Skip to content
Heist/ feed
Back to feed
UnratedFix available

kernel-uek: Fix of 161 CVEs

Type: advisorySources: OSV

- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540} - ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492} - ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492} - nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480} - sctp: add INIT verification after cookie unpacking {CVE-2026-72398} - sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224} - sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477} - net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841} - netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608} - netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565} - packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731} - net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404} - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390} - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390} - Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676} - NFSD: Prevent client use-after-f

Products
bpftool, kernel-uek, kernel-uek-container, kernel-uek-container-debug, kernel-uek-debug, kernel-uek-debug-devel, kernel-uek-devel, kernel-uek-headers, kernel-uek-tools, perf, python-perf
Affected versions
Not specified
Fixed versions
5.4.17-2136.361.1.el7uek.tuxcare.els1
CVEs
CVE-2022-49328, CVE-2024-36013, CVE-2025-21727, CVE-2025-68256, CVE-2026-100075, CVE-2026-23191, CVE-2026-31408, CVE-2026-31586, CVE-2026-43051, CVE-2026-43198, CVE-2026-45894, CVE-2026-45942, CVE-2026-45970, CVE-2026-45984, CVE-2026-46006, CVE-2026-46052, CVE-2026-46090, CVE-2026-46135, CVE-2026-46181, CVE-2026-46209, CVE-2026-53224, CVE-2026-53246, CVE-2026-53266, CVE-2026-53275, CVE-2026-63971, CVE-2026-63983, CVE-2026-64001, CVE-2026-64109, CVE-2026-64304, CVE-2026-64305, CVE-2026-64320, CVE-2026-64330, CVE-2026-64340, CVE-2026-64341, CVE-2026-64344, CVE-2026-64348, CVE-2026-64363, CVE-2026-64375, CVE-2026-64378, CVE-2026-64379, CVE-2026-64381, CVE-2026-64420, CVE-2026-64422, CVE-2026-64424, CVE-2026-64438, CVE-2026-64442, CVE-2026-64443, CVE-2026-64445, CVE-2026-64446, CVE-2026-68398, CVE-2026-68404, CVE-2026-72085, CVE-2026-72255, CVE-2026-72322, CVE-2026-72389, CVE-2026-72390, CVE-2026-72398, CVE-2026-72404, CVE-2026-72413, CVE-2026-74283, CVE-2026-74287, CVE-2026-74289, CVE-2026-74388, CVE-2026-74469, CVE-2026-74479, CVE-2026-74550, CVE-2026-74565, CVE-2026-74582, CVE-2026-74637, CVE-2026-74689, CVE-2026-74744, CVE-2026-80676, CVE-2026-80731, CVE-2026-80841, CVE-2026-89476, CVE-2026-89477, CVE-2026-89480, CVE-2026-89488, CVE-2026-89492, CVE-2026-89549, CVE-2026-89659, CVE-2026-89674, CVE-2026-89932, CVE-2026-90041, CVE-2026-90413, CVE-2026-92509, CVE-2026-97540, CVE-2026-97608, CVE-2026-98017, CVE-2026-98354, CVE-2026-98357
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 11:50 UTC · Revision 1

Source evidence

kernel-uek: Fix of 161 CVEs

core-osv · Original source

Published 21 Oct 2026, 13:51 UTC

- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540} - ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492} - ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492} - nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480} - sctp: add INIT verification after cookie unpacking {CVE-2026-72398} - sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224} - sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477} - net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841} - netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608} - netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565} - packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731} - net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404} - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390} - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390} - Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676} - NFSD: Prevent client use-after-f

osv:CLSA-2026-1792137027

bpftool

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-container

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-container-debug

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-debug

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-debug-devel

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-devel

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-headers

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

kernel-uek-tools

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

perf

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

python-perf

Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els1

Complete source record
{
  "id": "1aa6ae2b106a5ecad5cd62f40d315624a74e766d4e81bd471feb0e6d6c597d1b",
  "url": "https://osv.dev/vulnerability/CLSA-2026-1792137027",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "kernel-uek: Fix of 161 CVEs",
    "summary": "- net: usb: pegasus: don't rely on id table pointer arithmetic {CVE-2026-97540} - ocfs2: validate directory-index entry counts when reading metadata {CVE-2026-89492} - ocfs2: validate dx_root extent list fields during block read {CVE-2026-89492} - nvme-tcp: reject a read that transferred too few bytes {CVE-2026-89480} - sctp: add INIT verification after cookie unpacking {CVE-2026-72398} - sctp: validate embedded INIT chunk and address list lengths in cookie {CVE-2026-53224} - sctp: fix NULL deref on untransmitted RECONF completion {CVE-2026-89477} - net/packet: defer vmalloc TX_RING free until skbs finish {CVE-2026-80841} - netfilter: nf_log: unregister loggers before per-net teardown {CVE-2026-97608} - netfilter: nf_tables: make nft_object rhltable per table {CVE-2026-74565} - packet: use consistent hard_header_len in non-ring send paths {CVE-2026-74582} - net: remove CAP_SYS_RAWIO zero-padding in dev_validate_header {CVE-2026-80731} - net/atm: fix slab-out-of-bounds read in vcc_setsockopt() {CVE-2026-74689} - net: do not send ICMP/NDISC Redirects when peer allocation fails {CVE-2026-74550} - tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() {CVE-2026-72404} - net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants {CVE-2026-72390} - net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF {CVE-2026-72390} - Drivers: hv: vmbus: use generic driver_override infrastructure {CVE-2026-80676} - NFSD: Prevent client use-after-f",
    "evidence": "osv:CLSA-2026-1792137027",
    "products": [
      {
        "name": {
          "value": "bpftool",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-container",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-container-debug",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-debug",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-debug-devel",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-devel",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-headers",
          "evidence": "/affected/7/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/7/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-uek-tools",
          "evidence": "/affected/8/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/8/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "perf",
          "evidence": "/affected/9/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/9/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "python-perf",
          "evidence": "/affected/10/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.4.17-2136.361.1.el7uek.tuxcare.els1",
            "evidence": "/affected/10/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2026-1792137027",
      "aliases": [
        "CLSA-2026-1792137027"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "bpftool",
            "purl": "pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek",
            "purl": "pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-container",
            "purl": "pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-container-debug",
            "purl": "pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-debug",
            "purl": "pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-debug-devel",
            "purl": "pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-devel",
            "purl": "pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-headers",
            "purl": "pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-uek-tools",
            "purl": "pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "perf",
            "purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els1"
                }
              ]
            }
          ],
          "package": {
            "name": "python-perf",
            "purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792137027.json"
          }
        }
      ],
      "modified": "2026-10-26T09:43:30.254145054Z",
      "provider": "osv",
      "upstream": [
        "CVE-2022-49328",
        "CVE-2024-36013",
        "CVE-2025-21727",
        "CVE-2025-68256",
        "CVE-2026-100075",
        "CVE-2026-23191",
        "CVE-2026-31408",
        "CVE-2026-31586",
        "CVE-2026-43051",
        "CVE-2026-43198",
        "CVE-2026-45894",
        "CVE-2026-45942",
        "CVE-2026-45970",
        "CVE-2026-45984",
        "CVE-2026-46006",
        "CVE-2026-46052",
        "CVE-2026-46090",
        "CVE-2026-46135",
        "CVE-2026-46181",
        "CVE-2026-46209",
        "CVE-2026-53224",
        "CVE-2026-53246",
        "CVE-2026-53266",
        "CVE-2026-53275",
        "CVE-2026-63971",
        "CVE-2026-63983",
        "CVE-2026-64001",
        "CVE-2026-64109",
        "CVE-2026-64304",
        "CVE-2026-64305",
        "CVE-2026-64320",
        "CVE-2026-64330",
        "CVE-2026-64340",
        "CVE-2026-64341",
        "CVE-2026-64344",
        "CVE-2026-64348",
        "CVE-2026-64363",
        "CVE-2026-64375",
        "CVE-2026-64378",
        "CVE-2026-64379",
        "CVE-2026-64381",
        "CVE-2026-64420",
        "CVE-2026-64422",
        "CVE-2026-64424",
        "CVE-2026-64438",
        "CVE-2026-64442",
        "CVE-2026-64443",
        "CVE-2026-64445",
        "CVE-2026-64446",
        "CVE-2026-68398",
        "CVE-2026-68404",
        "CVE-2026-72085",
        "CVE-2026-72255",
        "CVE-2026-72322",
        "CVE-2026-72389",
        "CVE-2026-72390",
        "CVE-2026-72398",
        "CVE-2026-72404",
        "CVE-2026-72413",
        "CVE-2026-74283",
        "CVE-2026-74287",
        "CVE-2026-74289",
        "CVE-2026-74388",
        "CVE-2026-74469",
        "CVE-2026-74479",
        "CVE-2026-74550",
        "CVE-2026-74565",
        "CVE-2026-74582",
        "CVE-2026-74637",
        "CVE-2026-74689",
        "CVE-2026-74744",
        "CVE-2026-80676",
        "CVE-2026-80731",
        "CVE-2026-80841",
        "CVE-2026-89476",
        "CVE-2026-89477",
        "CVE-2026-89480",
        "CVE-2026-89488",
        "CVE-2026-89492",
        "CVE-2026-89549",
        "CVE-2026-89659",
        "CVE-2026-89674",
        "CVE-2026-89932",
        "CVE-2026-90041",
        "CVE-2026-90413",
        "CVE-2026-92509",
        "CVE-2026-97540",
        "CVE-2026-97608",
        "CVE-2026-98017",
        "CVE-2026-98354",
        "CVE-2026-98357"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792137027.html",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49328",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49651",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-52741",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-36013",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-21727",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-100075",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-22976",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23191",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23243",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23455",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23456",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-23457",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31408",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31447",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31469",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31570",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31586",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31588",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31607",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31649",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31662",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31664",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31667",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31673",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31674",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31680",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31682",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31685",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-31758",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43028",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43047",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43051",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43110",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43111",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43113",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43180",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43190",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43198",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43233",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43334",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43339",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43407",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43452",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43466",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-43493",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-45856",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-45894",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-45942",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-45970",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-45984",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46006",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46052",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46070",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46090",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46102",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46120",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46133",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46135",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46149",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46178",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46181",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46206",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46209",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46212",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46227",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46259",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-46303",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52915",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52920",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52924",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52927",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52929",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52931",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52982",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52986",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-52999",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53016",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53040",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53041",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53059",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53075",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53146",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53176",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53194",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53223",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53224",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53225",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53246",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53266",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53268",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-53275",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-63971",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-63983",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64001",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64109",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64191",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64304",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64305",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64306",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64312",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64313",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64320",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64330",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64340",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64341",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64344",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64348",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64363",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64375",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64378",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64379",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64381",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64422",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64424",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-64438",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-68121",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-68398",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-68404",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72085",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72255",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72322",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72389",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72390",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72398",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72404",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-72413",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74283",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74287",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74289",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74388",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74469",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74479",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74550",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74565",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74582",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74637",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74689",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-74744",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80590",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80676",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80731",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80841",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80844",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-81000",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89476",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89477",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89480",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89488",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89492",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89549",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89659",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89674",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-89932",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-90041",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-90413",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-92509",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-97540",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-97608",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-98017",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-98354",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-98357"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2022-49328",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2024-36013",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-21727",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-68256",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-100075",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-23191",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-31408",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-31586",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-43051",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-43198",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-45894",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-45942",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-45970",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-45984",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46006",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46052",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46090",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46135",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46181",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-46209",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-53224",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-53246",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-53266",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-53275",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-63971",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-63983",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64001",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64109",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64304",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64305",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64320",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64330",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64340",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64341",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64344",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64348",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64363",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64375",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64378",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64379",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64381",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64420",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64422",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64424",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64438",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64442",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64443",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64445",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-64446",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-68398",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-68404",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72085",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72255",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72322",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72389",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72390",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72398",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72404",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-72413",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74283",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74287",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74289",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74388",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74469",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74479",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74550",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74565",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74582",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74637",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74689",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-74744",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-80676",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-80731",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-80841",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89476",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89477",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89480",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89488",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89492",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89549",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89659",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89674",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-89932",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-90041",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-90413",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-92509",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-97540",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-97608",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-98017",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-98354",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2026-98357",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 449958,
  "published_at": "2026-10-21T13:51:06+00:00"
}