kernel: Fix of 94 CVEs
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - xfrm: ah6: validate routing header segments_left {CVE-2026-80844} - drm/amd/display: set new_stream to NULL after release {CVE-2026-68236} - RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075} - nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417} - smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448} - usb: free iso schedules on failed submit {CVE-2026-64348} - USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341} - USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340} - crypto: qat - protect service table iterations with service_lock {CVE-2026-64305} - crypto: qat - validate RSA CRT component lengths {CVE-2026-64304} - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422} - udf: validate VAT header length against the VAT inode size {CVE-2026-64323} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964} - net: tun: bound receive headroom {CVE-2026-81000} - bridge: stp: Fix a potential use-after-free when deleting a bridg
- Products
- bpftool, kernel, kernel-core, kernel-cross-headers, kernel-debug, kernel-debug-core, kernel-debug-devel, kernel-debug-modules, kernel-debug-modules-extra, kernel-debug-modules-internal, kernel-devel, kernel-headers, kernel-ipaclones-internal, kernel-modules, kernel-modules-extra, kernel-modules-internal, kernel-selftests-internal, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python3-perf
- Affected versions
- Not specified
- Fixed versions
- 4.18.0-305.25.1.el8_4.tuxcare.els48
- CVEs
- CVE-2021-47247, CVE-2022-49961, CVE-2022-50401, CVE-2022-50552, CVE-2023-0045, CVE-2023-53272, CVE-2023-53282, CVE-2023-53751, CVE-2024-26589, CVE-2024-39480, CVE-2025-37913, CVE-2025-37915, CVE-2025-38068, CVE-2025-38108, CVE-2025-38111, CVE-2025-38117, CVE-2025-38129, CVE-2025-38146, CVE-2025-38239, CVE-2025-38584, CVE-2025-39810, CVE-2025-39860, CVE-2025-39880, CVE-2025-39964, CVE-2026-100075, CVE-2026-17523, CVE-2026-23001, CVE-2026-23318, CVE-2026-31399, CVE-2026-31493, CVE-2026-31786, CVE-2026-43049, CVE-2026-43116, CVE-2026-43125, CVE-2026-43279, CVE-2026-43453, CVE-2026-46174, CVE-2026-52962, CVE-2026-53120, CVE-2026-53266, CVE-2026-53352, CVE-2026-64268, CVE-2026-64304, CVE-2026-64305, CVE-2026-64322, CVE-2026-64323, CVE-2026-64340, CVE-2026-64341, CVE-2026-64343, CVE-2026-64344, CVE-2026-64348, CVE-2026-64422, CVE-2026-64423, CVE-2026-64448, CVE-2026-64496, CVE-2026-64563, CVE-2026-64572, CVE-2026-64579, CVE-2026-68121, CVE-2026-68143, CVE-2026-68153, CVE-2026-68155, CVE-2026-68156, CVE-2026-68158, CVE-2026-68160, CVE-2026-68188, CVE-2026-68214, CVE-2026-68236, CVE-2026-68320, CVE-2026-68363, CVE-2026-68376, CVE-2026-72129, CVE-2026-72389, CVE-2026-74499, CVE-2026-74556, CVE-2026-74580, CVE-2026-74583, CVE-2026-74587, CVE-2026-74588, CVE-2026-74597, CVE-2026-74630, CVE-2026-74660, CVE-2026-74705, CVE-2026-74746, CVE-2026-80558, CVE-2026-80844, CVE-2026-81000, CVE-2026-89555, CVE-2026-90413, CVE-2026-90414, CVE-2026-90435, CVE-2026-97417
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:49 UTC · Revision 1
Source evidence
- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - xfrm: ah6: validate routing header segments_left {CVE-2026-80844} - drm/amd/display: set new_stream to NULL after release {CVE-2026-68236} - RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075} - nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417} - smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448} - usb: free iso schedules on failed submit {CVE-2026-64348} - USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341} - USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340} - crypto: qat - protect service table iterations with service_lock {CVE-2026-64305} - crypto: qat - validate RSA CRT component lengths {CVE-2026-64304} - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422} - udf: validate VAT header length against the VAT inode size {CVE-2026-64323} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964} - net: tun: bound receive headroom {CVE-2026-81000} - bridge: stp: Fix a potential use-after-free when deleting a bridg
osv:CLSA-2026-1791858083
bpftool
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-core
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-cross-headers
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug-core
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug-devel
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug-modules
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug-modules-extra
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-debug-modules-internal
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-devel
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-headers
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-ipaclones-internal
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-modules
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-modules-extra
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-modules-internal
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-selftests-internal
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-tools
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-tools-libs
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
kernel-tools-libs-devel
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
perf
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
python3-perf
Fixed versions: 4.18.0-305.25.1.el8_4.tuxcare.els48
Complete source record
{
"id": "dd350b9372b34143f5d3f7498b8982aede6d3b387ada2793381bf16db94bf8f7",
"url": "https://osv.dev/vulnerability/CLSA-2026-1791858083",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 94 CVEs",
"summary": "- netfilter: bridge: make ebt_snat ARP rewrite writable {CVE-2026-53266} - IB/isert: reject PDUs declaring more data than was received {CVE-2026-90414} - RDMA/mlx5: Fix integer overflow of user QP buffer size {CVE-2026-90435} - IB/isert: reject login PDUs declaring more data than was received {CVE-2026-90413} - xfrm: ah6: validate routing header segments_left {CVE-2026-80844} - drm/amd/display: set new_stream to NULL after release {CVE-2026-68236} - RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters {CVE-2026-100075} - nvmet-rdma: handle inline data with a nonzero offset {CVE-2026-72129} - netfilter: nf_conntrack: use get_unaligned_be32() in tcp_sack() {CVE-2026-97417} - smb: client: restrict implied bcc[0] exemption to responses without data area {CVE-2026-64448} - usb: free iso schedules on failed submit {CVE-2026-64348} - USB: iowarrior: fix use-after-free on disconnect race {CVE-2026-64341} - USB: legousbtower: fix use-after-free on disconnect race {CVE-2026-64340} - crypto: qat - protect service table iterations with service_lock {CVE-2026-64305} - crypto: qat - validate RSA CRT component lengths {CVE-2026-64304} - net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes {CVE-2026-64422} - udf: validate VAT header length against the VAT inode size {CVE-2026-64323} - crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg {CVE-2025-39964} - net: tun: bound receive headroom {CVE-2026-81000} - bridge: stp: Fix a potential use-after-free when deleting a bridg",
"evidence": "osv:CLSA-2026-1791858083",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-core",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-cross-headers",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-core",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules-extra",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-modules-internal",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-ipaclones-internal",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules-extra",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-modules-internal",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-selftests-internal",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs-devel",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3-perf",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "4.18.0-305.25.1.el8_4.tuxcare.els48",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1791858083",
"aliases": [
"CLSA-2026-1791858083"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-core",
"purl": "pkg:rpm/tuxcare/kernel-core?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-cross-headers",
"purl": "pkg:rpm/tuxcare/kernel-cross-headers?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug-core",
"purl": "pkg:rpm/tuxcare/kernel-debug-core?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug-modules",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug-modules-extra",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-debug-modules-internal",
"purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-ipaclones-internal",
"purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-modules",
"purl": "pkg:rpm/tuxcare/kernel-modules?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-modules-extra",
"purl": "pkg:rpm/tuxcare/kernel-modules-extra?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-modules-internal",
"purl": "pkg:rpm/tuxcare/kernel-modules-internal?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-selftests-internal",
"purl": "pkg:rpm/tuxcare/kernel-selftests-internal?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-tools",
"purl": "pkg:rpm/tuxcare/kernel-tools?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-tools-libs",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "kernel-tools-libs-devel",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "4.18.0-305.25.1.el8_4.tuxcare.els48"
}
]
}
],
"package": {
"name": "python3-perf",
"purl": "pkg:rpm/tuxcare/python3-perf?distro=centos-8.4",
"ecosystem": "TuxCare:CentOS:8.4"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.4els/CLSA-2026-1791858083.json"
}
}
],
"modified": "2026-10-26T09:43:24.837063942Z",
"provider": "osv",
"upstream": [
"CVE-2021-47247",
"CVE-2022-49961",
"CVE-2022-50401",
"CVE-2022-50552",
"CVE-2023-0045",
"CVE-2023-53272",
"CVE-2023-53282",
"CVE-2023-53751",
"CVE-2024-26589",
"CVE-2024-39480",
"CVE-2025-37913",
"CVE-2025-37915",
"CVE-2025-38068",
"CVE-2025-38108",
"CVE-2025-38111",
"CVE-2025-38117",
"CVE-2025-38129",
"CVE-2025-38146",
"CVE-2025-38239",
"CVE-2025-38584",
"CVE-2025-39810",
"CVE-2025-39860",
"CVE-2025-39880",
"CVE-2025-39964",
"CVE-2026-100075",
"CVE-2026-17523",
"CVE-2026-23001",
"CVE-2026-23318",
"CVE-2026-31399",
"CVE-2026-31493",
"CVE-2026-31786",
"CVE-2026-43049",
"CVE-2026-43116",
"CVE-2026-43125",
"CVE-2026-43279",
"CVE-2026-43453",
"CVE-2026-46174",
"CVE-2026-52962",
"CVE-2026-53120",
"CVE-2026-53266",
"CVE-2026-53352",
"CVE-2026-64268",
"CVE-2026-64304",
"CVE-2026-64305",
"CVE-2026-64322",
"CVE-2026-64323",
"CVE-2026-64340",
"CVE-2026-64341",
"CVE-2026-64343",
"CVE-2026-64344",
"CVE-2026-64348",
"CVE-2026-64422",
"CVE-2026-64423",
"CVE-2026-64448",
"CVE-2026-64496",
"CVE-2026-64563",
"CVE-2026-64572",
"CVE-2026-64579",
"CVE-2026-68121",
"CVE-2026-68143",
"CVE-2026-68153",
"CVE-2026-68155",
"CVE-2026-68156",
"CVE-2026-68158",
"CVE-2026-68160",
"CVE-2026-68188",
"CVE-2026-68214",
"CVE-2026-68236",
"CVE-2026-68320",
"CVE-2026-68363",
"CVE-2026-68376",
"CVE-2026-72129",
"CVE-2026-72389",
"CVE-2026-74499",
"CVE-2026-74556",
"CVE-2026-74580",
"CVE-2026-74583",
"CVE-2026-74587",
"CVE-2026-74588",
"CVE-2026-74597",
"CVE-2026-74630",
"CVE-2026-74660",
"CVE-2026-74705",
"CVE-2026-74746",
"CVE-2026-80558",
"CVE-2026-80844",
"CVE-2026-81000",
"CVE-2026-89555",
"CVE-2026-90413",
"CVE-2026-90414",
"CVE-2026-90435",
"CVE-2026-97417"
],
"references": [
"https://errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1791858083.html",
"https://nvd.nist.gov/vuln/detail/CVE-2021-47247",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49961",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50401",
"https://nvd.nist.gov/vuln/detail/CVE-2022-50552",
"https://nvd.nist.gov/vuln/detail/CVE-2023-0045",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53272",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53282",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53751",
"https://nvd.nist.gov/vuln/detail/CVE-2024-26589",
"https://nvd.nist.gov/vuln/detail/CVE-2024-39480",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37913",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37915",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38068",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38108",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38111",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38117",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38129",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38146",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38239",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38584",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39810",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39860",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39880",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39964",
"https://nvd.nist.gov/vuln/detail/CVE-2025-54518",
"https://nvd.nist.gov/vuln/detail/CVE-2026-100075",
"https://nvd.nist.gov/vuln/detail/CVE-2026-17523",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23001",
"https://nvd.nist.gov/vuln/detail/CVE-2026-23318",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31399",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31493",
"https://nvd.nist.gov/vuln/detail/CVE-2026-31786",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43049",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43116",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43125",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43279",
"https://nvd.nist.gov/vuln/detail/CVE-2026-43453",
"https://nvd.nist.gov/vuln/detail/CVE-2026-46174",
"https://nvd.nist.gov/vuln/detail/CVE-2026-52962",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53120",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53266",
"https://nvd.nist.gov/vuln/detail/CVE-2026-53352",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64268",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64304",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64305",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64322",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64323",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64340",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64341",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64342",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64343",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64344",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64348",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64422",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64423",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64448",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64496",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64563",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64572",
"https://nvd.nist.gov/vuln/detail/CVE-2026-64579",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68121",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68143",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68153",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68155",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68156",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68158",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68160",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68188",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68214",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68236",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68320",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68363",
"https://nvd.nist.gov/vuln/detail/CVE-2026-68376",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72129",
"https://nvd.nist.gov/vuln/detail/CVE-2026-72389",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74499",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74556",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74580",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74583",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74587",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74588",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74597",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74630",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74660",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74705",
"https://nvd.nist.gov/vuln/detail/CVE-2026-74746",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80558",
"https://nvd.nist.gov/vuln/detail/CVE-2026-80844",
"https://nvd.nist.gov/vuln/detail/CVE-2026-81000",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89555",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90413",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90414",
"https://nvd.nist.gov/vuln/detail/CVE-2026-90435",
"https://nvd.nist.gov/vuln/detail/CVE-2026-97417"
]
},
"related_cves": [
{
"value": "CVE-2021-47247",
"evidence": "/upstream"
},
{
"value": "CVE-2022-49961",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50401",
"evidence": "/upstream"
},
{
"value": "CVE-2022-50552",
"evidence": "/upstream"
},
{
"value": "CVE-2023-0045",
"evidence": "/upstream"
},
{
"value": "CVE-2023-53272",
"evidence": "/upstream"
},
{
"value": "CVE-2023-53282",
"evidence": "/upstream"
},
{
"value": "CVE-2023-53751",
"evidence": "/upstream"
},
{
"value": "CVE-2024-26589",
"evidence": "/upstream"
},
{
"value": "CVE-2024-39480",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37913",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37915",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38068",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38108",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38111",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38117",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38129",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38146",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38239",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38584",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39810",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39860",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39880",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39964",
"evidence": "/upstream"
},
{
"value": "CVE-2026-100075",
"evidence": "/upstream"
},
{
"value": "CVE-2026-17523",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23001",
"evidence": "/upstream"
},
{
"value": "CVE-2026-23318",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31399",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31493",
"evidence": "/upstream"
},
{
"value": "CVE-2026-31786",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43049",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43116",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43125",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43279",
"evidence": "/upstream"
},
{
"value": "CVE-2026-43453",
"evidence": "/upstream"
},
{
"value": "CVE-2026-46174",
"evidence": "/upstream"
},
{
"value": "CVE-2026-52962",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53120",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53266",
"evidence": "/upstream"
},
{
"value": "CVE-2026-53352",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64268",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64304",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64305",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64322",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64323",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64340",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64341",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64343",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64344",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64348",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64422",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64423",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64448",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64496",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64563",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64572",
"evidence": "/upstream"
},
{
"value": "CVE-2026-64579",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68121",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68143",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68153",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68155",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68156",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68158",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68160",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68188",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68214",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68236",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68320",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68363",
"evidence": "/upstream"
},
{
"value": "CVE-2026-68376",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72129",
"evidence": "/upstream"
},
{
"value": "CVE-2026-72389",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74499",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74556",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74580",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74583",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74587",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74588",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74597",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74630",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74660",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74705",
"evidence": "/upstream"
},
{
"value": "CVE-2026-74746",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80558",
"evidence": "/upstream"
},
{
"value": "CVE-2026-80844",
"evidence": "/upstream"
},
{
"value": "CVE-2026-81000",
"evidence": "/upstream"
},
{
"value": "CVE-2026-89555",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90413",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90414",
"evidence": "/upstream"
},
{
"value": "CVE-2026-90435",
"evidence": "/upstream"
},
{
"value": "CVE-2026-97417",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449897,
"published_at": "2026-10-13T07:32:48+00:00"
}