kernel: Fix of 14 CVEs
- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - netlabel: fix out-of-bounds memory accesses {CVE-2019-25160} - ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - ext4: work around deleting a file with i_nlink == 0 safely {CVE-2019-19447} - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() {CVE-2019-15927} - scsi: libsas: fix a race condition when smp task timeout {CVE-2018-20836} - net: Set sk_prot_creator when cloning sockets to the right proto {CVE-2018-9568} - RDS: Heap OOB write in rds_message_alloc_sgs() {CVE-2018-5332}
- Products
- kernel, kernel-abi-whitelists, kernel-debug, kernel-debug-devel, kernel-devel, kernel-doc, kernel-firmware, kernel-headers, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 2.6.32-754.35.8.el6.tuxcare.els32
- CVEs
- CVE-2018-10879, CVE-2018-20836, CVE-2018-5332, CVE-2018-9568, CVE-2019-12456, CVE-2019-15927, CVE-2019-19447, CVE-2019-25160, CVE-2026-23076, CVE-2026-23099, CVE-2026-23388, CVE-2026-23397, CVE-2026-31778, CVE-2026-43040
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:57 UTC · Revision 1
Source evidence
- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - netlabel: fix out-of-bounds memory accesses {CVE-2019-25160} - ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - ext4: work around deleting a file with i_nlink == 0 safely {CVE-2019-19447} - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() {CVE-2019-15927} - scsi: libsas: fix a race condition when smp task timeout {CVE-2018-20836} - net: Set sk_prot_creator when cloning sockets to the right proto {CVE-2018-9568} - RDS: Heap OOB write in rds_message_alloc_sgs() {CVE-2018-5332}
osv:CLSA-2026-1782150583
kernel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-abi-whitelists
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-debug
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-debug-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-devel
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-doc
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-firmware
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
kernel-headers
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
python-perf
Fixed versions: 2.6.32-754.35.8.el6.tuxcare.els32
Complete source record
{
"id": "31014f9aa89b2b62f7d69e3d8ed472f33677718266bff2c12e1a89c2e672dda3",
"url": "https://osv.dev/vulnerability/CLSA-2026-1782150583",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 14 CVEs",
"summary": "- nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - netfilter: nfnetlink_osf: avoid OOB read {CVE-2026-23397} - bonding: limit BOND_MODE_8023AD to Ethernet devices {CVE-2026-23099} - netlabel: fix out-of-bounds memory accesses {CVE-2019-25160} - ext4: always check block group bounds in ext4_init_block_bitmap() {CVE-2018-10879} - ALSA: ctxfi: Fix potential OOB access in audio mixer handling {CVE-2026-23076} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - scsi: mpt3sas_ctl: fix double-fetch bug in _ctl_ioctl_main() {CVE-2019-12456} - ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - ext4: work around deleting a file with i_nlink == 0 safely {CVE-2019-19447} - ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() {CVE-2019-15927} - scsi: libsas: fix a race condition when smp task timeout {CVE-2018-20836} - net: Set sk_prot_creator when cloning sockets to the right proto {CVE-2018-9568} - RDS: Heap OOB write in rds_message_alloc_sgs() {CVE-2018-5332}",
"evidence": "osv:CLSA-2026-1782150583",
"products": [
{
"name": {
"value": "kernel",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-abi-whitelists",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-doc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-firmware",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "2.6.32-754.35.8.el6.tuxcare.els32",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1782150583",
"aliases": [
"CLSA-2026-1782150583"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-abi-whitelists",
"purl": "pkg:rpm/tuxcare/kernel-abi-whitelists?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-doc",
"purl": "pkg:rpm/tuxcare/kernel-doc?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-firmware",
"purl": "pkg:rpm/tuxcare/kernel-firmware?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "2.6.32-754.35.8.el6.tuxcare.els32"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-6",
"ecosystem": "TuxCare:OracleLinux:6"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux6els/CLSA-2026-1782150583.json"
}
}
],
"modified": "2026-10-26T09:43:53.144796833Z",
"provider": "osv",
"upstream": [
"CVE-2018-10879",
"CVE-2018-20836",
"CVE-2018-5332",
"CVE-2018-9568",
"CVE-2019-12456",
"CVE-2019-15927",
"CVE-2019-19447",
"CVE-2019-25160",
"CVE-2026-23076",
"CVE-2026-23099",
"CVE-2026-23388",
"CVE-2026-23397",
"CVE-2026-31778",
"CVE-2026-43040"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1782150583.html"
]
},
"related_cves": [
{
"value": "CVE-2018-10879",
"evidence": "/upstream"
},
{
"value": "CVE-2018-20836",
"evidence": "/upstream"
},
{
"value": "CVE-2018-5332",
"evidence": "/upstream"
},
{
"value": "CVE-2018-9568",
"evidence": "/upstream"
},
{
"value": "CVE-2019-12456",
"evidence": "/upstream"
},
{
"value": "CVE-2019-15927",
"evidence": "/upstream"
},
{
"value": "CVE-2019-19447",
"evidence": "/upstream"
},
{
"value": "CVE-2019-25160",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23076",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23099",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23388",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23397",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31778",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43040",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 450216,
"published_at": "2026-06-22T17:50:11+00:00"
}