Skip to content
Heist/ feed
CriticalFix available

kernel security update

Type: advisorySource: OSV1 source record

The Linux Kernel, the operating system core itself. Security Fix(es): In the Linux kernel, the following vulnerability has been resolved:ALSA: caiaq: Use snd_card_free_when_closed() at disconnectionThe USB disconnect callback is supposed to be short and not too-longwaiting. OTOH, the current code uses snd_card_free() atdisconnection, but this waits for the close of all used fds, hence itcan take long. It eventually blocks the upper layer USB ioctls, whichmay trigger a soft lockup.An easy workaround is to replace snd_card_free() withsnd_card_free_when_closed(). This variant returns immediately whilethe release of resources is done asynchronously by the card devicerelease at the last close.This patch also splits the code to the disconnect and the free phases;the former is called immediately at the USB disconnect callback whilethe latter is called from the card destructor.(CVE-2024-56531) In the Linux kernel, the following vulnerability has been resolved:xsk: fix OOB map writes when deleting elementsJordy says: In the xsk_map_delete_elem function an unsigned integer(map->max_entries) is compared with a user-controlled signed integer(k). Due to implicit type conversion, a large unsigned value formap->max_entries can bypass the intended bounds check: if (k >= map->max_entries) return -EINVAL;This allows k to hold a negative value (between -2147483648 and -2),which is then used as an array index in m->xsk_map[k], which resultsin an out-of-bounds access. spin_lock_bh(&m->lock); map_

Announced Source revision 1
Original source ↗

OESA-2026-4039

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:OESA-2026-4039

kernel

Source reference: /affected/0/package/name

Affected versions
Not stated in this record
Fixed versions
5.10.0-334.0.0.235.oe2203sp4

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "5.10.0-334.0.0.235.oe2203sp4"
          }
        ]
      }
    ],
    "package": {
      "name": "kernel",
      "purl": "pkg:rpm/openEuler/kernel&distro=openEuler-22.03-LTS-SP4",
      "ecosystem": "openEuler:22.03-LTS-SP4"
    },
    "database_specific": {
      "source": "https://repo.openeuler.org/security/data/osv/OESA-2026-4039.json"
    },
    "ecosystem_specific": {
      "src": [
        "kernel-5.10.0-334.0.0.235.oe2203sp4.src.rpm"
      ],
      "x86_64": [
        "bpftool-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "bpftool-debuginfo-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-debuginfo-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-debugsource-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-devel-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-headers-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-source-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-tools-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-tools-debuginfo-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "kernel-tools-devel-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "perf-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "perf-debuginfo-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "python3-perf-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm",
        "python3-perf-debuginfo-5.10.0-334.0.0.235.oe2203sp4.x86_64.rpm"
      ],
      "aarch64": [
        "bpftool-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "bpftool-debuginfo-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-debuginfo-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-debugsource-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-devel-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-headers-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-source-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-tools-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-tools-debuginfo-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "kernel-tools-devel-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "perf-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "perf-debuginfo-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "python3-perf-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm",
        "python3-perf-debuginfo-5.10.0-334.0.0.235.oe2203sp4.aarch64.rpm"
      ]
    }
  }
]

Publisher severity

critical

Source reference: /database_specific/severity

Event
#14663 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement