CLSA-2026-1768774361

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1768774361.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1768774361
Upstream
Published
2026-01-18T22:12:45Z
Modified
2026-05-29T01:37:04.845954870Z
Summary
kernel: Fix of 31 CVEs
Details
  • ip6vti: fix slab-use-after-free in decodesession6 {CVE-2023-53821}
  • ACPICA: Add AMLNOOPERAND_RESOLVE flag to Timer {CVE-2023-53395}
  • wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
  • ext4: add bounds checking in getmaxinlinexattrvalue_size() {CVE-2023-53285}
  • md/raid10: fix null-ptr-deref in raid10syncrequest {CVE-2023-53832}
  • dm flakey: fix a crash with invalid table line {CVE-2023-53786}
  • wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
  • ext4: fix bug_on in __estreesearch caused by bad boot loader inode {CVE-2022-50638}
  • USB: usbtmc: Fix direction for 0-length ioctl control messages {CVE-2023-53761}
  • scsi: ses: Fix slab-out-of-bounds in sesenclosuredata_process() {CVE-2023-53803}
  • ALSA: usb-audio: Fix out-of-bounds read in sndusbgetaudioformatuac3() {CVE-2025-38249}
  • md/raid1: Fix stack memory use after return in raid1_reshape {CVE-2025-38445}
  • atm: clip: Fix infinite recursive call of clip_push(). {CVE-2025-38459}
  • dm cache: free background tracker's queued work in {CVE-2023-53765}
  • drm/amdkfd: Fix UBSAN shift-out-of-bounds warning {CVE-2021-4460}
  • drm/vmwgfx: Validate the box size for the snooped cursor {CVE-2022-36280,CVE-2022-50440}
  • vsock: Do not allow binding to VMADDRPORTANY {CVE-2025-38618}
  • ice: set tx_tstamps when creating new Tx rings via ethtool {CVE-2022-50710}
  • media: dvb-frontends: avoid stack overflow warnings with clang {CVE-2024-27075}
  • PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free {CVE-2023-53446}
  • cifs: Fix warning and UAF when destroy the MR list {CVE-2023-53427}
  • sctp: fix a potential overflow in sctpifwdtsnskip {CVE-2023-53372}
  • md/raid10: check slab-out-of-bounds in mdbitmapget_counter {CVE-2023-53357}
  • lwt: Fix return values of BPF xmit ops {CVE-2023-53338}
  • ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
  • ACPICA: Fix use-after-free in acpiutcopyipackageto_ipackage() {CVE-2022-50423}
  • Bluetooth: hcisysfs: Fix attempting to call deviceadd multiple times {CVE-2022-50419}
  • ACPICA: Fix error code path in acpidscallcontrolmethod() {CVE-2022-50411}
  • ata: ahci: Match EMMAXSLOTS with SATAPMPMAX_PORTS {CVE-2022-50315}
  • wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace {CVE-2023-54286}
References

Affected packages