UnratedFix available
kernel: Fix of 18 CVEs
Type: advisorySources: OSV
- FIX: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss(
- Products
- bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf
- Affected versions
- Not specified
- Fixed versions
- 4.18.0-348.7.1.el8_5.tuxcare.els47
- CVEs
- CVE-2025-21758, CVE-2025-21759, CVE-2025-21760, CVE-2025-21761, CVE-2025-21762, CVE-2025-21763, CVE-2025-21764, CVE-2025-21765, CVE-2025-21766, CVE-2025-40075, CVE-2025-40135, CVE-2025-40149, CVE-2025-40158, CVE-2025-40170, CVE-2025-68188, CVE-2026-23112, CVE-2026-31786, CVE-2026-31787, CVE-2026-43125, CVE-2026-43198, CVE-2026-64266, CVE-2026-64298, CVE-2026-64564, CVE-2026-68287
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:49 UTC · Revision 1
Source evidence
- FIX: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss(
osv:CLSA-2026-1787572220
bpftool
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-core
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-cross-headers
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug-core
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug-devel
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug-modules
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug-modules-extra
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-debug-modules-internal
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-devel
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-headers
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-ipaclones-internal
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-modules
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-modules-extra
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-modules-internal
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-selftests-internal
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-tools
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-tools-libs
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
kernel-tools-libs-devel
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
perf
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
python3-perf
Fixed versions: 4.18.0-348.7.1.el8_5.tuxcare.els47
Complete source record
{
"id": "89b0d0ecc249350cf49e00c9cfa1f8913ac0349052681ed429d2e9654869164a",
"url": "https://osv.dev/vulnerability/CLSA-2026-1787572220",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 18 CVEs",
"summary": "- FIX: tls: Use __sk_dst_get() and dst_dev_rcu() in get_netdev_for_sock(). {CVE-2025-40149} - mpls: Use in6_dev_rcu() and dev_net_rcu() in mpls_forward() and mpls_xmit(). - net: l3mdev: use skb_dst_dev_rcu() in l3mdev_l3_out() - ipv4: start using dst_dev_rcu() - tcp: use dst_dev_rcu() in tcp_fastopen_active_disable_ofo_check() {CVE-2025-68188} - tcp_metrics: use dst_dev_net_rcu() {CVE-2025-40075} - net: use dst_dev_rcu() in sk_setup_caps() {CVE-2025-40170} - udp6: Fix race condition in udp6_sendmsg & connect - ipv6: use RCU in ip6_output() {CVE-2025-40158} - ipv6: use RCU in ip6_xmit() {CVE-2025-40135} - ipv6: start using dst_dev_rcu() - net: dst: introduce dst->dev_rcu - neighbour: accept plain RCU readers in ___neigh_lookup_noref() {CVE-2025-40158} - net: Add locking to protect skb->dev access in ip_output - ipv6: adopt skb_dst_dev() and skb_dst_dev_net[_rcu]() helpers - ipv6: adopt dst_dev() helper - ipv4: adopt dst_dev, skb_dst_dev and skb_dst_dev_net[_rcu] - net: dst: add four helpers to annotate data-races around dst->dev - tcp: convert to dev_net_rcu() - tcp: fix potential race in tcp_v6_syn_recv_sock() {CVE-2026-43198} - ndisc: ndisc_send_redirect() cleanup - ndisc: ndisc_send_redirect() must use dev_get_by_index_rcu() - ipv4: use RCU protection in ip_dst_mtu_maybe_forward() - ipv6: icmp: convert to dev_net_rcu() - ipv4: icmp: convert to dev_net_rcu() - ipv4: use RCU protection in __ip_rt_update_pmtu() {CVE-2025-21766} - ipv6: use RCU protection in ip6_default_advmss(",
"evidence": "osv:CLSA-2026-1787572220",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-core",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-cross-headers",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-core",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules-extra",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules-internal",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-ipaclones-internal",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules-extra",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules-internal",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-selftests-internal",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs-devel",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3-perf",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-348.7.1.el8_5.tuxcare.els47",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1787572220",
"aliases": [
"CLSA-2026-1787572220"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-core",
"purl": "pkg:rpm/tuxcare/kernel-core?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-cross-headers",
"purl": "pkg:rpm/tuxcare/kernel-cross-headers?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug-core",
"purl": "pkg:rpm/tuxcare/kernel-debug-core?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug-modules",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug-modules-extra",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-debug-modules-internal",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-ipaclones-internal",
"purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-modules",
"purl": "pkg:rpm/tuxcare/kernel-modules?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-modules-extra",
"purl": "pkg:rpm/tuxcare/kernel-modules-extra?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-modules-internal",
"purl": "pkg:rpm/tuxcare/kernel-modules-internal?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-selftests-internal",
"purl": "pkg:rpm/tuxcare/kernel-selftests-internal?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-tools",
"purl": "pkg:rpm/tuxcare/kernel-tools?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-tools-libs",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "kernel-tools-libs-devel",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-348.7.1.el8_5.tuxcare.els47"
}
]
}
],
"package": {
"name": "python3-perf",
"purl": "pkg:rpm/tuxcare/python3-perf?distro=centos-8.5",
"ecosystem": "TuxCare:CentOS:8.5"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2026-1787572220.json"
}
}
],
"modified": "2026-10-26T09:43:26.497829752Z",
"provider": "osv",
"upstream": [
"CVE-2025-21758",
"CVE-2025-21759",
"CVE-2025-21760",
"CVE-2025-21761",
"CVE-2025-21762",
"CVE-2025-21763",
"CVE-2025-21764",
"CVE-2025-21765",
"CVE-2025-21766",
"CVE-2025-40075",
"CVE-2025-40135",
"CVE-2025-40149",
"CVE-2025-40158",
"CVE-2025-40170",
"CVE-2025-68188",
"CVE-2026-23112",
"CVE-2026-31786",
"CVE-2026-31787",
"CVE-2026-43125",
"CVE-2026-43198",
"CVE-2026-64266",
"CVE-2026-64298",
"CVE-2026-64564",
"CVE-2026-68287"
],
"references": [
"https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1787572220.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21758",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21759",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21760",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21761",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21762",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21763",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21765",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40074",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68188",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23112",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31786",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31787",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43125",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43198",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64266",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64298",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64564",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68287"
]
},
"related_cves": [
{
"value": "CVE-2025-21758",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21759",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21760",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21761",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21762",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21763",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21764",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21765",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21766",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40075",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40135",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40149",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40158",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40170",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68188",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23112",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31786",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31787",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43125",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43198",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64266",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64298",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64564",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68287",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449909,
"published_at": "2026-10-18T03:33:46+00:00"
}