CLSA-2026-1778276927
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1778276927.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1778276927
- Upstream
- Published
- 2026-05-08T21:48:53Z
- Modified
- 2026-06-01T00:32:52.200599873Z
- Summary
- kernel: Fix of 33 CVEs
- Details
-
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
- xfrm: esp: avoid in-place decrypt on shared skb frags
- ext4: avoid OOB when system.data xattr changes underneath the filesystem {CVE-2024-47701}
- gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898}
- wifi: mt76: Fix possible oob access in mt76connac2macwritetxwi_80211() {CVE-2026-23315}
- net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check {CVE-2026-23447}
- Squashfs: check metadata block offset is within range {CVE-2026-23388}
- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397}
- ring-buffer: Sync IRQ works before buffer destruction {CVE-2023-53587}
- Bluetooth: btusb: revert use of devm_kzalloc in btusb {CVE-2025-71082}
- Bluetooth: afbluetooth: Fix Use-After-Free in btsock_recvmsg {CVE-2024-21803}
- crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612}
- firmware_loader: Block path traversal {CVE-2024-47742}
- EDAC/igen6: Avoid segmentation fault on module unload {CVE-2024-56708}
- ceph: prevent use-after-free in encodecapmsg() {CVE-2024-26689}
- firmware: armscmi: Fix slab-use-after-free in scmibus_notifier() {CVE-2024-53068}
- tcpbpf: Fix the skmemuncharge logic in tcpbpf_sendmsg {CVE-2024-56633}
- bpf: Fix array bounds error with may_goto {CVE-2025-22087}
- wifi: rtw88: use ieee80211purgetx_queue() to purge TX skb {CVE-2024-56609}
- loop: Fix use-after-free issues {CVE-2023-53111}
- ubi: ensure that VID header offset + VID header size <= alloc, size {CVE-2023-53265}
- net: fec: Better handle pmruntimeget() failing in .remove() {CVE-2023-53308}
- udf: Do not bother merging very long extents {CVE-2023-53506}
- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}
- binfmtmisc: fix shift-out-of-bounds in checkspecial_flags {CVE-2022-50497}
- virtio-mmio: don't break lifecycle of vm_dev {CVE-2023-53515}
- tracing/histograms: Add histograms to hist_vars if they have referenced variables {CVE-2023-53560}
- netfilter: conntrack: Avoid nfcthelper_hash uses after free {CVE-2023-53619}
- gfs2: Fix possible data races in gfs2showoptions() {CVE-2023-53622}
- net/mlx5: Fix ECVF vports unload on shutdown flow {CVE-2025-38109}
- RDMA/irdma: avoid invalid read in irdmanetevent {CVE-2025-71133}
- e1000: fix OOB in e1000tbishould_accept() {CVE-2025-71093}
- ALSA: scarlett2: Fix buffer overflow in config retrieval {CVE-2026-23078}
- bonding: limit BONDMODE8023AD to Ethernet devices {CVE-2026-23099}
- svcrdma: bound check rq_pages index in inline path {CVE-2025-71068}
- References