CLSA-2026-1777637310
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2026-1777637310.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1777637310
- Upstream
- Published
- 2026-05-01T12:08:35Z
- Modified
- 2026-06-04T10:04:05.922937273Z
- Summary
- Fix of 13 CVEs
- Details
-
- CVE-2026-31431
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpysglist() {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
- crypto: aead - prevent using AEADs without setting key
- crypto: algifaead - use memcpysglist() instead of null skcipher {CVE-2026-31431}
- crypto: algifaead - Revert to operating out-of-place {CVE-2026-31431}
- crypto: algifaead - snapshot IV for async AEAD requests {CVE-2026-31431}
- crypto: authenc - use memcpysglist() instead of null skcipher {CVE-2026-31431}
- crypto: afalg - Fix page reassignment overflow in afalgpulltsgl {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
- CVE-2022-49267
- mmc: core: Do not export MMC_NAME= and MODALIAS=mmc:block for SDIO cards {CVE-2022-49267}
- mmc: core: Export device/vendor ids from Common CIS for SDIO cards {CVE-2022-49267}
- mmc: sdio: Extend sdioconfigattr macro and use it also for modalias {CVE-2022-49267}
- mmc: sdio: Parse CISTPLVERS1 major and minor revision numbers {CVE-2022-49267}
- CVE-2026-23089
- ALSA: usb-audio: Fix use-after-free in sndusbmixer_free() {CVE-2026-23089}
- CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
- CVE-2025-39853
- i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
- CVE-2025-38677
- f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677}
- CVE-2025-38652
- f2fs: fix to avoid out-of-boundary access in devs.path {CVE-2025-38652}
- CVE-2025-38415
- Squashfs: check return result of sbminblocksize {CVE-2025-38415}
- CVE-2025-38226
- media: vivid: Change the siize of the composing {CVE-2025-38226}
- CVE-2025-38211
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
- CVE-2023-53075
- ftrace: Fix invalid address access in lookuprec() when index >= FTRACEMAX_RECORDS {CVE-2023-53075}
- CVE-2023-53322
- scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
- CVE-2025-71162
- dmaengine: tegra-adma: Fix use-after-free {CVE-2025-71162}
- Miscellaneous upstream changes
- tuxcare: update version
- CVE-2026-31431
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-255-tuxcare.els43-generic
linux-buildinfo-4.15.0-255-tuxcare.els43-lowlatency
linux-cloud-tools-4.15.0-255-tuxcare.els43
linux-cloud-tools-4.15.0-255-tuxcare.els43-generic
linux-cloud-tools-4.15.0-255-tuxcare.els43-lowlatency
linux-cloud-tools-common
linux-doc
linux-headers-4.15.0-255-tuxcare.els43
linux-headers-4.15.0-255-tuxcare.els43-generic
linux-headers-4.15.0-255-tuxcare.els43-lowlatency
linux-image-unsigned-4.15.0-255-tuxcare.els43-generic
linux-image-unsigned-4.15.0-255-tuxcare.els43-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-255-tuxcare.els43-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-255-tuxcare.els43-lowlatency?distro=ubuntu-18.04