\n- tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}","modified":"2026-10-26T09:43:49.713985039Z","published":"2026-10-17T15:04:02Z","upstream":["CVE-2025-40323","CVE-2025-68366","CVE-2026-45835","CVE-2026-63826","CVE-2026-64543","CVE-2026-74377","CVE-2026-74752","CVE-2026-89530","CVE-2026-89574","CVE-2026-89654","CVE-2026-89746","CVE-2026-93117","CVE-2026-93196","CVE-2026-97541","CVE-2026-97935","CVE-2026-99999"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792249415.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40323"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-68366"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45835"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63826"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64543"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64557"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74377"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74752"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89530"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89574"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89654"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93117"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-93196"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97541"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97918"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-97935"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-container","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-container-debug","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-debug","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-debug-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-headers","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"kernel-uek-tools","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.361.1.el7uek.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"}}],"schema_version":"1.9.0"}