CLSA-2026-1777643521
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1777643521.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1777643521
- Upstream
- Published
- 2026-10-21T07:52:57Z
- Modified
- 2026-10-26T09:43:31Z
- Summary
- Fix of 13 CVEs
- Details
-
[ Ubuntu: 4.15.0-255.266 ]
- CVE-2026-31431
- crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-31431}
- crypto: scatterwalk - Backport memcpy_sglist() {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place {CVE-2026-31431}
- crypto: aead - prevent using AEADs without setting key
- crypto: algif_aead - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
- crypto: algif_aead - Revert to operating out-of-place {CVE-2026-31431}
- crypto: algif_aead - snapshot IV for async AEAD requests {CVE-2026-31431}
- crypto: authenc - use memcpy_sglist() instead of null skcipher {CVE-2026-31431}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption {CVE-2026-31431}
- CVE-2022-49267
- mmc: core: Do not export MMC_NAME= and MODALIAS=mmc:block for SDIO cards {CVE-2022-49267}
- mmc: core: Export device/vendor ids from Common CIS for SDIO cards {CVE-2022-49267}
- mmc: sdio: Extend sdio_config_attr macro and use it also for modalias {CVE-2022-49267}
- mmc: sdio: Parse CISTPL_VERS_1 major and minor revision numbers {CVE-2022-49267}
- CVE-2026-23089
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089}
- CVE-2026-23074
- net/sched: Enforce that teql can only be used as root qdisc {CVE-2026-23074}
- CVE-2025-39853
- i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}
- CVE-2025-38677
- f2fs: fix to avoid out-of-boundary access in dnode page {CVE-2025-38677}
- CVE-2025-38652
- f2fs: fix to avoid out-of-boundary access in devs.path {CVE-2025-38652}
- CVE-2025-38415
- Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}
- CVE-2025-38226
- media: vivid: Change the siize of the composing {CVE-2025-38226}
- CVE-2025-38211
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
- CVE-2023-53075
- ftrace: Fix invalid address access in lookup_rec() when index >= FTRACE_MAX_RECORDS {CVE-2023-53075}
- CVE-2023-53322
- scsi: qla2xxx: Wait for io return on terminate rport {CVE-2023-53322}
- CVE-2025-71162
- dmaengine: tegra-adma: Fix use-after-free {CVE-2025-71162}
- Miscellaneous upstream changes
- tuxcare: update version
- CVE-2026-31431
- References
-
- https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1777643521.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-53075
- https://nvd.nist.gov/vuln/detail/CVE-2023-53322
- https://nvd.nist.gov/vuln/detail/CVE-2025-38211
- https://nvd.nist.gov/vuln/detail/CVE-2025-38226
- https://nvd.nist.gov/vuln/detail/CVE-2025-38415
- https://nvd.nist.gov/vuln/detail/CVE-2025-38652
- https://nvd.nist.gov/vuln/detail/CVE-2025-38677
- https://nvd.nist.gov/vuln/detail/CVE-2025-39853
- https://nvd.nist.gov/vuln/detail/CVE-2025-71162
- https://nvd.nist.gov/vuln/detail/CVE-2026-23074
- https://nvd.nist.gov/vuln/detail/CVE-2026-23089
- https://nvd.nist.gov/vuln/detail/CVE-2026-31431
- https://nvd.nist.gov/vuln/detail/CVE-2026-43078
Affected packages
TuxCare:Ubuntu:16.04
linux-buildinfo-4.15.0-255-tuxcare.els53-generic
linux-buildinfo-4.15.0-255-tuxcare.els53-lowlatency
Package
- Name
- linux-buildinfo-4.15.0-255-tuxcare.els53-lowlatency
- Purl
- pkg:deb/tuxcare/linux-buildinfo-4.15.0-255-tuxcare.els53-lowlatency?distro=ubuntu-16.04
linux-cloud-tools-4.15.0-255-tuxcare.els53-generic
linux-cloud-tools-4.15.0-255-tuxcare.els53-lowlatency
Package
- Name
- linux-cloud-tools-4.15.0-255-tuxcare.els53-lowlatency
- Purl
- pkg:deb/tuxcare/linux-cloud-tools-4.15.0-255-tuxcare.els53-lowlatency?distro=ubuntu-16.04
linux-headers-4.15.0-255-tuxcare.els53
linux-headers-4.15.0-255-tuxcare.els53-generic
linux-headers-4.15.0-255-tuxcare.els53-lowlatency
linux-hwe-cloud-tools-4.15.0-255-tuxcare.els53
linux-hwe-tools-4.15.0-255-tuxcare.els53
linux-image-unsigned-4.15.0-255-tuxcare.els53-generic
Package
- Name
- linux-image-unsigned-4.15.0-255-tuxcare.els53-generic
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-255-tuxcare.els53-generic?distro=ubuntu-16.04
linux-image-unsigned-4.15.0-255-tuxcare.els53-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-255-tuxcare.els53-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-255-tuxcare.els53-lowlatency?distro=ubuntu-16.04
linux-modules-4.15.0-255-tuxcare.els53-generic
linux-modules-4.15.0-255-tuxcare.els53-lowlatency
linux-modules-extra-4.15.0-255-tuxcare.els53-generic
Package
- Name
- linux-modules-extra-4.15.0-255-tuxcare.els53-generic
- Purl
- pkg:deb/tuxcare/linux-modules-extra-4.15.0-255-tuxcare.els53-generic?distro=ubuntu-16.04