OESA-2026-2175

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2026-2175

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2026-2175.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2026-2175

Upstream

CVE-2025-27558

CVE-2026-31431

CVE-2026-31473

Published

2026-05-03T09:57:22Z

Modified

2026-05-03T10:19:26.006797Z

Summary

kernel security update

Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

IEEE P802.11-REVme D1.1 through D7.0 allows FragAttacks against mesh networks. In mesh networks using Wi-Fi Protected Access (WPA, WPA2, or WPA3) or Wired Equivalent Privacy (WEP), an adversary can exploit this vulnerability to inject arbitrary frames towards devices that support receiving non-SSP A-MSDU frames. NOTE: this issue exists because of an incorrect fix for CVE-2020-24588. P802.11-REVme, as of early 2025, is a planned release of the 802.11 standard.(CVE-2025-27558)

In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algifaead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of the associated data.\n\nThere is no benefit in operating in-place in algifaead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.(CVE-2026-31431)

In the Linux kernel, the following vulnerability has been resolved:

media: mc, v4l2: serialize REINIT and REQBUFS with reqqueuemutex

MEDIAREQUESTIOCREINIT can run concurrently with VIDIOCREQBUFS(0) queue teardown paths. This can race request object cleanup against vb2 queue cancellation and lead to use-after-free reports.

We already serialize request queueing against STREAMON/OFF with reqqueuemutex. Extend that serialization to REQBUFS, and also take the same mutex in mediarequestioctl_reinit() so REINIT is in the same exclusion domain.

This keeps request cleanup and queue cancellation from running in parallel for request-capable devices.(CVE-2026-31473)

Database specific

{
    "severity": "Critical"
}

References

Affected packages

openEuler:22.03-LTS-SP4 / kernel

Package

Name: kernel
Purl: pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS-SP4

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

5.10.0-312.0.0.215.oe2203sp4

Ecosystem specific

{
    "x86_64": [
        "bpftool-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-debuginfo-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-debugsource-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-devel-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-headers-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-source-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-tools-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "kernel-tools-devel-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "perf-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "perf-debuginfo-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "python3-perf-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-312.0.0.215.oe2203sp4.x86_64.rpm"
    ],
    "src": [
        "kernel-5.10.0-312.0.0.215.oe2203sp4.src.rpm"
    ],
    "aarch64": [
        "bpftool-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-debuginfo-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-debugsource-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-devel-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-headers-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-source-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-tools-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "kernel-tools-devel-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "perf-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "perf-debuginfo-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "python3-perf-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-312.0.0.215.oe2203sp4.aarch64.rpm"
    ]
}

Database specific

source

"https://repo.openeuler.org/security/data/osv/OESA-2026-2175.json"