CLSA-2026-1783362244
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1783362244.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1783362244
- Upstream
CVE (121)
- CVE-2021-47606
- CVE-2022-49028
- CVE-2022-49308
- CVE-2022-49675
- CVE-2022-49731
- CVE-2022-49812
- CVE-2022-49890
- CVE-2022-50008
- CVE-2022-50042
- CVE-2022-50251
- CVE-2022-50472
- CVE-2022-50473
- CVE-2022-50511
- CVE-2022-50675
- CVE-2022-50704
- CVE-2023-52463
- CVE-2023-52478
- CVE-2023-52739
- CVE-2023-52778
- CVE-2023-52887
- CVE-2023-53001
- CVE-2023-53070
- CVE-2023-53087
- CVE-2023-53089
- CVE-2023-53114
- CVE-2023-53121
- CVE-2023-53134
- CVE-2023-53186
- CVE-2023-53421
- CVE-2023-53441
- CVE-2023-53531
- CVE-2023-53625
- CVE-2023-53704
- CVE-2023-53753
- CVE-2023-53989
- CVE-2023-54004
- CVE-2023-54238
- CVE-2023-54265
- CVE-2023-54269
- CVE-2023-54302
- CVE-2023-54324
- CVE-2024-26633
- CVE-2024-26680
- CVE-2024-26920
- CVE-2024-26922
- CVE-2024-26976
- CVE-2024-35989
- CVE-2024-36933
- CVE-2024-38594
- CVE-2024-41056
- CVE-2024-42289
- CVE-2024-43880
- CVE-2024-46679
- CVE-2024-47692
- CVE-2024-47713
- CVE-2024-49870
- CVE-2024-49878
- CVE-2024-49905
- CVE-2024-49927
- CVE-2024-49959
- CVE-2024-49973
- CVE-2024-50108
- CVE-2024-50182
- CVE-2024-53135
- CVE-2024-53136
- CVE-2024-53140
- CVE-2024-53190
- CVE-2024-53215
- CVE-2024-56568
- CVE-2024-56623
- CVE-2024-56647
- CVE-2024-57977
- CVE-2024-58053
- CVE-2024-58071
- CVE-2025-21690
- CVE-2025-21708
- CVE-2025-21885
- CVE-2025-22062
- CVE-2025-37801
- CVE-2025-37805
- CVE-2025-37859
- CVE-2025-37911
- CVE-2025-38127
- CVE-2025-38215
- CVE-2025-38441
- CVE-2025-38539
- CVE-2025-38681
- CVE-2025-39829
- CVE-2025-39850
- CVE-2025-40134
- CVE-2025-40308
- CVE-2025-71077
- CVE-2025-71273
- CVE-2026-23126
- CVE-2026-23212
- CVE-2026-23290
- CVE-2026-23300
- CVE-2026-23312
- CVE-2026-23365
- CVE-2026-23399
- CVE-2026-23442
- CVE-2026-23452
- CVE-2026-31400
- CVE-2026-31424
- CVE-2026-31681
- CVE-2026-31684
- CVE-2026-31709
- CVE-2026-31738
- CVE-2026-31788
- CVE-2026-43066
- CVE-2026-43088
- CVE-2026-43156
- CVE-2026-43262
- CVE-2026-43279
- CVE-2026-43429
- CVE-2026-43436
- CVE-2026-43445
- CVE-2026-43448
- CVE-2026-43484
- CVE-2026-45835
- CVE-2026-46113
- Published
- 2026-10-19T16:01:51Z
- Modified
- 2026-10-26T09:43:36Z
- Summary
- kernel: Fix of 122 CVEs
- Details
-
- KVM: x86: Fix shadow paging use-after-free due to unexpected role {CVE-2026-46113}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN {CVE-2026-46113}
- Bluetooth: bcsp: receive data only if registered {CVE-2025-40308}
- xen/privcmd: unregister xenstore notifier on module exit {CVE-2026-31788}
- xen/privcmd: restrict usage in unprivileged domU {CVE-2026-31788}
- USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts {CVE-2026-43429}
- net: usb: rtl8150: enable basic endpoint checking {CVE-2025-21708}
- net: usb: kaweth: validate USB endpoints {CVE-2026-23312}
- net: usb: kalmia: validate USB endpoints {CVE-2026-23365}
- net: usb: pegasus: validate USB endpoints {CVE-2026-23290}
- net: usb: pegasus: enable basic endpoint checking {CVE-2026-43156}
- USB: usbcore: Introduce usb_bulk_msg_killable() {CVE-2026-43429}
- USB: core: Add routines for endpoint checks in old drivers {CVE-2026-43156}
- nf_tables: nft_dynset: fix possible stateful expression memleak in error path {CVE-2026-23399}
- tpm: Cap the number of PCR banks {CVE-2025-71077}
- clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() {CVE-2023-53704}
- dm: fix a race condition in retrieve_deps {CVE-2023-54324}
- ice: fix Tx scheduler error handling in XDP callback {CVE-2025-38127}
- mlx5: fix skb leak while fifo resync and push {CVE-2023-54238}
- mmc: vub300: fix return value check of mmc_add_host() {CVE-2022-50251}
- bonding: annotate data-races around slave->last_rx {CVE-2026-23212}
- RDMA/irdma: Fix data race on CQP completion stats {CVE-2023-54302}
- bpf: cpumap: Fix memory leak in cpu_map_update_elem {CVE-2023-53441}
- fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var {CVE-2025-38215}
- trace/fgraph: Fix the warning caused by missing unregister notifier {CVE-2025-39829}
- vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects {CVE-2025-39850}
- team: prevent adding a device which is already a team device lower {CVE-2024-58071}
- net: stmmac: move the EST lock to struct stmmac_priv {CVE-2024-38594}
- drm/amd/display: Disable PSR-SU on Parade 08-01 TCON too {CVE-2024-50108}
- rxrpc: Fix handling of received connection abort {CVE-2024-58053}
- bnxt_en: Fix out-of-bound memcpy() during ethtool -w {CVE-2025-37911}
- scsi: storvsc: Ratelimit warning logs to prevent VM denial of service {CVE-2025-21690}
- net: atlantic: Fix DMA mapping for PTP hwts ring {CVE-2024-26680}
- wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() {CVE-2024-47713}
- drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2) {CVE-2024-49905}
- dm: fix NULL pointer dereference in __dm_suspend() {CVE-2025-40134}
- smb: client: validate the whole DACL before rewriting it in cifsacl {CVE-2026-31709}
- PM: runtime: Fix a race condition related to device removal {CVE-2026-23452}
- ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces {CVE-2026-43436}
- nvme-pci: Fix race bug in nvme_poll_irqdisable() {CVE-2026-43448}
- sctp: add mutual exclusion in proc_sctp_do_udp_port() {CVE-2025-22062}
- cachefiles: fix dentry leak in cachefiles_open_file() {CVE-2024-49870}
- mm: revert "mm: shmem: fix data-race in shmem_getattr()" {CVE-2024-53136}
- memcg: fix soft lockup in the OOM process {CVE-2024-57977}
- resource: fix region_intersects() vs add_memory_driver_managed() {CVE-2024-49878}
- r8169: add tally counter fields added with RTL8125 {CVE-2024-49973}
- svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init() {CVE-2024-53215}
- ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths {CVE-2026-43066}
- wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band() {CVE-2025-71273}
- net: netlink: af_netlink: Prevent empty skb by adding a check on len. {CVE-2021-47606}
- extcon: Modify extcon device to be created after driver data is set {CVE-2022-49308}
- tick/nohz: unexport __init-annotated tick_nohz_full_setup() {CVE-2022-49675}
- bridge: switchdev: Fix memory leaks when changing VLAN protocol {CVE-2022-49812}
- capabilities: fix potential memleak on error path from vfs_getxattr_alloc() {CVE-2022-49890}
- net: genl: fix error path memory leak in policy dumping {CVE-2022-50042}
- kprobes: don't call disarm_kprobe() for disabled kprobes {CVE-2022-50008}
- lib/fonts: fix undefined behavior in bit shift for get_default_font {CVE-2022-50511}
- net: af_key: zero aligned sockaddr tail in PF_KEY exports {CVE-2026-43088}
- arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored {CVE-2022-50675}
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect {CVE-2023-52478}
- efivarfs: force RO when remounting if SetVariable is not supported {CVE-2023-52463}
- Fix page corruption caused by racy check in __free_pages {CVE-2023-52739}
- mptcp: deal with large GSO size {CVE-2023-52778}
- net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new {CVE-2023-52887}
- drm/i915/active: Fix misuse of non-idle barriers as fence trackers {CVE-2023-53087}
- ext4: fix task hung in ext4_xattr_delete_inode {CVE-2023-53089}
- ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent {CVE-2023-53070}
- bnxt_en: Avoid order-5 memory allocation for TPA data {CVE-2023-53134}
- tcp: tcp_make_synack() can be called from process context {CVE-2023-53121}
- i40e: Fix kernel crash during reboot when adapter is in recovery mode {CVE-2023-53114}
- skbuff: Fix a race between coalescing and releasing SKBs {CVE-2023-53186}
- blk-cgroup: Reinit blkg_iostat_set after clearing in blkcg_reset_stats() {CVE-2023-53421}
- arm64: mm: fix VA-range sanity check {CVE-2023-53989}
- ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() {CVE-2024-26633}
- SUNRPC: double free xprt_ctxt while still in use {CVE-2023-54269}
- KVM: Always flush async #PF workqueue when vCPU is being destroyed {CVE-2024-26976}
- drm/amdgpu: validate the parameters of bo mapping operations more clearly {CVE-2024-26922}
- tracing/trigger: Fix to return error if failed to alloc snapshot {CVE-2024-26920}
- dmaengine: idxd: Fix oops during rmmod on single-CPU platforms {CVE-2024-35989}
- nsh: Restore skb->{protocol,data,mac_header} for outer header in nsh_gso_segment(). {CVE-2024-36933}
- firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files {CVE-2024-41056}
- scsi: qla2xxx: During vport delete send async logout explicitly {CVE-2024-42289}
- ata: libata-core: fix NULL pointer deref in ata_host_alloc_pinfo() {CVE-2022-49731}
- ixgbevf: Fix resource leak in ixgbevf_init_module() {CVE-2022-49028}
- mmc: core: Avoid bitfield RMW for claim/retune flags {CVE-2026-43484}
- Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835}
- cpufreq: Init completion before kobject_init_and_add() {CVE-2022-50473}
- USB: gadget: Fix use-after-free during usb config switch {CVE-2022-50704}
- IB/mad: Don't call to function that might sleep while in atomic context {CVE-2022-50472}
- null_blk: fix poll request timeout handling {CVE-2023-53531}
- drm/i915/gvt: fix vgpu debugfs clean in remove {CVE-2023-53625}
- mlxsw: spectrum_acl_erp: Fix object nesting warning {CVE-2024-43880}
- drm/drm_vma_manager: Add drm_vma_node_allow_once() {CVE-2023-53001}
- drm/amd/display: fix mapping to non-allocated address {CVE-2023-53753}
- ipv6: Fix an uninit variable access bug in __ip6_make_skb() {CVE-2023-54265}
- udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). {CVE-2023-54004}
- netlink: terminate outstanding dump on socket close {CVE-2024-53140}
- KVM: VMX: Bury Intel PT virtualization (guest/host mode) behind CONFIG_BROKEN {CVE-2024-53135}
- scsi: qla2xxx: Fix use after free on unload {CVE-2024-56623}
- net: Fix icmp host relookup triggering ip_rt_bug {CVE-2024-56647}
- spi: spi-imx: Add check for spi_imx_setupxfer() {CVE-2025-37801}
- netdevsim: fix a race issue related to the operation on bpf_bound_progs list {CVE-2026-23126}
- net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop {CVE-2026-23300}
- ethtool: check device is present when getting link settings {CVE-2024-46679}
- nfsd: return -EINVAL when namelen is 0 {CVE-2024-47692}
- x86/ioapic: Handle allocation failures gracefully {CVE-2024-49927}
- jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error {CVE-2024-49959}
- secretmem: disable memfd_secret() if arch cannot set direct map {CVE-2024-50182}
- wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures {CVE-2024-53190}
- iommu/arm-smmu: Defer probe of clients after smmu device bound {CVE-2024-56568}
- RDMA/bnxt_re: Fix the page details for the srq created by kernel consumers {CVE-2025-21885}
- sound/virtio: Fix cancel_sync warnings on uninitialized work_structs {CVE-2025-37805}
- page_pool: avoid infinite loop to schedule delayed worker {CVE-2025-37859}
- netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto() {CVE-2025-38441}
- tracing: Add down_write(trace_event_sem) when adding trace event {CVE-2025-38539}
- mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() {CVE-2025-38681}
- ipv6: add NULL checks for idev in SRv6 paths {CVE-2026-23442}
- sunrpc: fix cache_request leak in cache_release {CVE-2026-31400}
- netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP {CVE-2026-31424}
- netfilter: xt_multiport: validate range encoding in checkentry {CVE-2026-31681}
- net: sched: act_csum: validate nested VLAN headers {CVE-2026-31684}
- vxlan: validate ND option lengths in vxlan_na_create {CVE-2026-31738}
- gfs2: fiemap page fault fix {CVE-2026-43262}
- e1000/e1000e: Fix leak in DMA error cleanup {CVE-2026-43445}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing {CVE-2026-43279}
- References
-
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1783362244.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-47606
- https://nvd.nist.gov/vuln/detail/CVE-2022-49028
- https://nvd.nist.gov/vuln/detail/CVE-2022-49308
- https://nvd.nist.gov/vuln/detail/CVE-2022-49675
- https://nvd.nist.gov/vuln/detail/CVE-2022-49731
- https://nvd.nist.gov/vuln/detail/CVE-2022-49812
- https://nvd.nist.gov/vuln/detail/CVE-2022-49890
- https://nvd.nist.gov/vuln/detail/CVE-2022-50008
- https://nvd.nist.gov/vuln/detail/CVE-2022-50042
- https://nvd.nist.gov/vuln/detail/CVE-2022-50251
- https://nvd.nist.gov/vuln/detail/CVE-2022-50472
- https://nvd.nist.gov/vuln/detail/CVE-2022-50473
- https://nvd.nist.gov/vuln/detail/CVE-2022-50511
- https://nvd.nist.gov/vuln/detail/CVE-2022-50675
- https://nvd.nist.gov/vuln/detail/CVE-2022-50704
- https://nvd.nist.gov/vuln/detail/CVE-2023-52463
- https://nvd.nist.gov/vuln/detail/CVE-2023-52478
- https://nvd.nist.gov/vuln/detail/CVE-2023-52739
- https://nvd.nist.gov/vuln/detail/CVE-2023-52778
- https://nvd.nist.gov/vuln/detail/CVE-2023-52887
- https://nvd.nist.gov/vuln/detail/CVE-2023-53070
- https://nvd.nist.gov/vuln/detail/CVE-2023-53087
- https://nvd.nist.gov/vuln/detail/CVE-2023-53089
- https://nvd.nist.gov/vuln/detail/CVE-2023-53114
- https://nvd.nist.gov/vuln/detail/CVE-2023-53121
- https://nvd.nist.gov/vuln/detail/CVE-2023-53134
- https://nvd.nist.gov/vuln/detail/CVE-2023-53186
- https://nvd.nist.gov/vuln/detail/CVE-2023-53421
- https://nvd.nist.gov/vuln/detail/CVE-2023-53441
- https://nvd.nist.gov/vuln/detail/CVE-2023-53531
- https://nvd.nist.gov/vuln/detail/CVE-2023-53625
- https://nvd.nist.gov/vuln/detail/CVE-2023-53704
- https://nvd.nist.gov/vuln/detail/CVE-2023-53753
- https://nvd.nist.gov/vuln/detail/CVE-2023-53989
- https://nvd.nist.gov/vuln/detail/CVE-2023-54004
- https://nvd.nist.gov/vuln/detail/CVE-2023-54238
- https://nvd.nist.gov/vuln/detail/CVE-2023-54265
- https://nvd.nist.gov/vuln/detail/CVE-2023-54269
- https://nvd.nist.gov/vuln/detail/CVE-2023-54302
- https://nvd.nist.gov/vuln/detail/CVE-2023-54324
- https://nvd.nist.gov/vuln/detail/CVE-2024-26633
- https://nvd.nist.gov/vuln/detail/CVE-2024-26680
- https://nvd.nist.gov/vuln/detail/CVE-2024-26920
- https://nvd.nist.gov/vuln/detail/CVE-2024-26922
- https://nvd.nist.gov/vuln/detail/CVE-2024-26976
- https://nvd.nist.gov/vuln/detail/CVE-2024-35989
- https://nvd.nist.gov/vuln/detail/CVE-2024-36933
- https://nvd.nist.gov/vuln/detail/CVE-2024-38594
- https://nvd.nist.gov/vuln/detail/CVE-2024-41056
- https://nvd.nist.gov/vuln/detail/CVE-2024-42289
- https://nvd.nist.gov/vuln/detail/CVE-2024-43880
- https://nvd.nist.gov/vuln/detail/CVE-2024-46679
- https://nvd.nist.gov/vuln/detail/CVE-2024-47692
- https://nvd.nist.gov/vuln/detail/CVE-2024-47713
- https://nvd.nist.gov/vuln/detail/CVE-2024-49870
- https://nvd.nist.gov/vuln/detail/CVE-2024-49878
- https://nvd.nist.gov/vuln/detail/CVE-2024-49905
- https://nvd.nist.gov/vuln/detail/CVE-2024-49908
- https://nvd.nist.gov/vuln/detail/CVE-2024-49927
- https://nvd.nist.gov/vuln/detail/CVE-2024-49959
- https://nvd.nist.gov/vuln/detail/CVE-2024-49973
- https://nvd.nist.gov/vuln/detail/CVE-2024-50108
- https://nvd.nist.gov/vuln/detail/CVE-2024-50182
- https://nvd.nist.gov/vuln/detail/CVE-2024-53135
- https://nvd.nist.gov/vuln/detail/CVE-2024-53136
- https://nvd.nist.gov/vuln/detail/CVE-2024-53140
- https://nvd.nist.gov/vuln/detail/CVE-2024-53190
- https://nvd.nist.gov/vuln/detail/CVE-2024-53215
- https://nvd.nist.gov/vuln/detail/CVE-2024-56568
- https://nvd.nist.gov/vuln/detail/CVE-2024-56623
- https://nvd.nist.gov/vuln/detail/CVE-2024-56647
- https://nvd.nist.gov/vuln/detail/CVE-2024-57977
- https://nvd.nist.gov/vuln/detail/CVE-2024-58053
- https://nvd.nist.gov/vuln/detail/CVE-2024-58071
- https://nvd.nist.gov/vuln/detail/CVE-2025-21690
- https://nvd.nist.gov/vuln/detail/CVE-2025-21708
- https://nvd.nist.gov/vuln/detail/CVE-2025-21885
- https://nvd.nist.gov/vuln/detail/CVE-2025-22062
- https://nvd.nist.gov/vuln/detail/CVE-2025-37801
- https://nvd.nist.gov/vuln/detail/CVE-2025-37805
- https://nvd.nist.gov/vuln/detail/CVE-2025-37859
- https://nvd.nist.gov/vuln/detail/CVE-2025-37911
- https://nvd.nist.gov/vuln/detail/CVE-2025-38127
- https://nvd.nist.gov/vuln/detail/CVE-2025-38215
- https://nvd.nist.gov/vuln/detail/CVE-2025-38441
- https://nvd.nist.gov/vuln/detail/CVE-2025-38539
- https://nvd.nist.gov/vuln/detail/CVE-2025-38681
- https://nvd.nist.gov/vuln/detail/CVE-2025-39829
- https://nvd.nist.gov/vuln/detail/CVE-2025-39850
- https://nvd.nist.gov/vuln/detail/CVE-2025-40134
- https://nvd.nist.gov/vuln/detail/CVE-2025-40308
- https://nvd.nist.gov/vuln/detail/CVE-2025-71077
- https://nvd.nist.gov/vuln/detail/CVE-2025-71273
- https://nvd.nist.gov/vuln/detail/CVE-2026-23126
- https://nvd.nist.gov/vuln/detail/CVE-2026-23212
- https://nvd.nist.gov/vuln/detail/CVE-2026-23290
- https://nvd.nist.gov/vuln/detail/CVE-2026-23300
- https://nvd.nist.gov/vuln/detail/CVE-2026-23312
- https://nvd.nist.gov/vuln/detail/CVE-2026-23365
- https://nvd.nist.gov/vuln/detail/CVE-2026-23399
- https://nvd.nist.gov/vuln/detail/CVE-2026-23442
- https://nvd.nist.gov/vuln/detail/CVE-2026-23452
- https://nvd.nist.gov/vuln/detail/CVE-2026-31400
- https://nvd.nist.gov/vuln/detail/CVE-2026-31424
- https://nvd.nist.gov/vuln/detail/CVE-2026-31681
- https://nvd.nist.gov/vuln/detail/CVE-2026-31684
- https://nvd.nist.gov/vuln/detail/CVE-2026-31709
- https://nvd.nist.gov/vuln/detail/CVE-2026-31738
- https://nvd.nist.gov/vuln/detail/CVE-2026-31788
- https://nvd.nist.gov/vuln/detail/CVE-2026-43066
- https://nvd.nist.gov/vuln/detail/CVE-2026-43088
- https://nvd.nist.gov/vuln/detail/CVE-2026-43156
- https://nvd.nist.gov/vuln/detail/CVE-2026-43262
- https://nvd.nist.gov/vuln/detail/CVE-2026-43279
- https://nvd.nist.gov/vuln/detail/CVE-2026-43429
- https://nvd.nist.gov/vuln/detail/CVE-2026-43436
- https://nvd.nist.gov/vuln/detail/CVE-2026-43445
- https://nvd.nist.gov/vuln/detail/CVE-2026-43448
- https://nvd.nist.gov/vuln/detail/CVE-2026-43484
- https://nvd.nist.gov/vuln/detail/CVE-2026-45835
- https://nvd.nist.gov/vuln/detail/CVE-2026-46113
- https://nvd.nist.gov/vuln/detail/CVE-2026-53359