CLSA-2026-1791796862
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1791796862.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1791796862
- Upstream
CVE (39)
- CVE-2022-49006
- CVE-2023-0266
- CVE-2023-52924
- CVE-2024-53150
- CVE-2025-39964
- CVE-2026-31411
- CVE-2026-31688
- CVE-2026-43116
- CVE-2026-43198
- CVE-2026-52923
- CVE-2026-53059
- CVE-2026-53091
- CVE-2026-53195
- CVE-2026-53196
- CVE-2026-53266
- CVE-2026-64191
- CVE-2026-64340
- CVE-2026-64343
- CVE-2026-64372
- CVE-2026-64375
- CVE-2026-68106
- CVE-2026-68111
- CVE-2026-68175
- CVE-2026-68218
- CVE-2026-68234
- CVE-2026-68299
- CVE-2026-68425
- CVE-2026-72005
- CVE-2026-72019
- CVE-2026-72020
- CVE-2026-72036
- CVE-2026-72039
- CVE-2026-72083
- CVE-2026-72106
- CVE-2026-74469
- CVE-2026-74480
- CVE-2026-74720
- CVE-2026-80844
- CVE-2026-81000
- Published
- 2026-10-19T12:48:16Z
- Modified
- 2026-10-26T09:43:27Z
- Summary
- kernel: Fix of 32 CVEs
- Details
-
- ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF {CVE-2023-0266}
- net: account for encap headers in qdisc pkt len {CVE-2026-53091}
- kabi: add tcp_v4_syn_recv_sock to the x86_64 kABI whitelist {CVE-2026-43198}
- Update to kernel 3.10.0-1160.164.1.el7
- netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}
- netfilter: expect: fix crash when putting uninited expectation {CVE-2026-43116}
- netfilter: nf_ct_expect: Add nf_ct_remove_expect() {CVE-2026-43116}
- Revert "netfilter: ctnetlink: ensure safe access to master conntrack {CVE-2026-43116}"
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266}
- sctp: prevent peer transport count overflow {CVE-2026-74469}
- xfrm: ah6: validate routing header segments_left {CVE-2026-80844}
- i2c: stub: Reject I2C block transfers with invalid length {CVE-2026-64191}
- i2c: stub: Avoid an array overrun on I2C block transfers {CVE-2026-64191}
- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}
- USB: serial: io_ti: fix heap overflow in get_manuf_info() {CVE-2026-53196}
- netfilter: nft_rbtree: ignore inactive matching element with no descendants
- netfilter: nft_rbtree: introduce nft_rbtree_interval_end() helper
- net: bridge: stop fast-leave after deleting a port group {CVE-2026-74480}
- netfilter: conntrack: check netns when walking expect hash
- netfilter: nf_tables: don't skip expired elements during walk {CVE-2023-52924}
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() {CVE-2026-31411}
- dm log: fix out-of-bounds write due to region_count overflow {CVE-2026-53059}
- ipc: limit next_id allocation to the valid ID range {CVE-2026-52923}
- macsec: don't read an unset MAC header in macsec_encrypt() {CVE-2026-72019}
- dm-ioctl: fix a possible overflow in list_version_get_info {CVE-2026-72106}
- drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() {CVE-2026-68111}
- drm/amdgpu: fix division by zero with invalid uvd dimensions {CVE-2026-68106}
- driver core: enforce device_lock for driver_match_device() {CVE-2026-31688}
- proc: protect ptrace_may_access() with exec_update_lock (FD links) {CVE-2026-64375}
- net: tun: bound receive headroom {CVE-2026-81000}
- cpufreq: pcc: fix use-after-free and double free in _OSC evaluation {CVE-2026-64372}
- wifi: rt2x00: avoid full teardown before work setup in probe {CVE-2026-72005}
- ipvs: reset full ip_vs_seq structs in ip_vs_conn_new {CVE-2026-72020}
- scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE {CVE-2026-72083}
- bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() {CVE-2026-72039}
- net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked {CVE-2026-72036}
- vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets {CVE-2026-68299}
- drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved {CVE-2026-68234}
- tracing: Fix resource leak on mmiotrace trace_pipe close {CVE-2026-68175}
- media: pci: dm1105: Free allocated workqueue {CVE-2026-68218}
- IB/mad: Drop unmatched RMPP responses before reassembly {CVE-2026-68425}
- USB: ldusb: fix use-after-free on disconnect race {CVE-2026-64343}
- USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340}
- bpf: Preserve pointer state for commuted arithmetic {CVE-2026-74720}
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
- tcp: keep kABI of tcp_v4_syn_recv_sock() for the CVE-2026-43198 fix
- crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964}
- tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
- References
-
- https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1791796862.html
- https://nvd.nist.gov/vuln/detail/CVE-2023-4244
- https://nvd.nist.gov/vuln/detail/CVE-2025-39964
- https://nvd.nist.gov/vuln/detail/CVE-2026-31411
- https://nvd.nist.gov/vuln/detail/CVE-2026-52923
- https://nvd.nist.gov/vuln/detail/CVE-2026-53059
- https://nvd.nist.gov/vuln/detail/CVE-2026-53195
- https://nvd.nist.gov/vuln/detail/CVE-2026-53196
- https://nvd.nist.gov/vuln/detail/CVE-2026-53266
- https://nvd.nist.gov/vuln/detail/CVE-2026-64191
- https://nvd.nist.gov/vuln/detail/CVE-2026-64340
- https://nvd.nist.gov/vuln/detail/CVE-2026-64343
- https://nvd.nist.gov/vuln/detail/CVE-2026-64372
- https://nvd.nist.gov/vuln/detail/CVE-2026-64375
- https://nvd.nist.gov/vuln/detail/CVE-2026-68106
- https://nvd.nist.gov/vuln/detail/CVE-2026-68111
- https://nvd.nist.gov/vuln/detail/CVE-2026-68175
- https://nvd.nist.gov/vuln/detail/CVE-2026-68218
- https://nvd.nist.gov/vuln/detail/CVE-2026-68234
- https://nvd.nist.gov/vuln/detail/CVE-2026-68299
- https://nvd.nist.gov/vuln/detail/CVE-2026-68425
- https://nvd.nist.gov/vuln/detail/CVE-2026-72005
- https://nvd.nist.gov/vuln/detail/CVE-2026-72019
- https://nvd.nist.gov/vuln/detail/CVE-2026-72020
- https://nvd.nist.gov/vuln/detail/CVE-2026-72036
- https://nvd.nist.gov/vuln/detail/CVE-2026-72039
- https://nvd.nist.gov/vuln/detail/CVE-2026-72083
- https://nvd.nist.gov/vuln/detail/CVE-2026-72106
- https://nvd.nist.gov/vuln/detail/CVE-2026-74469
- https://nvd.nist.gov/vuln/detail/CVE-2026-74720
- https://nvd.nist.gov/vuln/detail/CVE-2026-80676
- https://nvd.nist.gov/vuln/detail/CVE-2026-80844
- https://nvd.nist.gov/vuln/detail/CVE-2026-81000