kernel-uek: Fix of 34 CVEs
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - Revert "IB/core: Implement clear counters" - Revert "IB/mlx5: Implement clear counters" - Revert "ib/core: add SET_DEVICE_OP call for clear_hw_stats()" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - ext4/jbd2: skip sb flush when EIO happened - ext4: save the error code which triggered an - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940}
- Products
- bpftool, kernel-uek, kernel-uek-container, kernel-uek-container-debug, kernel-uek-debug, kernel-uek-debug-devel, kernel-uek-devel, kernel-uek-headers, kernel-uek-tools, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 5.4.17-2136.354.4.el7uek.tuxcare.els1
- CVEs
- CVE-2022-43945, CVE-2024-40929, CVE-2024-42159, CVE-2024-43900, CVE-2024-44940, CVE-2024-46724, CVE-2024-46731, CVE-2024-47745, CVE-2024-49991, CVE-2024-50073, CVE-2024-50115, CVE-2024-56664, CVE-2025-22083, CVE-2025-37885, CVE-2025-38068, CVE-2025-38556, CVE-2025-39760, CVE-2025-39866, CVE-2025-40215, CVE-2025-40256, CVE-2025-68285, CVE-2025-68349, CVE-2025-68814, CVE-2025-71154, CVE-2026-22977, CVE-2026-22991, CVE-2026-22999, CVE-2026-23001, CVE-2026-23060, CVE-2026-23061, CVE-2026-23089, CVE-2026-23193, CVE-2026-23209, CVE-2026-23273
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 10:52 UTC · Revision 1
Source evidence
- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - Revert "IB/core: Implement clear counters" - Revert "IB/mlx5: Implement clear counters" - Revert "ib/core: add SET_DEVICE_OP call for clear_hw_stats()" - Revert "perf/x86: Always store regs->ip in perf_callchain_kernel()" - Revert "xfrm: destroy xfrm_state synchronously on net exit path" - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - ext4/jbd2: skip sb flush when EIO happened - ext4: save the error code which triggered an - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940}
osv:CLSA-2026-1775655705
bpftool
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-container
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-container-debug
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-debug
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-debug-devel
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-devel
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-headers
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
kernel-uek-tools
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
perf
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
python-perf
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els1
Complete source record
{
"id": "8d6dd0b3d09261bc179f354e987eafe53152ef4bac77052a9ee8bc02bc36a1cd",
"url": "https://osv.dev/vulnerability/CLSA-2026-1775655705",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel-uek: Fix of 34 CVEs",
"summary": "- ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free() {CVE-2026-23089} - HID: core: Harden s32ton() against conversion to 0 bits {CVE-2025-38556} - KVM: nSVM: Ignore nCR3[4:0] when loading PDPTEs from memory {CVE-2024-50115} - KVM: x86: Reset IRTE to host control if *new* route isn't postable {CVE-2025-37885} - NFSD: Protect against send buffer overflow in NFSv2 READ {CVE-2022-43945} - NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid {CVE-2025-68349} - Revert \"IB/core: Implement clear counters\" - Revert \"IB/mlx5: Implement clear counters\" - Revert \"ib/core: add SET_DEVICE_OP call for clear_hw_stats()\" - Revert \"perf/x86: Always store regs->ip in perf_callchain_kernel()\" - Revert \"xfrm: destroy xfrm_state synchronously on net exit path\" - bpf, sockmap: Fix race between element replace and close() {CVE-2024-56664} - can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak {CVE-2026-23061} - crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec {CVE-2026-23060} - crypto: lzo - Fix compression buffer overrun {CVE-2025-38068} - drm/amd/pm: fix the Out-of-bounds read warning {CVE-2024-46731} - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number {CVE-2024-46724} - drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer {CVE-2024-49991} - ext4/jbd2: skip sb flush when EIO happened - ext4: save the error code which triggered an - fou: remove warn in gue_gro_receive on unsupported protocol {CVE-2024-44940}",
"evidence": "osv:CLSA-2026-1775655705",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container-debug",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug-devel",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-devel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-tools",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els1",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1775655705",
"aliases": [
"CLSA-2026-1775655705"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek",
"purl": "pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-container",
"purl": "pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-container-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-headers",
"purl": "pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-uek-tools",
"purl": "pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els1"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1775655705.json"
}
}
],
"modified": "2026-10-26T09:31:20.776454516Z",
"provider": "osv",
"upstream": [
"CVE-2022-43945",
"CVE-2024-40929",
"CVE-2024-42159",
"CVE-2024-43900",
"CVE-2024-44940",
"CVE-2024-46724",
"CVE-2024-46731",
"CVE-2024-47745",
"CVE-2024-49991",
"CVE-2024-50073",
"CVE-2024-50115",
"CVE-2024-56664",
"CVE-2025-22083",
"CVE-2025-37885",
"CVE-2025-38068",
"CVE-2025-38556",
"CVE-2025-39760",
"CVE-2025-39866",
"CVE-2025-40215",
"CVE-2025-40256",
"CVE-2025-68285",
"CVE-2025-68349",
"CVE-2025-68814",
"CVE-2025-71154",
"CVE-2026-22977",
"CVE-2026-22991",
"CVE-2026-22999",
"CVE-2026-23001",
"CVE-2026-23060",
"CVE-2026-23061",
"CVE-2026-23089",
"CVE-2026-23193",
"CVE-2026-23209",
"CVE-2026-23273"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1775655705.html",
"https://nvd.nist.gov/vuln/detail/CVE-2022-43945",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50410",
"https://nvd.nist.gov/vuln/detail/CVE-2024-40929",
"https://nvd.nist.gov/vuln/detail/CVE-2024-42159",
"https://nvd.nist.gov/vuln/detail/CVE-2024-43900",
"https://nvd.nist.gov/vuln/detail/CVE-2024-44940",
"https://nvd.nist.gov/vuln/detail/CVE-2024-46724",
"https://nvd.nist.gov/vuln/detail/CVE-2024-46731",
"https://nvd.nist.gov/vuln/detail/CVE-2024-47745",
"https://nvd.nist.gov/vuln/detail/CVE-2024-49991",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50073",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50115",
"https://nvd.nist.gov/vuln/detail/CVE-2024-56664",
"https://nvd.nist.gov/vuln/detail/CVE-2025-22083",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37885",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38068",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38556",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39760",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39866",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40215",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68285",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68349",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68814",
"https://nvd.nist.gov/vuln/detail/CVE-2025-71154",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22977",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22991",
"https://nvd.nist.gov/vuln/detail/CVE-2026-22999",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23001",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23060",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23061",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23089",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23193",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23209",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23273"
]
},
"related_cves": [
{
"value": "CVE-2022-43945",
"evidence": "/upstream"
},
{
"value": "CVE-2024-40929",
"evidence": "/upstream"
},
{
"value": "CVE-2024-42159",
"evidence": "/upstream"
},
{
"value": "CVE-2024-43900",
"evidence": "/upstream"
},
{
"value": "CVE-2024-44940",
"evidence": "/upstream"
},
{
"value": "CVE-2024-46724",
"evidence": "/upstream"
},
{
"value": "CVE-2024-46731",
"evidence": "/upstream"
},
{
"value": "CVE-2024-47745",
"evidence": "/upstream"
},
{
"value": "CVE-2024-49991",
"evidence": "/upstream"
},
{
"value": "CVE-2024-50073",
"evidence": "/upstream"
},
{
"value": "CVE-2024-50115",
"evidence": "/upstream"
},
{
"value": "CVE-2024-56664",
"evidence": "/upstream"
},
{
"value": "CVE-2025-22083",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37885",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38068",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38556",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39760",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39866",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40215",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40256",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68285",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68349",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68814",
"evidence": "/upstream"
},
{
"value": "CVE-2025-71154",
"evidence": "/upstream"
},
{
"value": "CVE-2026-22977",
"evidence": "/upstream"
},
{
"value": "CVE-2026-22991",
"evidence": "/upstream"
},
{
"value": "CVE-2026-22999",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23001",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23060",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23061",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23089",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23193",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23209",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23273",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 447606,
"published_at": "2026-10-19T14:13:57+00:00"
}