CLSA-2026-1777636990
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1777636990.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1777636990
- Upstream
- Published
- 2026-05-01T12:03:16Z
- Modified
- 2026-06-04T10:03:18.222507470Z
- Summary
- Fix of 9 CVEs
- Details
-
- CVE-2026-31431
- crypto: scatterwalk - Backport memcpysglist() {CVE-2026-31431}
- crypto: algifaead - use memcpysglist() instead of null skcipher {CVE-2026-31431}
- crypto: algifaead - Revert to operating out-of-place {CVE-2026-31431}
- crypto: algifaead - snapshot IV for async AEAD requests {CVE-2026-31431}
- crypto: authenc - use memcpysglist() instead of null skcipher {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
- crypto: afalg - Fix page reassignment overflow in afalgpulltsgl {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
- CVE-2022-49720
- block: Fix handling of offline queues in blkmqallocrequesthctx() {CVE-2022-49720}
- CVE-2024-49960
- ext4: fix timer use-after-free on failed mount {CVE-2024-49960}
- CVE-2025-71086
- net: rose: fix invalid array index in rosekillby_device() {CVE-2025-71086}
- CVE-2026-23073
- wifi: rsi: Fix memory corruption due to not set vif driver data size {CVE-2026-23073}
- CVE-2022-49900
- i2c: piix4: Fix adapter not be removed in piix4_remove() {CVE-2022-49900}
- CVE-2022-43945
- NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945}
- Miscellaneous upstream changes
- team: fix check for port enabled in teamqueueoverrideportprio_changed() {CVE-2025-71091}
- scsi: aic94xx: fix use-after-free in device removal path {CVE-2025-71075}
- tuxcare: update version
- CVE-2026-31431
- References