CLSA-2026-1771240476
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1771240476.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2026-1771240476
- Upstream
- Published
- 2026-02-16T11:14:39Z
- Modified
- 2026-05-27T11:35:27.284940129Z
- Summary
- kernel: Fix of 13 CVEs
- Details
-
- vsock: Do not allow binding to VMADDRPORTANY {CVE-2025-38618}
- cnic: Fix use-after-free bugs in cnicdeletetask {CVE-2025-39945}
- scsi: bfa: Double-free fix {CVE-2025-38699}
- pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}
- ipv6: reject malicious packets in ipv6gsosegment() {CVE-2025-38572}
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}
- fbdev: fix potential buffer overflow in doregisterframebuffer() {CVE-2025-38702}
- scsi: ses: Fix slab-out-of-bounds in sesintfremove() {CVE-2023-53521}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing {CVE-2025-39760}
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat() {CVE-2025-38680}
- fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}
- bna: ensure the copied buf is NUL terminated {CVE-2024-36934}
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
- References