CLSA-2026-1767864313
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2026-1767864313.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2026-1767864313
- Upstream
- Published
- 2026-01-08T09:25:16Z
- Modified
- 2026-05-27T11:34:14.782645960Z
- Summary
- kernel: Fix of 46 CVEs
- Details
-
- mm: hugetlb: fix UAF in hugetlbhandleuserfault {CVE-2022-50630}
- drm/amdkfd: fix potential kgd_mem UAFs {CVE-2023-53816}
- net/mlx5e: Fix deadlock in tc route query code {CVE-2023-53591}
- PCI: Fix pcideviceis_present() for VFs by checking PF {CVE-2022-50636}
- wifi: ath11k: fix monitor mode bringup crash {CVE-2022-50627}
- wifi: mac80211_hwsim: drop short frames {CVE-2023-53321}
- scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
- amdgpu: validate offsetinbo of drmamdgpugem_va {CVE-2023-53819}
- dmaengine: ptdma: check for null desc before calling ptcmdcallback {CVE-2023-53755}
- wifi: mt7601u: fix an integer underflow {CVE-2023-53679}
- Bluetooth: hci_event: call disconnect callback before deleting conn {CVE-2023-53673}
- firmware: armscpi: Ensure scpiinfo is not assigned if the probe fails {CVE-2022-50087}
- tls: wait for pending async decryptions if tlsstrpmsg_hold fails {CVE-2025-40176}
- cloneprivatemnt(): make sure that caller has CAPSYSADMIN in the right userns {CVE-2025-38499}
- net: openvswitch: reject negative ifindex {CVE-2023-53843}
- drm/i915: Fix NULL ptr deref by checking newcrtcstate {CVE-2023-53833}
- iommu/amd: Improve page fault error reporting {CVE-2023-53789}
- media: v4l2-mem2mem: add lock to protect parameter num_rdy {CVE-2023-53519}
- Bluetooth: Fix potential use-after-free when clear keys {CVE-2023-53386}
- Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305}
- ext4: add bounds checking in getmaxinlinexattrvalue_size() {CVE-2023-53285}
- ext4: fix use-after-free in ext4orphancleanup {CVE-2022-50673}
- cacheinfo: Fix sharedcpumap to handle shared caches at different levels {CVE-2023-53254}
- rxrpc: Make it so that a waiting process can be aborted {CVE-2023-53218}
- ip6vti: fix slab-use-after-free in decodesession6 {CVE-2023-53821}
- vxlan: Fix nexthop hash size {CVE-2023-53192}
- wifi: mac80211: check S1G action frame size {CVE-2023-53257}
- wifi: rtlwifi: Fix global-out-of-bounds bug in rtl8812aephysettxpower_limit() {CVE-2022-50279}
- dm flakey: fix a crash with invalid table line {CVE-2023-53786}
- md/raid10: fix null-ptr-deref in raid10syncrequest {CVE-2023-53832}
- md: don't dereference mddev after export_rdev() {CVE-2023-53665}
- md: fix 'delete_mutex' deadlock
- md: fix duplicate filename for rdev {CVE-2023-53665}
- kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
- mptcp: pm: avoid possible UaF when selecting endp {CVE-2024-44974}
- mptcp: fix UaF in listener shutdown {CVE-2023-53088}
- Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
- Bluetooth: hcisync: fix setlocal_name race condition
- Bluetooth: MGMT: Fix possible deadlocks {CVE-2024-53207}
- tcp: Clear tcpsk(sk)->fastopenrsk in tcp_disconnect(). {CVE-2025-40186}
- e1000e: fix heap overflow in e1000seteeprom {CVE-2025-39898}
- wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
- nfsd: handle getclientlocked() failure in nfsd4setclientidconfirm() {CVE-2025-38724}
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
- xfrm: xfrmallocspi shouldn't use 0 as SPI {CVE-2025-39965}
- xfrm: Duplicate SPI Handling {CVE-2025-39797}
- nfsd: release svcexpkey/svcexport with rcu_work {CVE-2024-53216}
- NFS: Fix a race when updating an existing write {CVE-2025-39697}
- nfs: fold nfspagegrouplocksubrequests into nfslockandjoinrequests
- drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
- References