{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "s390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block {CVE-2026-98399}\n- USB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr() {CVE-2026-53195}\n- hwrng: geode - Fix PCI device refcount leak {CVE-2022-50659}\n- ALSA: usb-audio: fix OOB write in snd_usbmidi_novation_output() {CVE-2026-80829}\n- ubi: Fix use-after-free when volume resizing failed {CVE-2023-53800}\n- btrfs: inode: Verify inode mode to avoid NULL pointer dereference {CVE-2019-19816}\n- sctp: avoid livelock while updating retransmit path {CVE-2026-98614}\n- scsi: libiscsi_tcp: Check the data direction of a Data-In PDU {CVE-2026-98479}\n- Bluetooth: L2CAP: validate frame length before control and FCS access {CVE-2026-98457}\n- net: atl1c: fix soft lockup on out-of-range tpd_cons read {CVE-2026-98489}\n- net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read {CVE-2026-98488}\n- Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough {CVE-2026-98602}\n- ipvs: filter some flags received in the backup server {CVE-2026-98794}\n- sctp: hold asoc or transport before mod_timer() in timer handlers {CVE-2026-98586}\n- Bluetooth: hci_sock: validate event length before filtering {CVE-2026-98461}\n- Bluetooth: hci_sock: reject out-of-range OCF values {CVE-2026-98460}\n- net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read {CVE-2026-98494}\n- vt: skip screen update for DEC alignment test on backgroup consoles {CVE-2026-98838}\n- USB: serial: fix dynamic id driver deregistration race {CVE-2026-98697}\n- net: usb: catc: bound the RX packet length in catc_rx_done() {CVE-2026-98612}\n- sctp: discard the rest of the packet on a stale-cookie error {CVE-2026-98548}\n- media: av7110: prevent underflow in write_ts_to_decoder() {CVE-2023-54284}\n- fbcon: Avoid OOB font access if console rotation fails {CVE-2026-46191}\n- wifi: b43legacy: enforce bounds check on firmware key index in RX path {CVE-2026-46163}\n- wifi: b43: enforce bounds check on firmware key index in b43_rx() {CVE-2026-46122}\n- sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks {CVE-2026-53004}\n- scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read {CVE-2026-89846}\n- ext4: fix dirtyclusters double decrement on fs shutdown {CVE-2026-45920}\n- nfsd: fix posix_acl leak on SETACL decode failure {CVE-2026-53397}\n- dm: fix a buffer overflow in ioctl processing {CVE-2026-46294}\n- sctp: validate cookie AUTH state before use {CVE-2026-74752}\n- ip6_tunnel: clear skb2->cb[] in ip6ip6_err() {CVE-2026-74597}\n- selinux: require every boolean value to be defined {CVE-2026-80913}\n- netfilter: conntrack: remove sprintf usage {CVE-2026-53002}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos6els/advisories/2026/clsa-2026_1792975902.json" } ], "tracking": { "current_release_date": "2026-10-29T22:10:21Z", "generator": { "date": "2026-10-29T22:10:21Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1792975902", "initial_release_date": "2026-10-26T00:51:44Z", "revision_history": [ { "date": "2026-10-26T00:51:44Z", "number": "1", "summary": "Initial version" }, { "date": "2026-10-29T22:10:21Z", "number": "2", "summary": "Official Publication" } ], "status": "final", "version": "2" }, "title": "kernel: Fix of 32 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 6", "product": { "name": "Community Enterprise Operating System 6", "product_id": "CentOS-6", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:6:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-headers@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-devel@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug-devel@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/perf@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } }, { "category": "product_version", "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_id": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/python-perf@2.6.32-754.35.8.el6.tuxcare.els39?arch=i686" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-headers@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-devel@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-debug-devel@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/perf@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } }, { "category": "product_version", "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_id": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/python-perf@2.6.32-754.35.8.el6.tuxcare.els39?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product": { "name": "kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_id": "kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-abi-whitelists@2.6.32-754.35.8.el6.tuxcare.els39?arch=noarch" } } }, { "category": "product_version", "name": "kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product": { "name": "kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_id": "kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-firmware@2.6.32-754.35.8.el6.tuxcare.els39?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product": { "name": "kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_id": "kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "product_identification_helper": { "purl": "pkg:rpm/cloudlinux/kernel-doc@2.6.32-754.35.8.el6.tuxcare.els39?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "CloudLinux" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch" }, "product_reference": "kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch" }, "product_reference": "kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch" }, "product_reference": "kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" }, "product_reference": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "relates_to_product_reference": "CentOS-6" }, { "category": "default_component_of", "full_product_name": { "name": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686 as a component of Community Enterprise Operating System 6", "product_id": "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686" }, "product_reference": "python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "relates_to_product_reference": "CentOS-6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-98838", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvt: skip screen update for DEC alignment test on backgroup consoles\n\n[BUG]\nRecently, we encountered a KASAN warning as follows:\n\nBUG: KASAN: slab-out-of-bounds in fb_pad_aligned_buffer+0x11f/0x140\nRead of size 1 at addr ff1100015fd9f6a4 by task tty_fbcon_oob/1239\nCPU: 7 UID: 0 PID: 1239 Comm: tty_fbcon_oob Not tainted 7.3.0-rc1 #100 PREEMPT(full)\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-4.fc41 04/01/2014\nCall Trace:\n \n ...\n kasan_report+0xf0/0x120\n fb_pad_aligned_buffer+0x11f/0x140\n ccw_putcs+0x86c/0xa80\n fbcon_putcs+0x338/0x410\n do_update_region+0x21d/0x450\n do_con_write+0x1e0e/0x4880\n con_write+0x13/0x80\n n_tty_write+0x374/0x1010\n file_tty_write.isra.0+0x404/0x7a0\n ...\n\nreproduce:\n1) open /dev/tty0, set a KDFONTOP ioctl with op.op = KD_FONT_OP_SET,\nop.width = 8 and op.height = 16 (visible VC1)\n2) open /dev/tty1, set a KDFONTOP ioctl with op.op = KD_FONT_OP_SET,\nop.width = 28 and op.height = 24 (invisible VC2)\n3) echo 3 > /sys/devices/virtual/graphics/fbcon/rotate_all\n4) write EShash8(esc hash8) to tty1\n\n[CAUSE]\nAll VCs render to the framebuffer. setfont only modifies the target VC's\nfont without resizing the framebuffer backing buffer (par->rotated.buf);\nthe buffer is only resized for the visible VC\n(fbcon_do_set_font -> ... -> vc_do_resize -> update_screen). This relies on\nthe con_should_update() check performed before every update_region().\n\nHowever, the ESC # 8 path (do_con_trol -> do_update_region) omits the\ncon_should_update() check. After changing the font size of an invisible VC,\ndo_update_region() fills using the new font size against a buffer that was\nnever resized, causing an out-of-bounds access.\n\n[FIX]\nOnly push the update when the console is visible and not blanked, add\nthe con_should_update() check in the do_con_trol() like every other call\nsite of do_update_region() (update_region(), invert_screen(), ...).", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98838" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0928ed9bd7946baee911efa401088697836e3b1e", "url": "https://git.kernel.org/stable/c/0928ed9bd7946baee911efa401088697836e3b1e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ee53081425a1a31ce15089012cd96b8353eb44e", "url": "https://git.kernel.org/stable/c/0ee53081425a1a31ce15089012cd96b8353eb44e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2fc4e71aefab57c80ccc9775aad2af503fc90810", "url": "https://git.kernel.org/stable/c/2fc4e71aefab57c80ccc9775aad2af503fc90810" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/985c000b046ca4ee11ee34ef85db500c569ef6e8", "url": "https://git.kernel.org/stable/c/985c000b046ca4ee11ee34ef85db500c569ef6e8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ad06f7312d3f615dd466483ce81a9b9619166686", "url": "https://git.kernel.org/stable/c/ad06f7312d3f615dd466483ce81a9b9619166686" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-54284", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: av7110: prevent underflow in write_ts_to_decoder()\n\nThe buf[4] value comes from the user via ts_play(). It is a value in\nthe u8 range. The final length we pass to av7110_ipack_instant_repack()\nis \"len - (buf[4] + 1) - 4\" so add a check to ensure that the length is\nnot negative. It's not clear that passing a negative len value does\nanything bad necessarily, but it's not best practice.\n\nWith the new bounds checking the \"if (!len)\" condition is no longer\npossible or required so remove that.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54284" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/423350af9e27f005611bd881b1df2cab66de943d", "url": "https://git.kernel.org/stable/c/423350af9e27f005611bd881b1df2cab66de943d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/620b983589e0223876bf1463b01100a9c67b56ba", "url": "https://git.kernel.org/stable/c/620b983589e0223876bf1463b01100a9c67b56ba" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6606e2404ee9e20a3ae5b42fc3660d41b739ed3e", "url": "https://git.kernel.org/stable/c/6606e2404ee9e20a3ae5b42fc3660d41b739ed3e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6680af5be9f08d830567e9118f76d3e64684db8f", "url": "https://git.kernel.org/stable/c/6680af5be9f08d830567e9118f76d3e64684db8f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/77eeb4732135c18c2fdfab80839645b393f3e774", "url": "https://git.kernel.org/stable/c/77eeb4732135c18c2fdfab80839645b393f3e774" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7b93ab60fe9ed04be0ff155bc30ad39dea23e22b", "url": "https://git.kernel.org/stable/c/7b93ab60fe9ed04be0ff155bc30ad39dea23e22b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/86ba65e5357bfbb6c082f68b265a292ee1bdde1d", "url": "https://git.kernel.org/stable/c/86ba65e5357bfbb6c082f68b265a292ee1bdde1d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca4ce92e3ec9fd3c7c936b912b95c53331d5159c", "url": "https://git.kernel.org/stable/c/ca4ce92e3ec9fd3c7c936b912b95c53331d5159c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/eed9496a0501357aa326ddd6b71408189ed872eb", "url": "https://git.kernel.org/stable/c/eed9496a0501357aa326ddd6b71408189ed872eb" } ], "release_date": "2025-12-30T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98697", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: fix dynamic id driver deregistration race\n\nOnly free the dynamic ids after having deregistered the driver and\nremoved the \"new_id\" attribute to avoid leaking any id added by a racing\nwrite to the attribute.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98697" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/29172161236154f362e35694864cacbdeb07d060", "url": "https://git.kernel.org/stable/c/29172161236154f362e35694864cacbdeb07d060" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9", "url": "https://git.kernel.org/stable/c/380f57cd58e26e0f3687451196ec446c473c52d9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81", "url": "https://git.kernel.org/stable/c/4d6da6867b4ac6468d634a0dd3c35dfc0dc8af81" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2", "url": "https://git.kernel.org/stable/c/63594e8ffe097bc0b7639936f33799a7653dded2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701", "url": "https://git.kernel.org/stable/c/ebd8fcaaacb66c15ae7e19d14619abe3762e0701" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53397", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix posix_acl leak on SETACL decode failure\n\nnfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each\ncall nfs_stream_decode_acl() twice, first for NFS_ACL and then for\nNFS_DFACL. Each successful call transfers ownership of a freshly\nallocated posix_acl into argp->acl_access or argp->acl_default. If\nthe first call succeeds but the second fails, the decoder returns\nfalse and argp->acl_access is left dangling.\n\nACLPROC2_SETACL.pc_release was wired to nfssvc_release_attrstat and\nACLPROC3_SETACL.pc_release was wired to nfs3svc_release_fhandle.\nBoth only call fh_put() and have no knowledge of the ACL fields on\nargp. The posix_acl_release() pairs sat at the out: labels inside\nnfsacld_proc_setacl() and nfsd3_proc_setacl(), but svc_process()\nskips pc_func when pc_decode returns false, so that cleanup is\nunreachable on decode failure:\n\n svc_process_common()\n pc_decode() /* decode_setaclargs: false */\n /* pc_func skipped */\n pc_release() /* fh_put only -- ACLs leaked */\n\nThe orphaned posix_acl is leaked for the lifetime of the server.\n\nFix by adding nfsaclsvc_release_setacl() and nfs3svc_release_setacl(),\nwhich release both argp->acl_access and argp->acl_default in addition\nto fh_put(), and wiring them as pc_release for their respective SETACL\nprocedures. pc_release runs on every path svc_process() takes after\ndecode, including decode failure, so the posix_acl_release() pairs are\nremoved from the proc functions' out: labels to keep ownership in one\nplace. This matches the existing release_getacl() pattern used by\nthe sibling GETACL procedures.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53397" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0853ac544c590880d797b04daa33fcb72b6be0e1", "url": "https://git.kernel.org/stable/c/0853ac544c590880d797b04daa33fcb72b6be0e1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/136b416593f1349cf6f72c8e3d18f0f204ee8545", "url": "https://git.kernel.org/stable/c/136b416593f1349cf6f72c8e3d18f0f204ee8545" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e96239fddcefacf6afe6c498357be68eacbcabc", "url": "https://git.kernel.org/stable/c/1e96239fddcefacf6afe6c498357be68eacbcabc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/887f92ceccf3eacd5f2402db21254d66372fae00", "url": "https://git.kernel.org/stable/c/887f92ceccf3eacd5f2402db21254d66372fae00" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a5b42c1e4ff2befaa6b96f7cbf32174751eba083", "url": "https://git.kernel.org/stable/c/a5b42c1e4ff2befaa6b96f7cbf32174751eba083" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2eb1ffd511d1b3c3e21122f97cbbccea411e277", "url": "https://git.kernel.org/stable/c/b2eb1ffd511d1b3c3e21122f97cbbccea411e277" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b94c4be77682aab06d65ca7296149e3bcfb37353", "url": "https://git.kernel.org/stable/c/b94c4be77682aab06d65ca7296149e3bcfb37353" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bd69a825485168ef74e815ecb286754b570fdcc7", "url": "https://git.kernel.org/stable/c/bd69a825485168ef74e815ecb286754b570fdcc7" } ], "release_date": "2026-07-19T12:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-45920", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix dirtyclusters double decrement on fs shutdown\n\nfstests test generic/388 occasionally reproduces a warning in\next4_put_super() associated with the dirty clusters count:\n\n WARNING: CPU: 7 PID: 76064 at fs/ext4/super.c:1324 ext4_put_super+0x48c/0x590 [ext4]\n\nTracing the failure shows that the warning fires due to an\ns_dirtyclusters_counter value of -1. IOW, this appears to be a\nspurious decrement as opposed to some sort of leak. Further tracing\nof the dirty cluster count deltas and an LLM scan of the resulting\noutput identified the cause as a double decrement in the error path\nbetween ext4_mb_mark_diskspace_used() and the caller\next4_mb_new_blocks().\n\nFirst, note that generic/388 is a shutdown vs. fsstress test and so\nproduces a random set of operations and shutdown injections. In the\nproblematic case, the shutdown triggers an error return from the\next4_handle_dirty_metadata() call(s) made from\next4_mb_mark_context(). The changed value is non-zero at this point,\nso ext4_mb_mark_diskspace_used() does not exit after the error\nbubbles up from ext4_mb_mark_context(). Instead, the former\ndecrements both cluster counters and returns the error up to\next4_mb_new_blocks(). The latter falls into the !ar->len out path\nwhich decrements the dirty clusters counter a second time, creating\nthe inconsistency.\n\nTo avoid this problem and simplify ownership of the cluster\nreservation in this codepath, lift the counter reduction to a single\nplace in the caller. This makes it more clear that\next4_mb_new_blocks() is responsible for acquiring cluster\nreservation (via ext4_claim_free_clusters()) in the !delalloc case\nas well as releasing it, regardless of whether it ends up consumed\nor returned due to failure.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-45920" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3924aea2c33df3864929c1acd178bfc29d8f005f", "url": "https://git.kernel.org/stable/c/3924aea2c33df3864929c1acd178bfc29d8f005f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/523d5a4df3c649fa305c89efb552ec62a1ce9d3d", "url": "https://git.kernel.org/stable/c/523d5a4df3c649fa305c89efb552ec62a1ce9d3d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/55576fa14771d33994c29a9ae960e07bb3f56c20", "url": "https://git.kernel.org/stable/c/55576fa14771d33994c29a9ae960e07bb3f56c20" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/61e372122b6d95aec940fdaea0a16f988f359897", "url": "https://git.kernel.org/stable/c/61e372122b6d95aec940fdaea0a16f988f359897" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/81982a11406c5da6c6e2b188028e7056e16b7128", "url": "https://git.kernel.org/stable/c/81982a11406c5da6c6e2b188028e7056e16b7128" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94a8cea54cd935c54fa2fba70354757c0fc245e3", "url": "https://git.kernel.org/stable/c/94a8cea54cd935c54fa2fba70354757c0fc245e3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca408af08544d96769c93a3d81a7f63f61129e95", "url": "https://git.kernel.org/stable/c/ca408af08544d96769c93a3d81a7f63f61129e95" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dbc4e10619ed87a50e637b96f2e574df36a7a769", "url": "https://git.kernel.org/stable/c/dbc4e10619ed87a50e637b96f2e574df36a7a769" } ], "release_date": "2026-05-27T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98461", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: validate event length before filtering\n\nis_filtered_packet() reads the event code from skb->data[0] without first\nchecking that the skb is nonempty. When an opcode filter is configured,\nit also reads the command opcode at offsets 3 or 4 without checking that\na Command Complete or Command Status event is long enough.\n\nhci_send_to_sock() invokes the filter before hci_event_packet() validates\nthe event header. A malformed event supplied by a controller or a vhci\ndevice can therefore cause an out-of-bounds read.\n\nKeep the unmasked event code for the opcode checks. The masked value is\nneeded for the 64-bit event bitmap, but using it to identify command events\naliases event codes above 0x3f. In particular, Synchronous Train Complete\n(0x4f) was treated as Command Status (0x0f) even though its payload has no\nopcode.\n\nReject actual command events that are too short for the field being\ninspected. A truncated command event cannot match a configured opcode.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98461" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a92763c2ba721bf113cd83f913fe8c511b4a4dc", "url": "https://git.kernel.org/stable/c/1a92763c2ba721bf113cd83f913fe8c511b4a4dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2501a3b7b7144d1d11939b355a48ed01f83d0c62", "url": "https://git.kernel.org/stable/c/2501a3b7b7144d1d11939b355a48ed01f83d0c62" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3976bbcd43b9b94c53ac9b0fd28888011588f4cc", "url": "https://git.kernel.org/stable/c/3976bbcd43b9b94c53ac9b0fd28888011588f4cc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/39e99d85071bca0feeec3164a9437ca1bff297fc", "url": "https://git.kernel.org/stable/c/39e99d85071bca0feeec3164a9437ca1bff297fc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b0a6cf99afd57a39598b1beca0e86ef5004980de", "url": "https://git.kernel.org/stable/c/b0a6cf99afd57a39598b1beca0e86ef5004980de" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dca25c204f71be0556a15177dbe037237ac43e5e", "url": "https://git.kernel.org/stable/c/dca25c204f71be0556a15177dbe037237ac43e5e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ebdd49cec380731844ed9df4092a29a014623df4", "url": "https://git.kernel.org/stable/c/ebdd49cec380731844ed9df4092a29a014623df4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f894f6292d5122cd62d30600736b4a0ae79f7770", "url": "https://git.kernel.org/stable/c/f894f6292d5122cd62d30600736b4a0ae79f7770" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-74752", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: validate cookie AUTH state before use\n\nWhen cookie authentication is disabled, COOKIE_ECHO restores fixed-size\nAUTH fields directly from peer-controlled cookie bytes. A forged RANDOM\nlength, HMAC list, or CHUNKS list can then reach association consumers\nwith lengths or identifiers that were never validated against the local\nbacking arrays.\n\nA forged RANDOM length can cause out-of-bounds reads during key-vector\nconstruction. A forged HMAC identifier also caused a 32-byte write past\na zero-length AUTH chunk, providing a primitive for a local privilege\nescalation chain.\n\nValidate the cookie's RANDOM, HMACS, and CHUNKS parameters at the cookie\ntrust boundary before copying them into the association. Reject invalid\ntypes, malformed lengths, unsupported HMAC identifiers, HMAC lists\nwithout SHA1, and forbidden chunk ids.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74752" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3dbb44d88b1e94dd31fe43588af7437b34b44d56", "url": "https://git.kernel.org/stable/c/3dbb44d88b1e94dd31fe43588af7437b34b44d56" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4a4410de8dc6903d859c9e1731fc6dcee28bd072", "url": "https://git.kernel.org/stable/c/4a4410de8dc6903d859c9e1731fc6dcee28bd072" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7f17984cfa697613800eb693e183b06884129bd3", "url": "https://git.kernel.org/stable/c/7f17984cfa697613800eb693e183b06884129bd3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/88619b117be1daf633ce32210570ce35a0bd1c98", "url": "https://git.kernel.org/stable/c/88619b117be1daf633ce32210570ce35a0bd1c98" } ], "release_date": "2026-08-26T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46163", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: b43legacy: enforce bounds check on firmware key index in RX path\n\nSame fix as b43: the firmware-controlled key index in b43legacy_rx()\ncan exceed dev->max_nr_keys. The existing B43legacy_WARN_ON is\nnon-enforcing in production builds, allowing an out-of-bounds read of\ndev->key[].\n\nMake the check enforcing by dropping the frame for invalid indices.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46163" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1baaeb6adecb9691748c0253dab6ddd19a2b4e9e", "url": "https://git.kernel.org/stable/c/1baaeb6adecb9691748c0253dab6ddd19a2b4e9e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4242db36de99de734cc1f60e5edd86cda7e598c6", "url": "https://git.kernel.org/stable/c/4242db36de99de734cc1f60e5edd86cda7e598c6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6ee946077607d7783ae6709a899213fc4fe08f35", "url": "https://git.kernel.org/stable/c/6ee946077607d7783ae6709a899213fc4fe08f35" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d1bc155802943e92c57a5fb923d23edfbf0b525", "url": "https://git.kernel.org/stable/c/9d1bc155802943e92c57a5fb923d23edfbf0b525" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a035766f970bde2d4298346a31a80685be5c0205", "url": "https://git.kernel.org/stable/c/a035766f970bde2d4298346a31a80685be5c0205" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a92bd0503df2488f2cc040f329ebccff1c1934cb", "url": "https://git.kernel.org/stable/c/a92bd0503df2488f2cc040f329ebccff1c1934cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/df805c1d085b7a96077f0964185764c87060950d", "url": "https://git.kernel.org/stable/c/df805c1d085b7a96077f0964185764c87060950d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fdd4e51979f42ca8b1ab7e6176b607e1caabf2a5", "url": "https://git.kernel.org/stable/c/fdd4e51979f42ca8b1ab7e6176b607e1caabf2a5" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html" } ], "release_date": "2026-05-28T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46294", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm: fix a buffer overflow in ioctl processing\n\nTony Asleson (using Claude) found a buffer overflow in dm-ioctl in the\nfunction retrieve_status:\n\n1. The code in retrieve_status checks that the output string fits into\n the output buffer and writes the output string there\n2. Then, the code aligns the \"outptr\" variable to the next 8-byte\n boundary:\n\toutptr = align_ptr(outptr);\n3. The alignment doesn't check overflow, so outptr could point past the\n buffer end\n4. The \"for\" loop is iterated again, it executes:\n\tremaining = len - (outptr - outbuf);\n5. If \"outptr\" points past \"outbuf + len\", the arithmetics wraps around\n and the variable \"remaining\" contains unusually high number\n6. With \"remaining\" being high, the code writes more data past the end of\n the buffer\n\nLuckily, this bug has no security implications because:\n1. Only root can issue device mapper ioctls\n2. The commonly used libraries that communicate with device mapper\n (libdevmapper and devicemapper-rs) use buffer size that is aligned to\n 8 bytes - thus, \"outptr = align_ptr(outptr)\" can't overshoot the input\n buffer and the bug can't happen accidentally", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46294" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2fa49cc884f6496a915c35621ba4da35649bf159", "url": "https://git.kernel.org/stable/c/2fa49cc884f6496a915c35621ba4da35649bf159" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/448ee8fb79c26a26599ffa4b2adeb4322d3d3d8c", "url": "https://git.kernel.org/stable/c/448ee8fb79c26a26599ffa4b2adeb4322d3d3d8c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/526ff9126a0ae087b65726e1faf31114c718020d", "url": "https://git.kernel.org/stable/c/526ff9126a0ae087b65726e1faf31114c718020d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5af6a879e915ae7bcd83695c316ebb32e1c61bc2", "url": "https://git.kernel.org/stable/c/5af6a879e915ae7bcd83695c316ebb32e1c61bc2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8daa6c708ef524089ae43f2aed9190acb26d7df8", "url": "https://git.kernel.org/stable/c/8daa6c708ef524089ae43f2aed9190acb26d7df8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c8c5311237448f6ffeecc9aec2362e3692623668", "url": "https://git.kernel.org/stable/c/c8c5311237448f6ffeecc9aec2362e3692623668" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d271631023cbe1cbe7c31a0275ab797883be6e0a", "url": "https://git.kernel.org/stable/c/d271631023cbe1cbe7c31a0275ab797883be6e0a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f0b0b09d9840838ae77ccdd6a62de0daef4e6e0a", "url": "https://git.kernel.org/stable/c/f0b0b09d9840838ae77ccdd6a62de0daef4e6e0a" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html" } ], "release_date": "2026-06-08T17:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98586", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: hold asoc or transport before mod_timer() in timer handlers\n\nTake the association or transport reference before rearming a timer in the\ntimer handlers.\n\nThe existing code calls mod_timer() before taking the reference needed by\nthe rearmed timer without holding the sock lock. This creates a race with\ntimer cleanup: if the timer is deleted after mod_timer() returns but before\nthe reference is taken, the cleanup path can drop the timer's reference and\ndestroy the transport or association. The timer handler then takes a\nreference on the already freed object and eventually drops it, causing a\nrefcount underflow.\n\nHold the object before mod_timer() and drop the reference if mod_timer()\nreports that the timer was already pending in timer handlers. Apply the\nsame ordering to the proto-unreachable path, which can rearm a transport\ntimer outside the timer handlers without holding the sock lock.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98586" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/27c51a9b55b227309161c903f9ecfbf022516bc2", "url": "https://git.kernel.org/stable/c/27c51a9b55b227309161c903f9ecfbf022516bc2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/35bf3b23c9a871f44c1453d85f8332be4e088dda", "url": "https://git.kernel.org/stable/c/35bf3b23c9a871f44c1453d85f8332be4e088dda" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d3d39da054476e7aa05cd877b93ca73a9a77434", "url": "https://git.kernel.org/stable/c/9d3d39da054476e7aa05cd877b93ca73a9a77434" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cae23ae3f7887a1cf8a75da38edcebeef695040f", "url": "https://git.kernel.org/stable/c/cae23ae3f7887a1cf8a75da38edcebeef695040f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d18cb8fd1b6ba95c85de644203cfe1b071ff0c0f", "url": "https://git.kernel.org/stable/c/d18cb8fd1b6ba95c85de644203cfe1b071ff0c0f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f7dea7eaea20fe9b80f8f77ba44d02b4a17f8050", "url": "https://git.kernel.org/stable/c/f7dea7eaea20fe9b80f8f77ba44d02b4a17f8050" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f9d929026d487a988bfa12c065f892e823e5b6ab", "url": "https://git.kernel.org/stable/c/f9d929026d487a988bfa12c065f892e823e5b6ab" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53002", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: conntrack: remove sprintf usage\n\nReplace it with scnprintf, the buffer sizes are expected to be large enough\nto hold the result, no need for snprintf+overflow check.\n\nIncrease buffer size in mangle_content_len() while at it.\n\nBUG: KASAN: stack-out-of-bounds in vsnprintf+0xea5/0x1270\nWrite of size 1 at addr [..]\n vsnprintf+0xea5/0x1270\n sprintf+0xb1/0xe0\n mangle_content_len+0x1ac/0x280\n nf_nat_sdp_session+0x1cc/0x240\n process_sdp+0x8f8/0xb80\n process_invite_request+0x108/0x2b0\n process_sip_msg+0x5da/0xf50\n sip_help_tcp+0x45e/0x780\n nf_confirm+0x34d/0x990\n [..]", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53002" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1c9fb8aeed06790d42cdcd00f6c3ce0b9e926c1e", "url": "https://git.kernel.org/stable/c/1c9fb8aeed06790d42cdcd00f6c3ce0b9e926c1e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f793ba78470a99f40389b7dc60a81d9f5ad3956", "url": "https://git.kernel.org/stable/c/2f793ba78470a99f40389b7dc60a81d9f5ad3956" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6bbf829b4c1b44c941c47dd0d710f1393258f3d5", "url": "https://git.kernel.org/stable/c/6bbf829b4c1b44c941c47dd0d710f1393258f3d5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e7066bdb481a87fe88c4fa563e348c03b2d373d", "url": "https://git.kernel.org/stable/c/6e7066bdb481a87fe88c4fa563e348c03b2d373d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8e3be0d12615a173fe260cd42753ca7a001acbf2", "url": "https://git.kernel.org/stable/c/8e3be0d12615a173fe260cd42753ca7a001acbf2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a8e0a32a23d3f34862af3b4da792ecb3a891a9a3", "url": "https://git.kernel.org/stable/c/a8e0a32a23d3f34862af3b4da792ecb3a891a9a3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ab64e61c9323fa6de21bd20da1ddb29a0fb65d34", "url": "https://git.kernel.org/stable/c/ab64e61c9323fa6de21bd20da1ddb29a0fb65d34" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c08ff52e44945e6ef4ce0790f49ea761b060c45b", "url": "https://git.kernel.org/stable/c/c08ff52e44945e6ef4ce0790f49ea761b060c45b" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:64770", "url": "https://access.redhat.com/errata/RHSA-2026:64770" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66000", "url": "https://access.redhat.com/errata/RHSA-2026:66000" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:66180", "url": "https://access.redhat.com/errata/RHSA-2026:66180" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2026-53002", "url": "https://access.redhat.com/security/cve/CVE-2026-53002" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2492329", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492329" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-019113.html" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-457936.html" }, { "category": "external", "summary": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53002.json", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53002.json" } ], "release_date": "2026-06-24T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98612", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: catc: bound the RX packet length in catc_rx_done()\n\ncatc_rx_done() walks a multi-packet URB, reading a two-byte length from\neach packet header. Its bound, pkt_len > urb->actual_length, ignores the\nheader offset and compares against the whole transfer rather than the\nbytes left from pkt_start, so a crafted packet header makes\nskb_copy_to_linear_data() read past the buffer.\n\nA length below ETH_HLEN is also accepted, including zero, and\neth_type_trans() then reads a MAC header from the uninitialised tailroom\nof a shorter skb. The is_f5u011 branch takes its length straight from\nthe transfer, so a zero-length URB reaches the same path.\n\nTrack the bytes remaining from the current packet, and reject a header\nthat does not fit, a length past what is left, and a length below an\nEthernet header.\n\nA transfer shorter than an Ethernet header, including a zero-length one,\npreviously became a runt skb passed to netif_rx() and counted as\nreceived; it is now counted in rx_length_errors and ends the walk.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98612" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21e206dd88b3de6e36bb607dec3797c59bc3007b", "url": "https://git.kernel.org/stable/c/21e206dd88b3de6e36bb607dec3797c59bc3007b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f87bbd5a7bf6ee79d598f7e22cf77810d29ae87", "url": "https://git.kernel.org/stable/c/2f87bbd5a7bf6ee79d598f7e22cf77810d29ae87" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3942557938f846e7481f6ccb2b41ccbdee61baa1", "url": "https://git.kernel.org/stable/c/3942557938f846e7481f6ccb2b41ccbdee61baa1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4cc0a8eb2f9336cfa3e4ac329bc5585ca970ced3", "url": "https://git.kernel.org/stable/c/4cc0a8eb2f9336cfa3e4ac329bc5585ca970ced3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/801e21cf7dd6bcee31db907625d5045f21c9c1d9", "url": "https://git.kernel.org/stable/c/801e21cf7dd6bcee31db907625d5045f21c9c1d9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d4be026bdff2c1da7b6c7e01c0a47f2df409e97", "url": "https://git.kernel.org/stable/c/9d4be026bdff2c1da7b6c7e01c0a47f2df409e97" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d565b6b72fe3f41fd43636e143072848105189f", "url": "https://git.kernel.org/stable/c/9d565b6b72fe3f41fd43636e143072848105189f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dd9c6f8f05170223edec2dac476606cd40d9acb7", "url": "https://git.kernel.org/stable/c/dd9c6f8f05170223edec2dac476606cd40d9acb7" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53800", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nubi: Fix use-after-free when volume resizing failed\n\nThere is an use-after-free problem reported by KASAN:\n ==================================================================\n BUG: KASAN: use-after-free in ubi_eba_copy_table+0x11f/0x1c0 [ubi]\n Read of size 8 at addr ffff888101eec008 by task ubirsvol/4735\n\n CPU: 2 PID: 4735 Comm: ubirsvol\n Not tainted 6.1.0-rc1-00003-g84fa3304a7fc-dirty #14\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996),\n BIOS 1.14.0-1.fc33 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x34/0x44\n print_report+0x171/0x472\n kasan_report+0xad/0x130\n ubi_eba_copy_table+0x11f/0x1c0 [ubi]\n ubi_resize_volume+0x4f9/0xbc0 [ubi]\n ubi_cdev_ioctl+0x701/0x1850 [ubi]\n __x64_sys_ioctl+0x11d/0x170\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n \n\nWhen ubi_change_vtbl_record() returns an error in ubi_resize_volume(),\n\"new_eba_tbl\" will be freed on error handing path, but it is holded\nby \"vol->eba_tbl\" in ubi_eba_replace_table(). It means that the liftcycle\nof \"vol->eba_tbl\" and \"vol\" are different, so when resizing volume in\nnext time, it causing an use-after-free fault.\n\nFix it by not freeing \"new_eba_tbl\" after it replaced in\nubi_eba_replace_table(), while will be freed in next volume resizing.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53800" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/35f8d4064e54c18424db2997059d4c0b1d13d093", "url": "https://git.kernel.org/stable/c/35f8d4064e54c18424db2997059d4c0b1d13d093" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3d6378f7056ac7350338f941001162a8f660853c", "url": "https://git.kernel.org/stable/c/3d6378f7056ac7350338f941001162a8f660853c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/53818746e549e61841428892a8d94344494be797", "url": "https://git.kernel.org/stable/c/53818746e549e61841428892a8d94344494be797" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9af31d6ec1a4be4caab2550096c6bd2ba8fba472", "url": "https://git.kernel.org/stable/c/9af31d6ec1a4be4caab2550096c6bd2ba8fba472" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9c8be1f165baee53b5a36ea0b3c9281d403a1d0b", "url": "https://git.kernel.org/stable/c/9c8be1f165baee53b5a36ea0b3c9281d403a1d0b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b0c951742348d216f094d16ed4f70ae73db881c0", "url": "https://git.kernel.org/stable/c/b0c951742348d216f094d16ed4f70ae73db881c0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bf795ebbb9995e2fe7945de71177f01c2f1215dc", "url": "https://git.kernel.org/stable/c/bf795ebbb9995e2fe7945de71177f01c2f1215dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bf9875aa7f7d624a8c084425b14bf7e5907ebc30", "url": "https://git.kernel.org/stable/c/bf9875aa7f7d624a8c084425b14bf7e5907ebc30" } ], "release_date": "2025-12-09T01:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98399", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/ipl: Fix NULL deref in dump_reipl without re-IPL parm block\n\nUnlike kdump, which passes the re-IPL parameter block through os_info,\nthe stand-alone dump passes it through the IPL parm block address and\nchecksum in lowcore.\n\nSome IPL types, like HMC FTP boot or QEMU direct kernel boot, might not\nprovide an IPL parameter block. In this case reipl_type_init() selects\nIPL_TYPE_UNKNOWN and reipl_block_actual remains NULL. Nevertheless,\ndump_reipl_run() unconditionally dereferences it when preparing the\nlowcore fields. This may happen to work by chance when address zero\ncontains readable lowcore data. A zero IPL parameter block address is\nthen stored in lowcore, causing the stand-alone dumper to enter disabled\nwait after completing the dump.\n\nExplicitly store a zero IPL parameter block address and checksum when no\nre-IPL parameter block is available. This does not change the behavior:\nthe stand-alone dumper completes the dump and halts, while valid re-IPL\nparameter blocks continue to be handled as before.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98399" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/280ff19853440d59e031cd8fe161e81305721262", "url": "https://git.kernel.org/stable/c/280ff19853440d59e031cd8fe161e81305721262" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/37f61b71cbc0caefc01022a19ee56fc2510e2e6e", "url": "https://git.kernel.org/stable/c/37f61b71cbc0caefc01022a19ee56fc2510e2e6e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/41647864e62b28388ecccc23a82f0e0a091f4ef2", "url": "https://git.kernel.org/stable/c/41647864e62b28388ecccc23a82f0e0a091f4ef2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8d7988e8116c3d29d9e02ca9d37ee84577643f2d", "url": "https://git.kernel.org/stable/c/8d7988e8116c3d29d9e02ca9d37ee84577643f2d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/aed56fa3108b7095e6a048e134981506c056a6cb", "url": "https://git.kernel.org/stable/c/aed56fa3108b7095e6a048e134981506c056a6cb" } ], "release_date": "2026-10-14T14:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98548", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: discard the rest of the packet on a stale-cookie error\n\nWhen an association is in COOKIE-ECHOED state and the peer sends a\nbundled [ERROR(Stale Cookie)][DATA] packet from one of its non-primary\naddresses, processing the ERROR chunk takes the non-fatal stale-cookie\nretry path sctp_sf_do_5_2_6_stale(), which queues\nSCTP_CMD_DEL_NON_PRIMARY while keeping the association alive.\nsctp_cmd_del_non_primary() removes every non-primary transport -\nincluding the very transport this packet arrived on, which is still\nreferenced by the receive lookup and shared by all chunks of the\npacket via chunk->transport.\n\nsctp_assoc_rm_peer() does redirect asoc->peer.last_data_from away from\nthe removed transport, but right afterwards the bundled DATA chunk\nmakes sctp_assoc_bh_rcv() re-register\nasoc->peer.last_data_from = chunk->transport unconditionally, undoing\nthe redirection with the just-removed transport.\n\nOnce the packet is done, the receive reference is dropped and the\ntransport is RCU-freed, while the surviving association keeps the\ndangling last_data_from. A later FWD-TSN (or the delayed SACK timer)\nmakes sctp_gen_sack() dereference it (->param_flags and friends), and\nsctp_make_sack()/sctp_outq_select_transport() may write to the freed\nobject and link it into the live transport list. This is a\nuse-after-free triggerable by any malicious SCTP peer (or a local\nunprivileged user acting as one) with no capabilities required:\n\n BUG: KASAN: slab-use-after-free in sctp_do_sm+0x498a/0x5660\n Read of size 4 at addr ffff88800e1e356c by task poc/115\n Call Trace: sctp_do_sm <- sctp_assoc_bh_rcv <- sctp_inq_push <-\n sctp_rcv <- ip_protocol_deliver_rcu <- ip_rcv\n Allocated: sctp_transport_new <- sctp_assoc_add_peer <-\n sctp_process_init (INIT-ACK processing)\n Freed: kfree <- sctp_transport_destroy_rcu <- rcu_core\n (call_rcu queued by sctp_transport_put at end of sctp_rcv)\n The buggy address is located 364 bytes inside of freed 1024-byte\n region [ffff88800e1e3400, ffff88800e1e3800), cache kmalloc-1k\n\nNote that commit 03a9d10ecf71 (\"sctp: drop a chunk if its transport\nwas removed\") only covers the window between the receive lookup and\nthe chunk processing (e.g. an ASCONF DEL-IP racing the socket backlog);\nhere the transport is removed *while* the packet is being processed,\nby an earlier chunk of the same packet, so the drop in sctp_inq_push()\ndoes not reach this path. Verified with the bundled [ERROR(Stale\nCookie)][DATA] + FWD-TSN reproducer: the KASAN report above still\nfires with that commit applied, and is gone with this patch on top.\n\nFix it by discarding the rest of the packet on this path, as suggested\nby Xin. After the stale-cookie ERROR has sent the association back to\nCOOKIE-WAIT and removed the non-primary transports, the remaining\nchunks of the packet can only run against the restarted handshake\nwhile referencing the removed arrival transport through\nchunk->transport: besides the last_data_from registration above,\nsctp_cmd_setup_t2() and the sctp_make_*() reply builders would also\ncopy that pointer into association-lifetime state that\nsctp_assoc_rm_peer() has already sanitized. Let the peer retransmit\nthem, in line with what sctp_inq_push() does for chunks whose\ntransport was removed before processing.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98548" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1cd246b214dc9acf4e2f11d58c035e1e672fe7d2", "url": "https://git.kernel.org/stable/c/1cd246b214dc9acf4e2f11d58c035e1e672fe7d2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4498467a8af06cfa3d71cb04bd7c4170dec8f449", "url": "https://git.kernel.org/stable/c/4498467a8af06cfa3d71cb04bd7c4170dec8f449" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6df536c5acbc0abd6f119d02e24f4a2ed97707f4", "url": "https://git.kernel.org/stable/c/6df536c5acbc0abd6f119d02e24f4a2ed97707f4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/854c053c71459f8db7ef07db9cfa4eec5f5206f2", "url": "https://git.kernel.org/stable/c/854c053c71459f8db7ef07db9cfa4eec5f5206f2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/965e21ea16acb394d5e5801998ca9b0adc669665", "url": "https://git.kernel.org/stable/c/965e21ea16acb394d5e5801998ca9b0adc669665" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c0af3fd150fdc43821df3bb77e5ec74faf4dfc7a", "url": "https://git.kernel.org/stable/c/c0af3fd150fdc43821df3bb77e5ec74faf4dfc7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d68c9287b3ca0d6faadc61fbcb18d1a6b5493321", "url": "https://git.kernel.org/stable/c/d68c9287b3ca0d6faadc61fbcb18d1a6b5493321" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ec23855274a73906b02f0d124fefd9cb3c008b1d", "url": "https://git.kernel.org/stable/c/ec23855274a73906b02f0d124fefd9cb3c008b1d" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98460", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_sock: reject out-of-range OCF values\n\nThe raw HCI socket security filter has 128 OCF bits per supported OGF,\nbut masks the 10-bit OCF with 127 before looking up the command. An\nunprivileged socket can therefore submit a reserved OCF that aliases an\nallowlisted command modulo 128.\n\nA conforming controller should reject reserved opcodes. Nevertheless,\nthe security decision must apply to the opcode that will actually be\nsent, especially since controller-specific behavior is outside the host\nstack's control.\n\nReject OCF values that cannot be represented by the security filter\ninstead of aliasing them onto an unrelated command.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98460" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/173457fa3e99ef4188dd0fe63e4dee98d0e441a9", "url": "https://git.kernel.org/stable/c/173457fa3e99ef4188dd0fe63e4dee98d0e441a9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/320dedad15e8bbaecc8d2d7fd4189defb84caa85", "url": "https://git.kernel.org/stable/c/320dedad15e8bbaecc8d2d7fd4189defb84caa85" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/47d67ec424e63e61e9eb58633d43a9d58a1852b6", "url": "https://git.kernel.org/stable/c/47d67ec424e63e61e9eb58633d43a9d58a1852b6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/598686f5d65b9af2223ed9d22fadba16e09f6ca8", "url": "https://git.kernel.org/stable/c/598686f5d65b9af2223ed9d22fadba16e09f6ca8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/68f0bcc4e16e31ff8dbe6ca93116eb70d7b6ac44", "url": "https://git.kernel.org/stable/c/68f0bcc4e16e31ff8dbe6ca93116eb70d7b6ac44" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/70b0a27bdde0cb524349c8261202c7c9393cf5e9", "url": "https://git.kernel.org/stable/c/70b0a27bdde0cb524349c8261202c7c9393cf5e9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1fd465ea1c5aef459f9bc3ac602b5353e0f536f", "url": "https://git.kernel.org/stable/c/c1fd465ea1c5aef459f9bc3ac602b5353e0f536f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e93fad891c72deb84cae49430163b384ebcc92b1", "url": "https://git.kernel.org/stable/c/e93fad891c72deb84cae49430163b384ebcc92b1" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-50659", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: geode - Fix PCI device refcount leak\n\nfor_each_pci_dev() is implemented by pci_get_device(). The comment of\npci_get_device() says that it will increase the reference count for the\nreturned pci_dev and also decrease the reference count for the input\npci_dev @from if it is not NULL.\n\nIf we break for_each_pci_dev() loop with pdev not NULL, we need to call\npci_dev_put() to decrease the reference count. We add a new struct\n'amd_geode_priv' to record pointer of the pci_dev and membase, and then\nadd missing pci_dev_put() for the normal and error path.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-50659" } ], "release_date": "2025-12-09T01:29:07Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-80913", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nselinux: require every boolean value to be defined\n\np_bools.nprim comes from the policy image independently of how many\nbooleans follow it, and cond_index_bool() fills bool_val_to_struct[] at\nvalue - 1, so a count larger than the values present leaves NULL entries.\nEvery user of that array then walks it by index and dereferences each\nentry: cond_evaluate_expr() on the access-vector path,\nsecurity_get_bools() and security_get_bool_value() behind selinuxfs, and\nsecurity_set_bools(). A sparse class value is absorbed by\npolicydb_class_isvalid() and its siblings; booleans have no such\npredicate, and no consumer that could use one.\n\nReject a boolean value that no boolean defines, once, where the array is\nbuilt. Conforming policies define every boolean they declare and are\nunaffected.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-80913" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3161daa3f1e3ca68f8b2b8fa01720b5a8dcc6b40", "url": "https://git.kernel.org/stable/c/3161daa3f1e3ca68f8b2b8fa01720b5a8dcc6b40" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3938c8494d3c5d84a53fd7d1966ae9dde46cb5f8", "url": "https://git.kernel.org/stable/c/3938c8494d3c5d84a53fd7d1966ae9dde46cb5f8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/42a7107f99d86a7524c37f108047dfa3db096ab5", "url": "https://git.kernel.org/stable/c/42a7107f99d86a7524c37f108047dfa3db096ab5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4d0ece18e648bd4362704fd087249ac697f2b7fb", "url": "https://git.kernel.org/stable/c/4d0ece18e648bd4362704fd087249ac697f2b7fb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4dfb997c60f7951011d3dcbee926e3a7f80d8a76", "url": "https://git.kernel.org/stable/c/4dfb997c60f7951011d3dcbee926e3a7f80d8a76" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/740012aebdb8311332bf66e2aabf453ba73c2c45", "url": "https://git.kernel.org/stable/c/740012aebdb8311332bf66e2aabf453ba73c2c45" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a93d37a09b863810653f93d371fb197457d59deb", "url": "https://git.kernel.org/stable/c/a93d37a09b863810653f93d371fb197457d59deb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ed901e88aa3fb3d5d7b0b52c2ee3073209df9bec", "url": "https://git.kernel.org/stable/c/ed901e88aa3fb3d5d7b0b52c2ee3073209df9bec" } ], "release_date": "2026-09-04T18:18:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53195", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: io_ti: fix heap overflow in build_i2c_fw_hdr()\n\nbuild_i2c_fw_hdr() allocates a fixed-size buffer of\n(16*1024 - 512) + sizeof(struct ti_i2c_firmware_rec) bytes, then\ncopies le16_to_cpu(img_header->Length) bytes into it without\nvalidating that Length fits within the available space after the\nfirmware record header.\n\nimg_header->Length is a __le16 from the firmware file and can be\nup to 65535. check_fw_sanity() validates the total firmware size\nbut not img_header->Length specifically.\n\nFix by rejecting images where img_header->Length exceeds the\navailable destination space.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53195" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae", "url": "https://git.kernel.org/stable/c/0fd2b00b2d3d05e3eaa13342b3dfb0fa85c226ae" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/130d6567eb148040eed1b73e1414ad6c27d22bd5", "url": "https://git.kernel.org/stable/c/130d6567eb148040eed1b73e1414ad6c27d22bd5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/294692d3296eee3391c348d7ea6401916d27806c", "url": "https://git.kernel.org/stable/c/294692d3296eee3391c348d7ea6401916d27806c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2fd64bf0ad66ab5de0c73524591d879427ba5aba", "url": "https://git.kernel.org/stable/c/2fd64bf0ad66ab5de0c73524591d879427ba5aba" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3e187152f44d76d7633a3855ffd0099e1588b82a", "url": "https://git.kernel.org/stable/c/3e187152f44d76d7633a3855ffd0099e1588b82a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4cb722747ed25971f35cc47ce5c0e79d7f717713", "url": "https://git.kernel.org/stable/c/4cb722747ed25971f35cc47ce5c0e79d7f717713" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a79b634ee58786ca627268daefa7744f2af2e14", "url": "https://git.kernel.org/stable/c/5a79b634ee58786ca627268daefa7744f2af2e14" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b7faf660eefa2047ebc2959ff76da2b6eae2e9e3", "url": "https://git.kernel.org/stable/c/b7faf660eefa2047ebc2959ff76da2b6eae2e9e3" } ], "release_date": "2026-06-25T09:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98494", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range cmb_tpd_next_to_clean (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would spin forever. Treat it as\n\"nothing new to clean\" instead.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98494" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3", "url": "https://git.kernel.org/stable/c/0f573b0576252d44fb27ab8470ea873bc6408ef3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca", "url": "https://git.kernel.org/stable/c/43e746821f5f5afbbf68e388bf9fbe221e03bfca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661", "url": "https://git.kernel.org/stable/c/5d7ac337d37cb97d77e4c910d37746694b606661" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82", "url": "https://git.kernel.org/stable/c/6285919d4c06254d257d24dc980f6332e1984a82" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1", "url": "https://git.kernel.org/stable/c/632cd7b81cb7bab36112f02eb2ee7f7cc1214fb1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca", "url": "https://git.kernel.org/stable/c/6ab9f61ca851f02ae4398cebaf00735a22e1d6ca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02", "url": "https://git.kernel.org/stable/c/79e2447b11322c27ef9ac423be0a94efc7691f02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e", "url": "https://git.kernel.org/stable/c/c55e51d5899e80f9593b26985ed0b89e0c828a5e" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98794", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: filter some flags received in the backup server\n\nWhile the IPVS SYNC protocol is not secure by design\nwe can still protect the backup server from messages that\ncan wreak havoc.\n\nThis commit addresses problems from received connection flags\nor their combinations. We now drop messages as follows:\n\n1. the NO_CPORT+TEMPLATE combination allows lookups for normal\nconnections to hit template which can break in many ways.\nWhile the master does not sync connections with NO_CPORT flag,\ni.e. before they are established, we still accept NO_CPORT\nwithout TEMPLATE.\n\n2. ONE_PACKET: it is not sent by master, so we do not\nexpect it in backup. Before now it was ignored by\nIP_VS_CONN_F_BACKUP_MASK for protocol v1 while protocol\nv0 created connections that are not hashed and dropped\nimmediately. Better to apply the IP_VS_CONN_F_BACKUP_MASK\nalso to the flags from v0 messages for consistency with v1.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98794" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/45a93111835ccfea7d969ec73588e33745fd9834", "url": "https://git.kernel.org/stable/c/45a93111835ccfea7d969ec73588e33745fd9834" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/55d033324f67a15ff56be6d38d6e87f644e0ed62", "url": "https://git.kernel.org/stable/c/55d033324f67a15ff56be6d38d6e87f644e0ed62" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d7d33c9efa9d1a2f244a1a64ec9b540b0f8975a0", "url": "https://git.kernel.org/stable/c/d7d33c9efa9d1a2f244a1a64ec9b540b0f8975a0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f4cd1db7d421e82945713a36084bb0c35b75b27e", "url": "https://git.kernel.org/stable/c/f4cd1db7d421e82945713a36084bb0c35b75b27e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f96e91748f6304668fe647e686d199d7207d36f1", "url": "https://git.kernel.org/stable/c/f96e91748f6304668fe647e686d199d7207d36f1" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98457", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: validate frame length before control and FCS access\n\nl2cap_data_rcv() unpacks either a two-byte or four-byte control field\nwithout first ensuring that it is present. A short ERTM or streaming-mode\nframe can therefore cause an out-of-bounds read.\n\nThere is a second short-frame case when CRC16 is enabled. After the\ncontrol field is pulled, l2cap_check_fcs() subtracts two from skb->len\nwithout checking it. If fewer than two bytes remain, the subtraction\nwraps; skb_trim() leaves the buffer unchanged and the subsequent FCS\nload reads past the logical end of the frame.\n\nValidate that the frame contains both its control field and, when\nenabled, its FCS before either field is accessed.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98457" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1fdbb2a712a9a162ee817c959740face80b3d929", "url": "https://git.kernel.org/stable/c/1fdbb2a712a9a162ee817c959740face80b3d929" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3acf6a0038ec0d4e8f4dcbfc2a557dff5f61cb70", "url": "https://git.kernel.org/stable/c/3acf6a0038ec0d4e8f4dcbfc2a557dff5f61cb70" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4373ba79a267947e771c438507f7b103e30bdb21", "url": "https://git.kernel.org/stable/c/4373ba79a267947e771c438507f7b103e30bdb21" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6c78a213d9070b610c7f418af2c25b66180b7e37", "url": "https://git.kernel.org/stable/c/6c78a213d9070b610c7f418af2c25b66180b7e37" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8c7556c7cd17e073bbefdc4a9a4694a207544c37", "url": "https://git.kernel.org/stable/c/8c7556c7cd17e073bbefdc4a9a4694a207544c37" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/965bd88ed4b4763cb765dd65885adcfa588c6b14", "url": "https://git.kernel.org/stable/c/965bd88ed4b4763cb765dd65885adcfa588c6b14" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6a288e6001bcce16553c3853e0f5a45eaaf85c7", "url": "https://git.kernel.org/stable/c/c6a288e6001bcce16553c3853e0f5a45eaaf85c7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f557274af7b94b6134692e6f26b880f1e34c15bf", "url": "https://git.kernel.org/stable/c/f557274af7b94b6134692e6f26b880f1e34c15bf" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46122", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: b43: enforce bounds check on firmware key index in b43_rx()\n\nThe firmware-controlled key index in b43_rx() can exceed the dev->key[]\narray size (58 entries). The existing B43_WARN_ON is non-enforcing in\nproduction builds, allowing an out-of-bounds read.\n\nMake the B43_WARN_ON check enforcing by dropping the frame when the\nfirmware returns an invalid key index.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46122" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/135cb49c9a42a02cceeac7b49ec03e267f7ed6d6", "url": "https://git.kernel.org/stable/c/135cb49c9a42a02cceeac7b49ec03e267f7ed6d6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14", "url": "https://git.kernel.org/stable/c/1e9e55cf66f0fa4799f4d86ef3aaba8e606b5c14" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1f4f78bf8549e6ac4f04fba4176854f3a6e0c332", "url": "https://git.kernel.org/stable/c/1f4f78bf8549e6ac4f04fba4176854f3a6e0c332" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/219ba67e69e49681e48c822d6eaafb5def032f34", "url": "https://git.kernel.org/stable/c/219ba67e69e49681e48c822d6eaafb5def032f34" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3157ad40b084a8f3932da2641749ab45e99b933e", "url": "https://git.kernel.org/stable/c/3157ad40b084a8f3932da2641749ab45e99b933e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/765709720e6af9a178abc40244a8d1aa39ac4e71", "url": "https://git.kernel.org/stable/c/765709720e6af9a178abc40244a8d1aa39ac4e71" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c3d7b90dc95020cd9282c4630e402fe224f7644e", "url": "https://git.kernel.org/stable/c/c3d7b90dc95020cd9282c4630e402fe224f7644e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d7029879bafdac2006c67553807d122283dc6cbf", "url": "https://git.kernel.org/stable/c/d7029879bafdac2006c67553807d122283dc6cbf" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html" } ], "release_date": "2026-05-28T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98488", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1e: fix soft lockup on out-of-range hw_next_to_clean read\n\nSame issue as atl1c (see the first commit in this series, \"net:\natl1c: fix soft lockup on out-of-range tpd_cons read\"): the hardware\ncan report an out-of-range hw_next_to_clean (seen as 0xffff) while\nthe PCIe link/MAC is resetting. An out-of-range value can never be\nreached and the loop below would spin forever. Treat it as \"nothing\nnew to clean\" instead.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98488" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8", "url": "https://git.kernel.org/stable/c/1d8c85359b5075c7937925b673add7ed00e57ec8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2", "url": "https://git.kernel.org/stable/c/34bc747a61bef572244b01b095552b629cd8d2a2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12", "url": "https://git.kernel.org/stable/c/374bf9e4b90f979e052332c4faca2d745c491a12" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee", "url": "https://git.kernel.org/stable/c/3a7d9271b37c80fb7db04aff3bc5621cfdaf9bee" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b", "url": "https://git.kernel.org/stable/c/4b7161804d8f31227551901f93947bb4eea4690b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519", "url": "https://git.kernel.org/stable/c/4bbb44075bd3e773d61706882ab923ece8b3b519" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301", "url": "https://git.kernel.org/stable/c/a277422d194c62daa1b961f5f739689e53fe7301" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c", "url": "https://git.kernel.org/stable/c/ca862b1a4af7eac19429ca7ab92625f94ff4a46c" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98602", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough\n\nFix multiple out-of-bounds reads in Bluetooth BNEP frame processing:\n\n1. In bnep_rx_frame() and bnep_ctrl_frame() (net/bluetooth/bnep/core.c),\n use pskb_may_pull() to verify the BNEP header, control type byte,\n filter count, and extension headers exist before reading them, and\n return 0 after handling BNEP_CONTROL instead of falling through to\n Ethernet frame submission when no extension headers follow.\n2. In bnep_net_xmit() (net/bluetooth/bnep/netdev.c), verify skb->len >=\n ETH_HLEN with pskb_may_pull() before reading the 14-byte Ethernet\n header to prevent an out-of-bounds heap read and infoleak on short\n AF_PACKET TX frames.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98602" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/035f9b1809861967e58ce652680d70ea1502058f", "url": "https://git.kernel.org/stable/c/035f9b1809861967e58ce652680d70ea1502058f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e7aebc188f889b56c3aaeb6133ef6d77022c887", "url": "https://git.kernel.org/stable/c/1e7aebc188f889b56c3aaeb6133ef6d77022c887" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3e605ff5932afe0970c2beca66f2f1ba2babe4dd", "url": "https://git.kernel.org/stable/c/3e605ff5932afe0970c2beca66f2f1ba2babe4dd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/667aa703e11cdc237d169393bc6a5ea9acbb33c2", "url": "https://git.kernel.org/stable/c/667aa703e11cdc237d169393bc6a5ea9acbb33c2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7af80ad2cebfe2f1879d6a39a1aaa061d9c4e1ca", "url": "https://git.kernel.org/stable/c/7af80ad2cebfe2f1879d6a39a1aaa061d9c4e1ca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f31031326994d1abfcc6ebb6927ef96e51fb9ff", "url": "https://git.kernel.org/stable/c/8f31031326994d1abfcc6ebb6927ef96e51fb9ff" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ad0d2d4ada51321db787262ef343193c712b76b5", "url": "https://git.kernel.org/stable/c/ad0d2d4ada51321db787262ef343193c712b76b5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f0ca020cbb9bb7f3f4ea8ba1dfcf30a282aec91e", "url": "https://git.kernel.org/stable/c/f0ca020cbb9bb7f3f4ea8ba1dfcf30a282aec91e" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-74597", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nip6_tunnel: clear skb2->cb[] in ip6ip6_err()\n\nip6ip6_err() clones an outer IPv6 ICMP error skb, pulls it to the\nquoted inner IPv6 packet, and then passes the clone to icmpv6_send().\nThe clone still carries the outer packet's inet6_skb_parm in skb->cb.\n\nIf the outer packet had a Home Address Option, IP6CB(skb2)->dsthao\nremains non-zero after skb_pull(). icmpv6_send() later calls\nmip6_addr_swap(), which uses that stale dsthao offset against the quoted\ninner packet. A malformed inner destination-options header can then make\nthe HAO lookup and address swap run past the end of the quoted packet\nand corrupt skb_shared_info.\n\nClear skb2->cb[] before pulling the quoted inner IPv6 packet so the\nreply path does not reuse metadata left by the outer IPv6 stack.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-74597" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0dadb0620ab65949a8bc2439dd28ea3c942fe87d", "url": "https://git.kernel.org/stable/c/0dadb0620ab65949a8bc2439dd28ea3c942fe87d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/44fe898df302e91c5ee5acbc71ffa74e78e6c183", "url": "https://git.kernel.org/stable/c/44fe898df302e91c5ee5acbc71ffa74e78e6c183" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/484134e1eb07d700a73b1e4bbf3fb503e299be60", "url": "https://git.kernel.org/stable/c/484134e1eb07d700a73b1e4bbf3fb503e299be60" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4eb15c465337b18f44716c499cd6ad63eee0ad54", "url": "https://git.kernel.org/stable/c/4eb15c465337b18f44716c499cd6ad63eee0ad54" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64e41736a26f37ab6215bc2e6df125df05aceb08", "url": "https://git.kernel.org/stable/c/64e41736a26f37ab6215bc2e6df125df05aceb08" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b6816536a2990c0db44a26130a03e40b441e829b", "url": "https://git.kernel.org/stable/c/b6816536a2990c0db44a26130a03e40b441e829b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f803c086399da277b5d0ff36a107d0f162751800", "url": "https://git.kernel.org/stable/c/f803c086399da277b5d0ff36a107d0f162751800" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fbf40faa0414b753212494ad197542002e66ed9e", "url": "https://git.kernel.org/stable/c/fbf40faa0414b753212494ad197542002e66ed9e" } ], "release_date": "2026-08-22T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98614", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: avoid livelock while updating retransmit path\n\nsctp_assoc_update_retran_path() can loop forever when every remaining\ntransport, including retran_path, is SCTP_UNCONFIRMED: the state check\nruns before the wraparound test, so the loop cannot observe that it has\ncompleted a full pass.\n\nFix this by considering a transport only when it is not UNCONFIRMED,\nthen checking whether the walk has returned to retran_path. This makes\nthe full-pass termination independent of the transport state while\npreserving the existing fallback selection semantics.\n\nAlso restore the NULL guard around the retran_path assignment. In the\nall-UNCONFIRMED case there is no eligible replacement transport, and\ninstalling NULL would leave later retransmit-path users and the debug\nprint with a NULL path.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98614" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/173610fff55022a5ad1579fbcc7faa97467b58b7", "url": "https://git.kernel.org/stable/c/173610fff55022a5ad1579fbcc7faa97467b58b7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3fe624c3843694ab096fdb198526ba0c659febbe", "url": "https://git.kernel.org/stable/c/3fe624c3843694ab096fdb198526ba0c659febbe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/43410c1f2db53516e95ddd7e5b4b02f495b78121", "url": "https://git.kernel.org/stable/c/43410c1f2db53516e95ddd7e5b4b02f495b78121" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/83b1a7f9e718828ef364a7b004254ebb2d0035fe", "url": "https://git.kernel.org/stable/c/83b1a7f9e718828ef364a7b004254ebb2d0035fe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c9338057df1025f578fe7d0ff08bada87b8b838d", "url": "https://git.kernel.org/stable/c/c9338057df1025f578fe7d0ff08bada87b8b838d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d2c31b837406395e576afeb25958c98e9938f3f6", "url": "https://git.kernel.org/stable/c/d2c31b837406395e576afeb25958c98e9938f3f6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49", "url": "https://git.kernel.org/stable/c/d893a7cc1cb41dd510f338bb2bfd8f29b14eaf49" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ddc34cc0834c873871e88b055ee6a260676efe97", "url": "https://git.kernel.org/stable/c/ddc34cc0834c873871e88b055ee6a260676efe97" } ], "release_date": "2026-10-18T16:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-46191", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbcon: Avoid OOB font access if console rotation fails\n\nClear the font buffer if the reallocation during console rotation fails\nin fbcon_rotate_font(). The putcs implementations for the rotated buffer\nwill return early in this case. See [1] for an example.\n\nCurrently, fbcon_rotate_font() keeps the old buffer, which is too small\nfor the rotated font. Printing to the rotated console with a high-enough\ncharacter code will overflow the font buffer.\n\nv2:\n- fix typos in commit message", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-46191" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/46cf3646dea54baeaa2eafe3fb1ba769947f31b0", "url": "https://git.kernel.org/stable/c/46cf3646dea54baeaa2eafe3fb1ba769947f31b0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/524a6079395916fb3d790ef2bb46a1d2939b27dd", "url": "https://git.kernel.org/stable/c/524a6079395916fb3d790ef2bb46a1d2939b27dd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80", "url": "https://git.kernel.org/stable/c/594973a2e54924d8ba31c9faac669fc1ba6fcb80" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f", "url": "https://git.kernel.org/stable/c/7105d9f1387d63b15c9a860674fc92c959181f2f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27", "url": "https://git.kernel.org/stable/c/ab6c34b9829d5de03f1d08a47a2253729a6e7e27" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b44cc78ff46b96e72d333a3be6aaaa0a14797263", "url": "https://git.kernel.org/stable/c/b44cc78ff46b96e72d333a3be6aaaa0a14797263" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b51c343a81e6e806525a4435e22532c107dd7e9d", "url": "https://git.kernel.org/stable/c/b51c343a81e6e806525a4435e22532c107dd7e9d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842", "url": "https://git.kernel.org/stable/c/e4ef723d8975a2694cc90733a6b888a5e2841842" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-784472.html" } ], "release_date": "2026-05-28T10:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-89846", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read\n\nIn qla2x00_status_entry(), the FWI2 status path advances sense_data and\nshrinks par_sense_len by rsp_info_len:\n\n\tif (IS_FWI2_CAPABLE(ha)) {\n\t\tsense_data += rsp_info_len;\n\t\tpar_sense_len -= rsp_info_len;\n\t}\n\nrsp_info_len is a 32-bit value taken directly from the target's FCP\nresponse (sf.rsp_data_len), while par_sense_len is the IOCB data area\nsize (28 bytes for 24xx, 60 bytes for 29xx). A hostile or buggy target\nreporting an rsp_info_len larger than par_sense_len makes the unsigned\nsubtraction underflow to a huge value and advances sense_data out of\nbounds.\n\nThe underflowed par_sense_len then defeats the cap in\nqla2x00_handle_sense():\n\n\tif (sense_len > par_sense_len)\n\t\tsense_len = par_sense_len;\n\tmemcpy(cp->sense_buffer, sense_data, sense_len);\n\nso the memcpy reads up to SCSI_SENSE_BUFFERSIZE bytes from the\nout-of-bounds sense_data pointer, leaking adjacent response-ring/heap\nmemory into the command's sense buffer.\n\nClamp rsp_info_len to par_sense_len before the subtraction so\npar_sense_len can never underflow and sense_data stays within the IOCB\ndata area. The fix sits before the comp_status switch, covering both\nqla2x00_handle_sense() call sites.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-89846" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/125b12861c726e58448bb95d55b04851fb131d1f", "url": "https://git.kernel.org/stable/c/125b12861c726e58448bb95d55b04851fb131d1f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6b08c0cb110a1fba92f99d655020198489699815", "url": "https://git.kernel.org/stable/c/6b08c0cb110a1fba92f99d655020198489699815" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/be75ab791c9b3baca66c70ce03443afebc83acda", "url": "https://git.kernel.org/stable/c/be75ab791c9b3baca66c70ce03443afebc83acda" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca6d880d6c70cb7946e7b3e05d7285f271b6d99e", "url": "https://git.kernel.org/stable/c/ca6d880d6c70cb7946e7b3e05d7285f271b6d99e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d7f7746ff031ae45724881261804f4bf5317c985", "url": "https://git.kernel.org/stable/c/d7f7746ff031ae45724881261804f4bf5317c985" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e57ace988bda5693f7b3645f652ea4b4220870ee", "url": "https://git.kernel.org/stable/c/e57ace988bda5693f7b3645f652ea4b4220870ee" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ebc41dfc59d190956e0113e8bd90c28f6f21e8b9", "url": "https://git.kernel.org/stable/c/ebc41dfc59d190956e0113e8bd90c28f6f21e8b9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f6e8977bce887481b2b2b0e2e14a791270741cfb", "url": "https://git.kernel.org/stable/c/f6e8977bce887481b2b2b0e2e14a791270741cfb" } ], "release_date": "2026-09-16T11:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-53004", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks\n\nsctp_getsockopt_peer_auth_chunks() checks that the caller's optval\nbuffer is large enough for the peer AUTH chunk list with\n\n if (len < num_chunks)\n return -EINVAL;\n\nbut then writes num_chunks bytes to p->gauth_chunks, which lives\nat offset offsetof(struct sctp_authchunks, gauth_chunks) == 8\ninside optval. The check is missing the sizeof(struct\nsctp_authchunks) = 8-byte header. When the caller supplies\nlen == num_chunks (for any num_chunks > 0) the test passes but\ncopy_to_user() writes sizeof(struct sctp_authchunks) = 8 bytes\npast the declared buffer.\n\nThe sibling function sctp_getsockopt_local_auth_chunks() at the\nnext line already has the correct check:\n\n if (len < sizeof(struct sctp_authchunks) + num_chunks)\n return -EINVAL;\n\nAlign the peer variant with its sibling.\n\nReproducer confirms on v7.0-13-generic: an unprivileged userspace\ncaller that opens a loopback SCTP association with AUTH enabled,\nqueries num_chunks with a short optval, then issues the real\ngetsockopt with len == num_chunks and sentinel bytes painted past\nthe buffer observes those sentinel bytes overwritten with the\npeer's AUTH chunk type. The bytes written are under the peer's\ncontrol but land in the caller's own userspace; this is not a\nkernel memory corruption, but it is a kernel-side contract\nviolation that can silently corrupt adjacent userspace data.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-53004" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0cf004ffb61cd32d140531c3a84afe975f9fc7ea", "url": "https://git.kernel.org/stable/c/0cf004ffb61cd32d140531c3a84afe975f9fc7ea" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2b5a2c957c7769d40110f725cf23987fcef50d75", "url": "https://git.kernel.org/stable/c/2b5a2c957c7769d40110f725cf23987fcef50d75" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6849b995cda88a677bf08a05765d1db7905974fc", "url": "https://git.kernel.org/stable/c/6849b995cda88a677bf08a05765d1db7905974fc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6bcf8fe4ef7967b22b814cbae9a57bbd3c853410", "url": "https://git.kernel.org/stable/c/6bcf8fe4ef7967b22b814cbae9a57bbd3c853410" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/70a089cc9590aa347a61e84434116ab74619e3c3", "url": "https://git.kernel.org/stable/c/70a089cc9590aa347a61e84434116ab74619e3c3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a132e199de69e2a45628aa8534df1bf5d44e1b6e", "url": "https://git.kernel.org/stable/c/a132e199de69e2a45628aa8534df1bf5d44e1b6e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d45c7e99caf915b0f6c716bd8ffe9d45b9685761", "url": "https://git.kernel.org/stable/c/d45c7e99caf915b0f6c716bd8ffe9d45b9685761" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d67fbc6dea5dbf7f46c618ebf65910a276078e20", "url": "https://git.kernel.org/stable/c/d67fbc6dea5dbf7f46c618ebf65910a276078e20" } ], "release_date": "2026-06-24T17:17:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98489", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atl1c: fix soft lockup on out-of-range tpd_cons read\n\nThe hardware can report an out-of-range tpd_cons (seen as 0xffff)\nwhile the PCIe link/MAC is resetting. An out-of-range value can\nnever be reached and the loop below would spin forever. To avoid\na soft lockup treat it as \"nothing new to clean\" instead.\n\nReproduced on two machines, same NIC (Qualcomm Atheros AR8151 v2.0,\n4-port), triggered by rebooting a Mikrotik CCR2004 PCIe card that\nthe ports are directly linked to:\n\n- Ubuntu 26.04.1 LTS, kernel 7.0.0-31-generic. The link-flap\n precursor, before the lockup was captured with a full trace\n elsewhere:\n\n atl1c 0000:05:00.0 enp5s0f0: NETDEV WATCHDOG: CPU: 4: transmit queue 2 timed out 489984 ms\n atl1c 0000:05:00.0: MAC state machine can't be idle since disabled for 10ms second\n atl1c 0000:05:00.0: atl1c: enp5s0f0 NIC Link is Up<65535 Mbps Full Duplex>\n\n 65535 (0xffff) here is the same value tpd_cons reads back once the\n loop below gets stuck.\n\n- Proxmox VE, kernel 7.0.14-11-pve. Same NIC/trigger, this time\n caught by the soft lockup watchdog with a full stack trace:\n\n watchdog: BUG: soft lockup - CPU#12 stuck for 354s! [napi/eth%d-0:329]\n CPU: 12 UID: 0 PID: 329 Comm: napi/eth%d-0 Tainted: P O L 7.0.14-11-pve #1 PREEMPT(lazy)\n RIP: 0010:atl1c_clean_tx+0x142/0x2d0 [atl1c]\n Call Trace:\n \n __napi_poll+0x32/0x1e0\n napi_threaded_poll_loop+0x286/0x2e0\n napi_threaded_poll+0xfd/0x140\n kthread+0xf7/0x130\n ret_from_fork+0x2da/0x3a0\n ret_from_fork_asm+0x1a/0x30\n ", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98489" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/36c2009d90f2210ef92e6f4f2850e8b57b09e754", "url": "https://git.kernel.org/stable/c/36c2009d90f2210ef92e6f4f2850e8b57b09e754" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4daf80da0c38b8cd92c111ad96cb38322aabf586", "url": "https://git.kernel.org/stable/c/4daf80da0c38b8cd92c111ad96cb38322aabf586" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/57b55367b6e3accc55a989afeaf127063e3614dc", "url": "https://git.kernel.org/stable/c/57b55367b6e3accc55a989afeaf127063e3614dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/586847400b1168a88917287ac02c2c91a620b841", "url": "https://git.kernel.org/stable/c/586847400b1168a88917287ac02c2c91a620b841" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5ea2576a4f5ec476f33169fdbe9090d2b038ad13", "url": "https://git.kernel.org/stable/c/5ea2576a4f5ec476f33169fdbe9090d2b038ad13" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9f2cc71a2e2799d9c993c73f1bd36507eef6ae43", "url": "https://git.kernel.org/stable/c/9f2cc71a2e2799d9c993c73f1bd36507eef6ae43" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d4ab263e40fcf7cfa38a43ec774067d32eb94e16", "url": "https://git.kernel.org/stable/c/d4ab263e40fcf7cfa38a43ec774067d32eb94e16" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e7acd4cdeccbcdfd407adeb72b1eba14d1145b6f", "url": "https://git.kernel.org/stable/c/e7acd4cdeccbcdfd407adeb72b1eba14d1145b6f" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2026-98479", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: libiscsi_tcp: Check the data direction of a Data-In PDU\n\nThe Data-In branch of iscsi_tcp_hdr_dissect() resolves the ITT to a task\nand copies the PDU's data segment into that command's scatterlist without\nasking whether the command was reading. iscsi_tcp_r2t_rsp() in the same\nfile does ask, and rejects an R2T for a command that is not DMA_TO_DEVICE.\n\nA target that answers a WRITE command's ITT with a Data-In therefore has\nthe initiator write target-supplied bytes into the pages that write was\nabout to send. Those are the caller's own pinned pages for an O_DIRECT\nwrite, and page cache pages for a buffered one.\n\nObserved against a test target that emits one 512-byte Data-In naming a 128\nKB write's ITT, after the R2T for that write. With O_DIRECT the caller's\nbuffer ends up holding 512 bytes of the target's data while pwrite()\nreturns 131072. Buffered is quieter: pwrite() and fsync() both succeed,\nnothing is logged, and reading those blocks back returns the target's bytes\nout of the page cache without a command going on the wire.\n\nCheck the direction before using the scatterlist, the way the R2T path\nalready does.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2026-98479" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/24ffc919467d20951f0f132d1c75294e2e91e09b", "url": "https://git.kernel.org/stable/c/24ffc919467d20951f0f132d1c75294e2e91e09b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/79991b770fc3685b1d5cf805b659a879edd19931", "url": "https://git.kernel.org/stable/c/79991b770fc3685b1d5cf805b659a879edd19931" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8db1232945bc663fb94f300090a1fc108de99296", "url": "https://git.kernel.org/stable/c/8db1232945bc663fb94f300090a1fc108de99296" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94e5bdd08e51c450d954bc592f591c233ca5c9df", "url": "https://git.kernel.org/stable/c/94e5bdd08e51c450d954bc592f591c233ca5c9df" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bce07e2f37b5e4a427d36fd6b1c14067b27591db", "url": "https://git.kernel.org/stable/c/bce07e2f37b5e4a427d36fd6b1c14067b27591db" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de96dc11aee0d058927bff94a168e3c5c46483e2", "url": "https://git.kernel.org/stable/c/de96dc11aee0d058927bff94a168e3c5c46483e2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3b25bf2cf2496e85bc05b33360faf9fdf880e03", "url": "https://git.kernel.org/stable/c/e3b25bf2cf2496e85bc05b33360faf9fdf880e03" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ee56b5e18f566c0b5a183379dcd63d402cebf2f8", "url": "https://git.kernel.org/stable/c/ee56b5e18f566c0b5a183379dcd63d402cebf2f8" } ], "release_date": "2026-10-18T16:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-10-26T00:51:44.451057Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902", "product_ids": [ "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-abi-whitelists-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-debug-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-devel-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:kernel-doc-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-firmware-0:2.6.32-754.35.8.el6.tuxcare.els39.noarch", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:kernel-headers-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.i686", "CentOS-6:python-perf-0:2.6.32-754.35.8.el6.tuxcare.els39.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1792975902" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }