CLSA-2026-1791730242

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791730242
Upstream
CVE (39)
Published
2026-10-19T12:44:30Z
Modified
2026-10-26T09:43:39Z
Summary
kernel: Fix of 32 CVEs
Details
  • ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}
  • net: account for encap headers in qdisc pkt len {CVE-2026-53091}
  • kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}
  • Update to kernel 3.10.0-1160.164.1.el7
  • netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
  • netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}
  • netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}
  • Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}"
  • netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
  • sctp: prevent peer transport count overflow {CVE-2026-74469}
  • xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
  • i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
  • i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}
  • USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
  • USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
  • netfilter: nft_rbtree: ignore inactive matching element with no descendants
  • netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper
  • net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
  • netfilter: conntrack: check netns when walking expect hash
  • netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}
  • net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
  • dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
  • ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
  • macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}
  • dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}
  • drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}
  • drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}
  • driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
  • proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
  • net: tun: bound receive headroom {CVE-2026-81000}
  • cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
  • wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}
  • ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}
  • scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}
  • bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}
  • net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}
  • vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}
  • drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
  • tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
  • media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}
  • IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
  • USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
  • USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
  • bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
  • ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
  • tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix
  • crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
  • tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
References

Affected packages

TuxCare:CentOS:7
bpftool

Package

Name
bpftool
Purl
pkg:rpm/tuxcare/bpftool?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel

Package

Name
kernel
Purl
pkg:rpm/tuxcare/kernel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-debug

Package

Name
kernel-debug
Purl
pkg:rpm/tuxcare/kernel-debug?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-debug-devel

Package

Name
kernel-debug-devel
Purl
pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-devel

Package

Name
kernel-devel
Purl
pkg:rpm/tuxcare/kernel-devel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-doc

Package

Name
kernel-doc
Purl
pkg:rpm/tuxcare/kernel-doc?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-headers

Package

Name
kernel-headers
Purl
pkg:rpm/tuxcare/kernel-headers?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-tools

Package

Name
kernel-tools
Purl
pkg:rpm/tuxcare/kernel-tools?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-tools-libs

Package

Name
kernel-tools-libs
Purl
pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel
Purl
pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
perf

Package

Name
perf
Purl
pkg:rpm/tuxcare/perf?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"
python-perf

Package

Name
python-perf
Purl
pkg:rpm/tuxcare/python-perf?distro=centos-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.164.1.el7.tuxcare.els1

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1791730242.json"