Skip to content
Heist/ feed
Back to feed
UnratedFix available

Security update for the Linux Kernel

Type: advisorySources: OSV

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed

Products
kernel-default, kernel-docs, kernel-ec2, kernel-source, kernel-syms, kernel-trace, kernel-xen
Affected versions
Not specified
Fixed versions
3.0.101-108.223.1
CVEs
CVE-2026-64422, CVE-2026-64580, CVE-2026-68376, CVE-2026-72083, CVE-2026-72322, CVE-2026-72323, CVE-2026-72348, CVE-2026-72398, CVE-2026-74388, CVE-2026-74556, CVE-2026-74588, CVE-2026-74597, CVE-2026-74630, CVE-2026-74641, CVE-2026-74743, CVE-2026-74752, CVE-2026-80785, CVE-2026-89479, CVE-2026-90088, CVE-2026-90104
Confirmed fixed CVEs
Not specified
Updated in this feed
30 Oct 2026, 12:12 UTC · Revision 1

Source evidence

Security update for the Linux Kernel

core-osv · Original source

Published 13 Oct 2026, 11:51 UTC

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed

osv:SUSE-SU-2026:4639-1

kernel-default

Fixed versions: 3.0.101-108.223.1

kernel-docs

Fixed versions: 3.0.101-108.223.1

kernel-ec2

Fixed versions: 3.0.101-108.223.1

kernel-source

Fixed versions: 3.0.101-108.223.1

kernel-syms

Fixed versions: 3.0.101-108.223.1

kernel-trace

Fixed versions: 3.0.101-108.223.1

kernel-xen

Fixed versions: 3.0.101-108.223.1

Complete source record
{
  "id": "93421f3011996b63544665ec672be33aa4ee9abab96fde2cce0c48866b0ffa72",
  "url": "https://osv.dev/vulnerability/SUSE-SU-2026%3A4639-1",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "Security update for the Linux Kernel",
    "summary": "The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes (bsc#1273290). - CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() (bsc#1274037). - CVE-2026-68376: sctp: patch over auth_hmacs copy overflow (bsc#1274836). - CVE-2026-72083: target: fix double unmap data sg in core_scsi3_emulate_pro_register_and_move() (bsc#1275535). - CVE-2026-72322: ipv6: mcast: Fix potential UAF in MLD delayed work (bsc#1275972). - CVE-2026-72323: ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() (bsc#1275985). - CVE-2026-72348: netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop (bsc#1276007). - CVE-2026-72398: sctp: add INIT verification after cookie unpacking (bsc#1276381). - CVE-2026-74388: ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data (bsc#1278253). - CVE-2026-74556: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer (bsc#1275696). - CVE-2026-74588: sctp: keep chunk->transport in step with the list it is queued on (bsc#1277766). - CVE-2026-74597: ip6_tunnel: clear skb2->cb in ip6ip6_err() (bsc#1277493). - CVE-2026-74630: ipv6: prevent in6_dev_get() from resurrecting inet6_dev (bsc#1278191). - CVE-2026-74641: ALSA: usx2y: bound the hwdep mmap fault offset (bsc#1278310). - CVE-2026-74743: macvlan: inherit needed_headroom and needed",
    "evidence": "osv:SUSE-SU-2026:4639-1",
    "products": [
      {
        "name": {
          "value": "kernel-default",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-docs",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-ec2",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-source",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-syms",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-trace",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-xen",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.0.101-108.223.1",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "SUSE-SU-2026:4639-1",
      "aliases": [
        "SUSE-SU-2026:4639-1"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-default",
            "purl": "pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-docs",
            "purl": "pkg:rpm/suse/kernel-docs&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-ec2",
            "purl": "pkg:rpm/suse/kernel-ec2&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-source",
            "purl": "pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-syms",
            "purl": "pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-trace",
            "purl": "pkg:rpm/suse/kernel-trace&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.0.101-108.223.1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-xen",
            "purl": "pkg:rpm/suse/kernel-xen&distro=SUSE%20Linux%20Enterprise%20Server%2011%20SP4%20LTSS%20EXTREME%20CORE",
            "ecosystem": "SUSE:Linux Enterprise Server 11 SP4 LTSS EXTREME CORE"
          },
          "database_specific": {
            "source": "https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:4639-1.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "kernel-ec2": "3.0.101-108.223.1",
                "kernel-xen": "3.0.101-108.223.1",
                "kernel-docs": "3.0.101-108.223.1",
                "kernel-syms": "3.0.101-108.223.1",
                "kernel-trace": "3.0.101-108.223.1",
                "kernel-source": "3.0.101-108.223.1",
                "kernel-default": "3.0.101-108.223.1",
                "kernel-ec2-base": "3.0.101-108.223.1",
                "kernel-xen-base": "3.0.101-108.223.1",
                "kernel-ec2-devel": "3.0.101-108.223.1",
                "kernel-xen-devel": "3.0.101-108.223.1",
                "kernel-trace-base": "3.0.101-108.223.1",
                "kernel-trace-devel": "3.0.101-108.223.1",
                "kernel-default-base": "3.0.101-108.223.1",
                "kernel-default-devel": "3.0.101-108.223.1"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-14T11:15:08.088415691Z",
      "provider": "osv",
      "upstream": [
        "CVE-2026-64422",
        "CVE-2026-64580",
        "CVE-2026-68376",
        "CVE-2026-72083",
        "CVE-2026-72322",
        "CVE-2026-72323",
        "CVE-2026-72348",
        "CVE-2026-72398",
        "CVE-2026-74388",
        "CVE-2026-74556",
        "CVE-2026-74588",
        "CVE-2026-74597",
        "CVE-2026-74630",
        "CVE-2026-74641",
        "CVE-2026-74743",
        "CVE-2026-74752",
        "CVE-2026-80785",
        "CVE-2026-89479",
        "CVE-2026-90088",
        "CVE-2026-90104"
      ],
      "references": [
        "https://www.suse.com/support/update/announcement/2026/suse-su-20264639-1/",
        "https://bugzilla.suse.com/1273290",
        "https://bugzilla.suse.com/1274037",
        "https://bugzilla.suse.com/1274836",
        "https://bugzilla.suse.com/1275535",
        "https://bugzilla.suse.com/1275696",
        "https://bugzilla.suse.com/1275972",
        "https://bugzilla.suse.com/1275985",
        "https://bugzilla.suse.com/1276007",
        "https://bugzilla.suse.com/1276381",
        "https://bugzilla.suse.com/1277493",
        "https://bugzilla.suse.com/1277766",
        "https://bugzilla.suse.com/1277908",
        "https://bugzilla.suse.com/1278191",
        "https://bugzilla.suse.com/1278253",
        "https://bugzilla.suse.com/1278310",
        "https://bugzilla.suse.com/1278315",
        "https://bugzilla.suse.com/1279619",
        "https://bugzilla.suse.com/1280786",
        "https://bugzilla.suse.com/1281397",
        "https://bugzilla.suse.com/1281546",
        "https://www.suse.com/security/cve/CVE-2026-64422",
        "https://www.suse.com/security/cve/CVE-2026-64580",
        "https://www.suse.com/security/cve/CVE-2026-68376",
        "https://www.suse.com/security/cve/CVE-2026-72083",
        "https://www.suse.com/security/cve/CVE-2026-72322",
        "https://www.suse.com/security/cve/CVE-2026-72323",
        "https://www.suse.com/security/cve/CVE-2026-72348",
        "https://www.suse.com/security/cve/CVE-2026-72398",
        "https://www.suse.com/security/cve/CVE-2026-74388",
        "https://www.suse.com/security/cve/CVE-2026-74556",
        "https://www.suse.com/security/cve/CVE-2026-74588",
        "https://www.suse.com/security/cve/CVE-2026-74597",
        "https://www.suse.com/security/cve/CVE-2026-74630",
        "https://www.suse.com/security/cve/CVE-2026-74641",
        "https://www.suse.com/security/cve/CVE-2026-74743",
        "https://www.suse.com/security/cve/CVE-2026-74752",
        "https://www.suse.com/security/cve/CVE-2026-80785",
        "https://www.suse.com/security/cve/CVE-2026-89479",
        "https://www.suse.com/security/cve/CVE-2026-90088",
        "https://www.suse.com/security/cve/CVE-2026-90104"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2026-64422",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64580",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-68376",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72083",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72322",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72323",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72348",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72398",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74388",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74556",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74588",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74597",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74630",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74641",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74743",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74752",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-80785",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89479",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-90088",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-90104",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 316279,
  "published_at": "2026-10-13T11:51:49+00:00"
}