kernel: Fix of 33 CVEs
- s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block {CVE-2026-98399} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195} - hwrng: geode - Fix PCI device refcount leak {CVE-2022-50659} - ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() {CVE-2026-80829} - ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800} - btrfs: inode: Verify inode mode to avoid NULL pointer dereference {CVE-2019-19816} - sctp: avoid livelock while updating retransmit path {CVE-2026-98614} - scsi: libiscsi_tcp: Check the data direction of a Data-In PDU {CVE-2026-98479} - Bluetooth: L2CAP: validate frame length before control and FCS access {CVE-2026-98457} - net: atl1c: fix soft lockup on out-of-range tpd_cons read {CVE-2026-98489} - net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read {CVE-2026-98488} - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough {CVE-2026-98602} - ipvs: filter some flags received in the backup server {CVE-2026-98794} - sctp: hold asoc or transport before mod_timer() in timer handlers {CVE-2026-98586} - Bluetooth: hci_sock: validate event length before filtering {CVE-2026-98461} - Bluetooth: hci_sock: reject out-of-range OCF values {CVE-2026-98460} - net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494} - vt: skip screen update for DEC alignment test on backgroup consoles {CVE-2026-98838} - USB: serial: fix dynamic id driver dereg
- Products
- kernel, kernel-abi-whitelists, kernel-debug, kernel-debug-devel, kernel-devel, kernel-doc, kernel-firmware, kernel-headers, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 2.6.32-754.35.8.el6.tuxcare.els39
- CVEs
- CVE-2019-19816, CVE-2022-50659, CVE-2023-53800, CVE-2023-54284, CVE-2026-45920, CVE-2026-46122, CVE-2026-46163, CVE-2026-46191, CVE-2026-46294, CVE-2026-53002, CVE-2026-53004, CVE-2026-53195, CVE-2026-53397, CVE-2026-74597, CVE-2026-74752, CVE-2026-80829, CVE-2026-80913, CVE-2026-89846, CVE-2026-98399, CVE-2026-98457, CVE-2026-98460, CVE-2026-98461, CVE-2026-98479, CVE-2026-98488, CVE-2026-98489, CVE-2026-98494, CVE-2026-98548, CVE-2026-98586, CVE-2026-98602, CVE-2026-98612, CVE-2026-98614, CVE-2026-98697, CVE-2026-98794, CVE-2026-98838
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:46 UTC · Revision 1
Source evidence
- s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block {CVE-2026-98399} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195} - hwrng: geode - Fix PCI device refcount leak {CVE-2022-50659} - ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() {CVE-2026-80829} - ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800} - btrfs: inode: Verify inode mode to avoid NULL pointer dereference {CVE-2019-19816} - sctp: avoid livelock while updating retransmit path {CVE-2026-98614} - scsi: libiscsi_tcp: Check the data direction of a Data-In PDU {CVE-2026-98479} - Bluetooth: L2CAP: validate frame length before control and FCS access {CVE-2026-98457} - net: atl1c: fix soft lockup on out-of-range tpd_cons read {CVE-2026-98489} - net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read {CVE-2026-98488} - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough {CVE-2026-98602} - ipvs: filter some flags received in the backup server {CVE-2026-98794} - sctp: hold asoc or transport before mod_timer() in timer handlers {CVE-2026-98586} - Bluetooth: hci_sock: validate event length before filtering {CVE-2026-98461} - Bluetooth: hci_sock: reject out-of-range OCF values {CVE-2026-98460} - net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494} - vt: skip screen update for DEC alignment test on backgroup consoles {CVE-2026-98838} - USB: serial: fix dynamic id driver dereg
osv:CLSA-2026-1792976327
kernel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-abi-whitelists
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-debug
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-debug-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-doc
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-firmware
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
kernel-headers
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
python-perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els39
Complete source record
{
"id": "252868cda9f63d8103fd401316009bde37dd166ff7071a32a0f6dbc6534ecf5c",
"url": "https://osv.dev/vulnerability/CLSA-2026-1792976327",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 33 CVEs",
"summary": "- s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block {CVE-2026-98399} - USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195} - hwrng: geode - Fix PCI device refcount leak {CVE-2022-50659} - ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() {CVE-2026-80829} - ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800} - btrfs: inode: Verify inode mode to avoid NULL pointer dereference {CVE-2019-19816} - sctp: avoid livelock while updating retransmit path {CVE-2026-98614} - scsi: libiscsi_tcp: Check the data direction of a Data-In PDU {CVE-2026-98479} - Bluetooth: L2CAP: validate frame length before control and FCS access {CVE-2026-98457} - net: atl1c: fix soft lockup on out-of-range tpd_cons read {CVE-2026-98489} - net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read {CVE-2026-98488} - Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough {CVE-2026-98602} - ipvs: filter some flags received in the backup server {CVE-2026-98794} - sctp: hold asoc or transport before mod_timer() in timer handlers {CVE-2026-98586} - Bluetooth: hci_sock: validate event length before filtering {CVE-2026-98461} - Bluetooth: hci_sock: reject out-of-range OCF values {CVE-2026-98460} - net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494} - vt: skip screen update for DEC alignment test on backgroup consoles {CVE-2026-98838} - USB: serial: fix dynamic id driver dereg",
"evidence": "osv:CLSA-2026-1792976327",
"products": [
{
"name": {
"value": "kernel",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-abi-whitelists",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-doc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-firmware",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els39",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1792976327",
"aliases": [
"CLSA-2026-1792976327"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-abi-whitelists",
"purl": "pkg:rpm/tuxcare/kernel-abi-whitelists?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-doc",
"purl": "pkg:rpm/tuxcare/kernel-doc?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-firmware",
"purl": "pkg:rpm/tuxcare/kernel-firmware?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els39"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1792976327.json"
}
}
],
"modified": "2026-10-26T09:43:15.418069487Z",
"provider": "osv",
"upstream": [
"CVE-2019-19816",
"CVE-2022-50659",
"CVE-2023-53800",
"CVE-2023-54284",
"CVE-2026-45920",
"CVE-2026-46122",
"CVE-2026-46163",
"CVE-2026-46191",
"CVE-2026-46294",
"CVE-2026-53002",
"CVE-2026-53004",
"CVE-2026-53195",
"CVE-2026-53397",
"CVE-2026-74597",
"CVE-2026-74752",
"CVE-2026-80829",
"CVE-2026-80913",
"CVE-2026-89846",
"CVE-2026-98399",
"CVE-2026-98457",
"CVE-2026-98460",
"CVE-2026-98461",
"CVE-2026-98479",
"CVE-2026-98488",
"CVE-2026-98489",
"CVE-2026-98494",
"CVE-2026-98548",
"CVE-2026-98586",
"CVE-2026-98602",
"CVE-2026-98612",
"CVE-2026-98614",
"CVE-2026-98697",
"CVE-2026-98794",
"CVE-2026-98838"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1792976327.html",
"https://nvd.nist.gov/vuln/detail/CVE-2019-19813",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50659",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53800",
"https://nvd.nist.gov/vuln/detail/CVE-2023-54284",
"https://nvd.nist.gov/vuln/detail/CVE-2026-45920",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46122",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46163",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46191",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46294",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53002",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53004",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53195",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53397",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74597",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74752",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80913",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89846",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98399",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98457",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98460",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98461",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98479",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98488",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98489",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98494",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98548",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98586",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98602",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98612",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98614",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98697",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98794",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98838"
]
},
"related_cves": [
{
"value": "CVE-2019-19816",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50659",
"evidence": "/upstream"
},
{
"value": "CVE-2023-53800",
"evidence": "/upstream"
},
{
"value": "CVE-2023-54284",
"evidence": "/upstream"
},
{
"value": "CVE-2026-45920",
"evidence": "/upstream"
},
{
"value": "CVE-2026-46122",
"evidence": "/upstream"
},
{
"value": "CVE-2026-46163",
"evidence": "/upstream"
},
{
"value": "CVE-2026-46191",
"evidence": "/upstream"
},
{
"value": "CVE-2026-46294",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53002",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53004",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53195",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53397",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74597",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74752",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80829",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80913",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89846",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98399",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98457",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98460",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98461",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98479",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98488",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98489",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98494",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98548",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98586",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98602",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98612",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98614",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98697",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98794",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98838",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449789,
"published_at": "2026-10-26T00:59:27+00:00"
}