kernel: Fix of 76 CVEs
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189} - ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116} - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057} - ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786} - media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893} - scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011} - ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033} - Squashfs: check block offset is not negative {CVE-2026-90203} - RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354} - nfsd: validate symlink target lengt
- Products
- bpftool, kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-doc, kernel-headers, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 3.10.0-1160.167.1.el7.tuxcare.els1
- CVEs
- CVE-2022-36946, CVE-2022-48702, CVE-2023-52531, CVE-2025-40026, CVE-2026-64007, CVE-2026-64471, CVE-2026-64483, CVE-2026-68329, CVE-2026-72129, CVE-2026-72323, CVE-2026-72383, CVE-2026-72413, CVE-2026-72476, CVE-2026-74287, CVE-2026-74359, CVE-2026-74408, CVE-2026-74444, CVE-2026-74479, CVE-2026-74498, CVE-2026-74505, CVE-2026-74550, CVE-2026-74556, CVE-2026-74569, CVE-2026-80536, CVE-2026-80584, CVE-2026-80622, CVE-2026-80681, CVE-2026-81001, CVE-2026-81003, CVE-2026-89448, CVE-2026-89542, CVE-2026-89548, CVE-2026-89549, CVE-2026-89550, CVE-2026-89553, CVE-2026-89574, CVE-2026-89575, CVE-2026-89633, CVE-2026-89637, CVE-2026-89699, CVE-2026-89778, CVE-2026-89786, CVE-2026-89893, CVE-2026-90011, CVE-2026-90033, CVE-2026-90057, CVE-2026-90116, CVE-2026-90203, CVE-2026-90329, CVE-2026-90413, CVE-2026-90414, CVE-2026-90421, CVE-2026-93117, CVE-2026-93189, CVE-2026-97408, CVE-2026-97445, CVE-2026-97455, CVE-2026-97536, CVE-2026-97539, CVE-2026-97564, CVE-2026-97608, CVE-2026-97931, CVE-2026-97949, CVE-2026-98077, CVE-2026-98185, CVE-2026-98196, CVE-2026-98217, CVE-2026-98222, CVE-2026-98266, CVE-2026-98269, CVE-2026-98312, CVE-2026-98342, CVE-2026-98354, CVE-2026-98375, CVE-2026-99999
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:48 UTC · Revision 1
Source evidence
- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189} - ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116} - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057} - ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786} - media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893} - scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011} - ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033} - Squashfs: check block offset is not negative {CVE-2026-90203} - RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354} - nfsd: validate symlink target lengt
osv:CLSA-2026-1792234299
bpftool
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-debug
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-debug-devel
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-devel
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-doc
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-headers
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-tools
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-tools-libs
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
kernel-tools-libs-devel
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
perf
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
python-perf
Fixed versions: 3.10.0-1160.167.1.el7.tuxcare.els1
Complete source record
{
"id": "a7fb0f3a660c2dd6673aba38cb02740f95a3cc007831cdcd1fbcfc31d6c12d6a",
"url": "https://osv.dev/vulnerability/CLSA-2026-1792234299",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 76 CVEs",
"summary": "- ipv4: validate checksum_start before completing checksum {CVE-2026-99999} - smb: client: fix UAF and buffer leak in cifs_check_trans2() for malformed secondary T2 {CVE-2026-89637} - smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() {CVE-2026-89633} - xen/netfront: drop RX packets with a short Ethernet header {CVE-2026-98375} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - PCI: Fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-90421} - usb: fix UAF when probe runs concurrent to dyn ID removal {CVE-2026-93117} - HID: synchronize input before cleaning up a failed probe {CVE-2026-90329} - HID: core: quiesce input in hid_hw_stop() to prevent use-after-free {CVE-2026-93189} - ALSA: mtpav: shut down output timer before card teardown {CVE-2026-90116} - slip: remove slip_hangup() to fix use-after-free in slip_receive_buf() {CVE-2026-90057} - ext4: fix out-of-bounds read in ext4_read_inline_dir() {CVE-2026-89786} - media: cx23885: cancel NetUP CI work before teardown {CVE-2026-89893} - scsi: target: iscsi: Reserve a terminator byte for the login payload {CVE-2026-90011} - ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output() {CVE-2026-90033} - Squashfs: check block offset is not negative {CVE-2026-90203} - RDMA/mad: Fix receive buffer leak when PKey enforcement fails {CVE-2026-98354} - nfsd: validate symlink target lengt",
"evidence": "osv:CLSA-2026-1792234299",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-doc",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs-devel",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.167.1.el7.tuxcare.els1",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1792234299",
"aliases": [
"CLSA-2026-1792234299"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-doc",
"purl": "pkg:rpm/tuxcare/kernel-doc?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-tools",
"purl": "pkg:rpm/tuxcare/kernel-tools?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-tools-libs",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "kernel-tools-libs-devel",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.167.1.el7.tuxcare.els1"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=centos-7",
"ecosystem": "TuxCare:CentOS:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos7els/CLSA-2026-1792234299.json"
}
}
],
"modified": "2026-10-26T09:43:22.487814812Z",
"provider": "osv",
"upstream": [
"CVE-2022-36946",
"CVE-2022-48702",
"CVE-2023-52531",
"CVE-2025-40026",
"CVE-2026-64007",
"CVE-2026-64471",
"CVE-2026-64483",
"CVE-2026-68329",
"CVE-2026-72129",
"CVE-2026-72323",
"CVE-2026-72383",
"CVE-2026-72413",
"CVE-2026-72476",
"CVE-2026-74287",
"CVE-2026-74359",
"CVE-2026-74408",
"CVE-2026-74444",
"CVE-2026-74479",
"CVE-2026-74498",
"CVE-2026-74505",
"CVE-2026-74550",
"CVE-2026-74556",
"CVE-2026-74569",
"CVE-2026-80536",
"CVE-2026-80584",
"CVE-2026-80622",
"CVE-2026-80681",
"CVE-2026-81001",
"CVE-2026-81003",
"CVE-2026-89448",
"CVE-2026-89542",
"CVE-2026-89548",
"CVE-2026-89549",
"CVE-2026-89550",
"CVE-2026-89553",
"CVE-2026-89574",
"CVE-2026-89575",
"CVE-2026-89633",
"CVE-2026-89637",
"CVE-2026-89699",
"CVE-2026-89778",
"CVE-2026-89786",
"CVE-2026-89893",
"CVE-2026-90011",
"CVE-2026-90033",
"CVE-2026-90057",
"CVE-2026-90116",
"CVE-2026-90203",
"CVE-2026-90329",
"CVE-2026-90413",
"CVE-2026-90414",
"CVE-2026-90421",
"CVE-2026-93117",
"CVE-2026-93189",
"CVE-2026-97408",
"CVE-2026-97445",
"CVE-2026-97455",
"CVE-2026-97536",
"CVE-2026-97539",
"CVE-2026-97564",
"CVE-2026-97608",
"CVE-2026-97931",
"CVE-2026-97949",
"CVE-2026-98077",
"CVE-2026-98185",
"CVE-2026-98196",
"CVE-2026-98217",
"CVE-2026-98222",
"CVE-2026-98266",
"CVE-2026-98269",
"CVE-2026-98312",
"CVE-2026-98342",
"CVE-2026-98354",
"CVE-2026-98375",
"CVE-2026-99999"
],
"references": [
"https://errata.tuxcare.com/els_os/centos7els/CLSA-2026-1792234299.html",
"https://nvd.nist.gov/vuln/detail/CVE-2022-36946",
"https://nvd.nist.gov/vuln/detail/CVE-2022-48702",
"https://nvd.nist.gov/vuln/detail/CVE-2023-52531",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40026",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64471",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64483",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68329",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72129",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72323",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72383",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72413",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72476",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74287",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74359",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74408",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74444",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74479",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74498",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74505",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74550",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74556",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74569",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80536",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80584",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80622",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80681",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80829",
"https://nvd.nist.gov/vuln/detail/CVE-2026-81001",
"https://nvd.nist.gov/vuln/detail/CVE-2026-81003",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89448",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89542",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89548",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89549",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89550",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89553",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89574",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89575",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89633",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89637",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89699",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89778",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89786",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89893",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90011",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90033",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90057",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90116",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90203",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90329",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90413",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90414",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90421",
"https://nvd.nist.gov/vuln/detail/CVE-2026-93117",
"https://nvd.nist.gov/vuln/detail/CVE-2026-93189",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97408",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97445",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97455",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97536",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97539",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97564",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97608",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97931",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97949",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98077",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98185",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98186",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98196",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98217",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98222",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98266",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98269",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98312",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98342",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98354",
"https://nvd.nist.gov/vuln/detail/CVE-2026-98375",
"https://nvd.nist.gov/vuln/detail/CVE-2026-99999"
]
},
"related_cves": [
{
"value": "CVE-2022-36946",
"evidence": "/upstream"
},
{
"value": "CVE-2022-48702",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52531",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40026",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64007",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64471",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64483",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68329",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72129",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72323",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72383",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72413",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72476",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74287",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74359",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74408",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74444",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74479",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74498",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74505",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74550",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74556",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74569",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80536",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80584",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80622",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80681",
"evidence": "/upstream"
},
{
"value": "CVE-2026-81001",
"evidence": "/upstream"
},
{
"value": "CVE-2026-81003",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89448",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89542",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89548",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89549",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89550",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89553",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89574",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89575",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89633",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89637",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89699",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89778",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89786",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89893",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90011",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90033",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90057",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90116",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90203",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90329",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90413",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90414",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90421",
"evidence": "/upstream"
},
{
"value": "CVE-2026-93117",
"evidence": "/upstream"
},
{
"value": "CVE-2026-93189",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97408",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97445",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97455",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97536",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97539",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97564",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97608",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97931",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97949",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98077",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98185",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98196",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98217",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98222",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98266",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98269",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98312",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98342",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98354",
"evidence": "/upstream"
},
{
"value": "CVE-2026-98375",
"evidence": "/upstream"
},
{
"value": "CVE-2026-99999",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449871,
"published_at": "2026-10-17T12:21:54+00:00"
}