kernel: Fix of 31 CVEs
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785} - powerpc/rtas: avoid device tree lookups in rtas_os_term() {CVE-2022-50870} - svcrdma: Reject connection when transport allocation fails {CVE-2026-89531} - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept {CVE-2026-80819} - sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890} - ipvs: use parsed transport offset in TCP state lookup {CVE-2026-80875} - USB: serial: option: fix slab OOB read in interrupt URB callback {CVE-2026-80827} - ipv4: reject undersized MTUs in ip_do_fragment() {CVE-2026-80793} - HID: core: fix OOB read of field->usage in hid_set_field() {CVE-2026-80781} - af_packet: Don't send zero-byte data in tpacket_snd(). {CVE-2026-80742} - ALSA: dummy: Check card index validity at probe {CVE-2026-80812} - params: fix charp corruption on allocation failure {CVE-2026-89552} - selinux: reject a class permission count below its inherited common {CVE-2026-80757} - selinux: reject a permission value exceeding the class permission count {CVE-2026-80755} - USB: serial: safe_serial: fix memory corruption with small endpoint {CVE-2026-63957} - rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814} - power: supply: max17040: propagate register read errors {CVE-2026-89462} - mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974} - xfrm: ah6: validate routing hea
- Products
- kernel, kernel-abi-whitelists, kernel-debug, kernel-debug-devel, kernel-devel, kernel-doc, kernel-firmware, kernel-headers, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 2.6.32-754.35.8.el6.tuxcare.els37
- CVEs
- CVE-2022-49100, CVE-2022-50566, CVE-2022-50664, CVE-2022-50749, CVE-2022-50815, CVE-2022-50868, CVE-2022-50870, CVE-2023-53839, CVE-2024-50076, CVE-2024-50289, CVE-2026-63957, CVE-2026-80742, CVE-2026-80755, CVE-2026-80757, CVE-2026-80781, CVE-2026-80785, CVE-2026-80793, CVE-2026-80812, CVE-2026-80814, CVE-2026-80819, CVE-2026-80827, CVE-2026-80844, CVE-2026-80875, CVE-2026-80890, CVE-2026-80974, CVE-2026-89462, CVE-2026-89531, CVE-2026-89552, CVE-2026-89666, CVE-2026-98377, CVE-2026-99999
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:49 UTC · Revision 1
Source evidence
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785} - powerpc/rtas: avoid device tree lookups in rtas_os_term() {CVE-2022-50870} - svcrdma: Reject connection when transport allocation fails {CVE-2026-89531} - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept {CVE-2026-80819} - sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890} - ipvs: use parsed transport offset in TCP state lookup {CVE-2026-80875} - USB: serial: option: fix slab OOB read in interrupt URB callback {CVE-2026-80827} - ipv4: reject undersized MTUs in ip_do_fragment() {CVE-2026-80793} - HID: core: fix OOB read of field->usage in hid_set_field() {CVE-2026-80781} - af_packet: Don't send zero-byte data in tpacket_snd(). {CVE-2026-80742} - ALSA: dummy: Check card index validity at probe {CVE-2026-80812} - params: fix charp corruption on allocation failure {CVE-2026-89552} - selinux: reject a class permission count below its inherited common {CVE-2026-80757} - selinux: reject a permission value exceeding the class permission count {CVE-2026-80755} - USB: serial: safe_serial: fix memory corruption with small endpoint {CVE-2026-63957} - rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814} - power: supply: max17040: propagate register read errors {CVE-2026-89462} - mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974} - xfrm: ah6: validate routing hea
osv:CLSA-2026-1792245431
kernel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-abi-whitelists
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-debug
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-debug-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-doc
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-firmware
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
kernel-headers
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
python-perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els37
Complete source record
{
"id": "779808f19c8ba005896c1e8bbc1abcea062bdd6b269d7e57e19287813b2cd342",
"url": "https://osv.dev/vulnerability/CLSA-2026-1792245431",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 31 CVEs",
"summary": "- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - fbdev: serialize mode sysfs access with lock_fb_info() {CVE-2026-80785} - powerpc/rtas: avoid device tree lookups in rtas_os_term() {CVE-2022-50870} - svcrdma: Reject connection when transport allocation fails {CVE-2026-89531} - Bluetooth: RFCOMM: take rfcomm_mutex for the deferred setup accept {CVE-2026-80819} - sctp: reject stale cookies with mismatched verification tags {CVE-2026-80890} - ipvs: use parsed transport offset in TCP state lookup {CVE-2026-80875} - USB: serial: option: fix slab OOB read in interrupt URB callback {CVE-2026-80827} - ipv4: reject undersized MTUs in ip_do_fragment() {CVE-2026-80793} - HID: core: fix OOB read of field->usage in hid_set_field() {CVE-2026-80781} - af_packet: Don't send zero-byte data in tpacket_snd(). {CVE-2026-80742} - ALSA: dummy: Check card index validity at probe {CVE-2026-80812} - params: fix charp corruption on allocation failure {CVE-2026-89552} - selinux: reject a class permission count below its inherited common {CVE-2026-80757} - selinux: reject a permission value exceeding the class permission count {CVE-2026-80755} - USB: serial: safe_serial: fix memory corruption with small endpoint {CVE-2026-63957} - rndis_host: add overflow check in rndis_rx_fixup() {CVE-2026-80814} - power: supply: max17040: propagate register read errors {CVE-2026-89462} - mfd: sm501: Fix potential memory leaks during remove {CVE-2026-80974} - xfrm: ah6: validate routing hea",
"evidence": "osv:CLSA-2026-1792245431",
"products": [
{
"name": {
"value": "kernel",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-abi-whitelists",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-doc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-firmware",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els37",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1792245431",
"aliases": [
"CLSA-2026-1792245431"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-abi-whitelists",
"purl": "pkg:rpm/tuxcare/kernel-abi-whitelists?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-doc",
"purl": "pkg:rpm/tuxcare/kernel-doc?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-firmware",
"purl": "pkg:rpm/tuxcare/kernel-firmware?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els37"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=centos-6",
"ecosystem": "TuxCare:CentOS:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos6els/CLSA-2026-1792245431.json"
}
}
],
"modified": "2026-10-26T09:43:26.039773539Z",
"provider": "osv",
"upstream": [
"CVE-2022-49100",
"CVE-2022-50566",
"CVE-2022-50664",
"CVE-2022-50749",
"CVE-2022-50815",
"CVE-2022-50868",
"CVE-2022-50870",
"CVE-2023-53839",
"CVE-2024-50076",
"CVE-2024-50289",
"CVE-2026-63957",
"CVE-2026-80742",
"CVE-2026-80755",
"CVE-2026-80757",
"CVE-2026-80781",
"CVE-2026-80785",
"CVE-2026-80793",
"CVE-2026-80812",
"CVE-2026-80814",
"CVE-2026-80819",
"CVE-2026-80827",
"CVE-2026-80844",
"CVE-2026-80875",
"CVE-2026-80890",
"CVE-2026-80974",
"CVE-2026-89462",
"CVE-2026-89531",
"CVE-2026-89552",
"CVE-2026-89666",
"CVE-2026-98377",
"CVE-2026-99999"
],
"references": [
"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1792245431.html",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49100",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50566",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50664",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50749",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50815",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50868",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50870",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53839",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50076",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50289",
"https://nvd.nist.gov/vuln/detail/CVE-2026-63957",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80742",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80755",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80757",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80781",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80785",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80793",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80812",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80814",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80819",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80827",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80844",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80875",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80890",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80974",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89462",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89531",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89552",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89666",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98377",
"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"
]
},
"related_cves": [
{
"value": "CVE-2022-49100",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50566",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50664",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50749",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50815",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50868",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50870",
"evidence": "/upstream"
},
{
"value": "CVE-2023-53839",
"evidence": "/upstream"
},
{
"value": "CVE-2024-50076",
"evidence": "/upstream"
},
{
"value": "CVE-2024-50289",
"evidence": "/upstream"
},
{
"value": "CVE-2026-63957",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80742",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80755",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80757",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80781",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80785",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80793",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80812",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80814",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80819",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80827",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80844",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80875",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80890",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80974",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89462",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89531",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89552",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89666",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98377",
"evidence": "/upstream"
},
{
"value": "CVE-2026-99999",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449905,
"published_at": "2026-10-17T13:57:52+00:00"
}