CLSA-2026-1767867718
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1767867718.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1767867718
- Upstream
- Published
- 2026-01-08T10:22:01Z
- Modified
- 2026-06-01T00:33:27.944624227Z
- Summary
- kernel: Fix of 16 CVEs
- Details
-
- crypto: lzo - Fix compression buffer overrun {CVE-2025-38068}
- wifi: brcmfmac: fix use-after-free when rescheduling brcmfbtcoexinfo work {CVE-2025-39863}
- NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
- tcp: Clear tcpsk(sk)->fastopenrsk in tcp_disconnect(). {CVE-2025-40186}
- can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}
- Squashfs: check return result of sbminblocksize {CVE-2025-38415}
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors {CVE-2025-39757}
- ext4: fix undefined behavior in bit shift for ext4checkflag_values {CVE-2022-50403}
- scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
- fs: fix UAF/GPF bug in nilfsmdtdestroy {CVE-2022-2978}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}
- ipv6: Fix infinite recursion in fib6dumpdone(). {CVE-2024-35886}
- wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}
- atm: Release atmdevmutex after removing procfs in atmdevderegister(). {CVE-2025-38245}
- atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
- smb: client: Fix use-after-free in cifsfilldirent {CVE-2025-38051}
- References