kernel-uek: Fix of 26 CVEs
- libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356} - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - usb: class: cdc-wdm: fix reordering issue in read code path
- Products
- bpftool, kernel-uek, kernel-uek-container, kernel-uek-container-debug, kernel-uek-debug, kernel-uek-debug-devel, kernel-uek-devel, kernel-uek-headers, kernel-uek-tools, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 5.4.17-2136.354.4.el7uek.tuxcare.els5
- CVEs
- CVE-2022-49641, CVE-2025-71093, CVE-2025-71116, CVE-2026-23216, CVE-2026-23318, CVE-2026-23356, CVE-2026-23365, CVE-2026-23367, CVE-2026-23381, CVE-2026-23382, CVE-2026-23388, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398, CVE-2026-31399, CVE-2026-31405, CVE-2026-31602, CVE-2026-31659, CVE-2026-31778, CVE-2026-43040, CVE-2026-43050, CVE-2026-43206, CVE-2026-43427, CVE-2026-43450
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:46 UTC · Revision 1
Source evidence
- libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() {CVE-2026-23356} - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - usb: class: cdc-wdm: fix reordering issue in read code path
osv:CLSA-2026-1780315683
bpftool
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-container
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-container-debug
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-debug
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-debug-devel
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-devel
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-headers
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
kernel-uek-tools
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
perf
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
python-perf
Fixed versions: 5.4.17-2136.354.4.el7uek.tuxcare.els5
Complete source record
{
"id": "d14cffde2adb34755b87e75a4494fc72cc874a36948e8fb995f8900a0e400fa4",
"url": "https://osv.dev/vulnerability/CLSA-2026-1780315683",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel-uek: Fix of 26 CVEs",
"summary": "- libceph: make decode_pool() more resilient against corrupted osdmaps {CVE-2025-71116} - scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() {CVE-2026-23216} - e1000: fix OOB in e1000_tbi_should_accept() {CVE-2025-71093} - ALSA: usb-audio: Use correct version for UAC3 header validation {CVE-2026-23318} - nfnetlink_osf: validate individual option lengths in fingerprints {CVE-2026-23397} - Squashfs: check metadata block offset is within range {CVE-2026-23388} - net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled {CVE-2026-23381} - wifi: mac80211: fix NULL deref in mesh_matches_local() {CVE-2026-23396} - icmp: fix NULL pointer dereference in icmp_tag_validation() {CVE-2026-23398} - HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them {CVE-2026-23382} - net: usb: kalmia: validate USB endpoints {CVE-2026-23365} - wifi: radiotap: reject radiotap with unknown bits {CVE-2026-23367} - drbd: fix \"LOGIC BUG\" in drbd_al_begin_io_nonblock() {CVE-2026-23356} - batman-adv: reject oversized global TT response buffers {CVE-2026-31659} - drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() {CVE-2026-43206} - net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak {CVE-2026-43040} - ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602} - nvdimm/bus: Fix potential use after free in asynchronous initialization {CVE-2026-31399} - usb: class: cdc-wdm: fix reordering issue in read code path",
"evidence": "osv:CLSA-2026-1780315683",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-container-debug",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-debug-devel",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-devel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-headers",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-uek-tools",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.17-2136.354.4.el7uek.tuxcare.els5",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1780315683",
"aliases": [
"CLSA-2026-1780315683"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek",
"purl": "pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-container",
"purl": "pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-container-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-debug",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-devel",
"purl": "pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-headers",
"purl": "pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "kernel-uek-tools",
"purl": "pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.17-2136.354.4.el7uek.tuxcare.els5"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7",
"ecosystem": "TuxCare:OracleLinux:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1780315683.json"
}
}
],
"modified": "2026-10-26T09:43:16.225127126Z",
"provider": "osv",
"upstream": [
"CVE-2022-49641",
"CVE-2025-71093",
"CVE-2025-71116",
"CVE-2026-23216",
"CVE-2026-23318",
"CVE-2026-23356",
"CVE-2026-23365",
"CVE-2026-23367",
"CVE-2026-23381",
"CVE-2026-23382",
"CVE-2026-23388",
"CVE-2026-23396",
"CVE-2026-23397",
"CVE-2026-23398",
"CVE-2026-31399",
"CVE-2026-31405",
"CVE-2026-31602",
"CVE-2026-31659",
"CVE-2026-31778",
"CVE-2026-43040",
"CVE-2026-43050",
"CVE-2026-43206",
"CVE-2026-43427",
"CVE-2026-43450"
],
"references": [
"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780315683.html",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49641",
"https://nvd.nist.gov/vuln/detail/CVE-2025-71093",
"https://nvd.nist.gov/vuln/detail/CVE-2025-71116",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23216",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23318",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23356",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23365",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23367",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23381",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23382",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23388",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23396",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23397",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23398",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31399",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31405",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31602",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31659",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31778",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43040",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43050",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43078",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43206",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43427",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43450",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46243"
]
},
"related_cves": [
{
"value": "CVE-2022-49641",
"evidence": "/upstream"
},
{
"value": "CVE-2025-71093",
"evidence": "/upstream"
},
{
"value": "CVE-2025-71116",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23216",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23318",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23356",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23365",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23367",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23381",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23382",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23388",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23396",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23397",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23398",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31399",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31405",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31602",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31659",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31778",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43040",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43050",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43206",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43427",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43450",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449796,
"published_at": "2026-07-28T12:02:49+00:00"
}