kernel-uek: Fix of 17 CVEs
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196} - tracing: Set the trace clock before registering the histogram trigger {CVE-2026-97935} - tracing: Fix use-after-free with same-name named triggers {CVE-2026-89746} - svcrdma: Reject inline replies that overflow the pull-up buffer {CVE-2026-89530} - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path {CVE-2026-74377} - sctp: validate cookie AUTH state before use {CVE-2026-74752} - ceph: fix UAF in check_new_map() on session freed during unlock {CVE-2026-89654} - dm array: validate array block headers on read {CVE-2026-89574} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - wifi: ath9k_htc: don't store usb_device_id {CVE-2026-97541} - fbdev: fix use-after-free in store_modes() {CVE-2026-63826} - fbcon: Set fb_display[i]->mode to NULL when the mode is released {CVE-2025-40323} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}
- Products
- bpftool, kernel-uek, kernel-uek-container, kernel-uek-container-debug, kernel-uek-debug, kernel-uek-debug-devel, kernel-uek-devel, kernel-uek-headers, kernel-uek-tools, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 5.4.17-2136.361.1.el7uek.tuxcare.els2
- CVEs
- CVE-2025-40323, CVE-2025-68366, CVE-2026-45835, CVE-2026-63826, CVE-2026-64543, CVE-2026-74377, CVE-2026-74752, CVE-2026-89530, CVE-2026-89574, CVE-2026-89654, CVE-2026-89746, CVE-2026-93117, CVE-2026-93196, CVE-2026-97541, CVE-2026-97935, CVE-2026-99999
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:56 UTC · Revision 1
Source evidence
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196} - tracing: Set the trace clock before registering the histogram trigger {CVE-2026-97935} - tracing: Fix use-after-free with same-name named triggers {CVE-2026-89746} - svcrdma: Reject inline replies that overflow the pull-up buffer {CVE-2026-89530} - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path {CVE-2026-74377} - sctp: validate cookie AUTH state before use {CVE-2026-74752} - ceph: fix UAF in check_new_map() on session freed during unlock {CVE-2026-89654} - dm array: validate array block headers on read {CVE-2026-89574} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - wifi: ath9k_htc: don't store usb_device_id {CVE-2026-97541} - fbdev: fix use-after-free in store_modes() {CVE-2026-63826} - fbcon: Set fb_display[i]->mode to NULL when the mode is released {CVE-2025-40323} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}
osv:CLSA-2026-1792249415
bpftool
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-container
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-container-debug
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-debug
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-debug-devel
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-devel
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-headers
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
kernel-uek-tools
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
perf
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
python-perf
Fixed versions: 5.4.17-2136.361.1.el7uek.tuxcare.els2
Complete source record
{
"id": "d1d696c5d4f285989a2ba9d62750934849c238adfc166173960dbf2a92b7be15",
"url": "https://osv.dev/vulnerability/CLSA-2026-1792249415",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel-uek: Fix of 17 CVEs",
"summary": "- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - nbd: defer config unlock in nbd_genl_connect {CVE-2025-68366} - nvdimm: virtio_pmem: refcount requests for token lifetime {CVE-2026-93196} - tracing: Set the trace clock before registering the histogram trigger {CVE-2026-97935} - tracing: Fix use-after-free with same-name named triggers {CVE-2026-89746} - svcrdma: Reject inline replies that overflow the pull-up buffer {CVE-2026-89530} - RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path {CVE-2026-74377} - sctp: validate cookie AUTH state before use {CVE-2026-74752} - ceph: fix UAF in check_new_map() on session freed during unlock {CVE-2026-89654} - dm array: validate array block headers on read {CVE-2026-89574} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - wifi: ath9k_htc: don't store usb_device_id {CVE-2026-97541} - fbdev: fix use-after-free in store_modes() {CVE-2026-63826} - fbcon: Set fb_display[i]->mode to NULL when the mode is released {CVE-2025-40323} - Bluetooth: L2CAP: Fix null-ptr-deref in l2cap_sock_new_connection_cb() {CVE-2026-45835} - tipc: fix use-after-free of the discoverer in tipc_disc_rcv() {CVE-2026-64543}",
"evidence": "osv:CLSA-2026-1792249415",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container-debug",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug-devel",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-devel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-tools",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.361.1.el7uek.tuxcare.els2",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1792249415",
"aliases": [
"CLSA-2026-1792249415"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek",
"purl": "pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-container",
"purl": "pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-container-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-headers",
"purl": "pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "kernel-uek-tools",
"purl": "pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.361.1.el7uek.tuxcare.els2"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1792249415.json"
}
}
],
"modified": "2026-10-26T09:43:49.713985039Z",
"provider": "osv",
"upstream": [
"CVE-2025-40323",
"CVE-2025-68366",
"CVE-2026-45835",
"CVE-2026-63826",
"CVE-2026-64543",
"CVE-2026-74377",
"CVE-2026-74752",
"CVE-2026-89530",
"CVE-2026-89574",
"CVE-2026-89654",
"CVE-2026-89746",
"CVE-2026-93117",
"CVE-2026-93196",
"CVE-2026-97541",
"CVE-2026-97935",
"CVE-2026-99999"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1792249415.html",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40323",
"https://nvd.nist.gov/vuln/detail/CVE-2025-68366",
"https://nvd.nist.gov/vuln/detail/CVE-2026-45835",
"https://nvd.nist.gov/vuln/detail/CVE-2026-63826",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64543",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64557",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74377",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74752",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89530",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89574",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89654",
"https://nvd.nist.gov/vuln/detail/CVE-2026-93117",
"https://nvd.nist.gov/vuln/detail/CVE-2026-93196",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97541",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97918",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97935",
"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"
]
},
"related_cves": [
{
"value": "CVE-2025-40323",
"evidence": "/upstream"
},
{
"value": "CVE-2025-68366",
"evidence": "/upstream"
},
{
"value": "CVE-2026-45835",
"evidence": "/upstream"
},
{
"value": "CVE-2026-63826",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64543",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74377",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74752",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89530",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89574",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89654",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89746",
"evidence": "/upstream"
},
{
"value": "CVE-2026-93117",
"evidence": "/upstream"
},
{
"value": "CVE-2026-93196",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97541",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97935",
"evidence": "/upstream"
},
{
"value": "CVE-2026-99999",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 450170,
"published_at": "2026-10-17T15:04:02+00:00"
}