{"id":"CLSA-2026-1792976327","summary":"kernel: Fix of 33 CVEs","details":"- s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block {CVE-2026-98399}\n- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}\n- hwrng: geode - Fix PCI device refcount leak {CVE-2022-50659}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() {CVE-2026-80829}\n- ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800}\n- btrfs: inode: Verify inode mode to avoid NULL pointer dereference {CVE-2019-19816}\n- sctp: avoid livelock while updating retransmit path {CVE-2026-98614}\n- scsi: libiscsi_tcp: Check the data direction of a Data-In PDU {CVE-2026-98479}\n- Bluetooth: L2CAP: validate frame length before control and FCS access {CVE-2026-98457}\n- net: atl1c: fix soft lockup on out-of-range tpd_cons read {CVE-2026-98489}\n- net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read {CVE-2026-98488}\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough {CVE-2026-98602}\n- ipvs: filter some flags received in the backup server {CVE-2026-98794}\n- sctp: hold asoc or transport before mod_timer() in timer handlers {CVE-2026-98586}\n- Bluetooth: hci_sock: validate event length before filtering {CVE-2026-98461}\n- Bluetooth: hci_sock: reject out-of-range OCF values {CVE-2026-98460}\n- net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494}\n- vt: skip screen update for DEC alignment test on backgroup consoles {CVE-2026-98838}\n- USB: serial: fix dynamic id driver deregistration race {CVE-2026-98697}\n- net: usb: catc: bound the RX packet length in catc_rx_done() {CVE-2026-98612}\n- sctp: discard the rest of the packet on a stale-cookie error {CVE-2026-98548}\n- media: av7110: prevent underflow in write_ts_to_decoder() {CVE-2023-54284}\n- fbcon: Avoid OOB font access if console rotation fails {CVE-2026-46191}\n- wifi: b43legacy: enforce bounds check on firmware key index in RX path {CVE-2026-46163}\n- wifi: b43: enforce bounds check on firmware key index in b43_rx() {CVE-2026-46122}\n- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}\n- scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read {CVE-2026-89846}\n- ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}\n- nfsd: fix posix_acl leak on SETACL decode failure {CVE-2026-53397}\n- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- ip6_tunnel: clear skb2-\u003ecb[] in ip6ip6_err() {CVE-2026-74597}\n- selinux: require every boolean value to be defined {CVE-2026-80913}\n- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}","modified":"2026-10-26T09:43:15.418069487Z","published":"2026-10-26T00:59:27Z","upstream":["CVE-2019-19816","CVE-2022-50659","CVE-2023-53800","CVE-2023-54284","CVE-2026-45920","CVE-2026-46122","CVE-2026-46163","CVE-2026-46191","CVE-2026-46294","CVE-2026-53002","CVE-2026-53004","CVE-2026-53195","CVE-2026-53397","CVE-2026-74597","CVE-2026-74752","CVE-2026-80829","CVE-2026-80913","CVE-2026-89846","CVE-2026-98399","CVE-2026-98457","CVE-2026-98460","CVE-2026-98461","CVE-2026-98479","CVE-2026-98488","CVE-2026-98489","CVE-2026-98494","CVE-2026-98548","CVE-2026-98586","CVE-2026-98602","CVE-2026-98612","CVE-2026-98614","CVE-2026-98697","CVE-2026-98794","CVE-2026-98838"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792976327.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19813"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-50659"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53800"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-54284"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45920"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46122"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46163"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46191"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46294"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53002"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53004"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53195"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53397"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74597"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74752"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-80913"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89846"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98399"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98457"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98460"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98461"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98479"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98488"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98489"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98494"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98548"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98586"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98602"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98612"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98614"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98697"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98794"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98838"}],"affected":[{"package":{"name":"kernel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-abi-whitelists","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-abi-whitelists?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-doc","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-doc?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-firmware","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-firmware?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:6","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.32-754.35.8.el6.tuxcare.els39"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"}}],"schema_version":"1.9.0"}