CLSA-2026-1786761805 kernel: Fix of 46 CVEs

wifi: ath11k: update channel list in reg notifier instead reg worker CVE-2025-23133 - wifi: cfg80211: call regnotifier for self managed wiphy from driver hint CVE-2025-23133 - KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception CVE-2025-37957 - KVM: x86: forcibly leave nested mode on vCPU...

CLSA-2026-1783362244 kernel: Fix of 122 CVEs

KVM: x86: Fix shadow paging use-after-free due to unexpected role CVE-2026-46113 - KVM: x86: Fix shadow paging use-after-free due to unexpected GFN CVE-2026-46113 - Bluetooth: bcsp: receive data only if registered CVE-2025-40308 - xen/privcmd: unregister xenstore notifier on module exit...

K000163775: Linux kernel vulnerability CVE-2026-31685

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6teui64: reject invalid MAC header for all packets eui64mt6 derives a modified EUI-64 from the Ethernet source address and compares it with the low 64 bits of the IPv6 source address. Th...

CLSA-2026-1781347338 kernel: Fix of 92 CVEs

octeontx2-pf: handle otx2mboxgetrsp errors in cn10k.c CVE-2024-56726 - octeontx2-pf: handle otx2mboxgetrsp errors in otx2common.c CVE-2024-56679 - USB: chipidea: fix memory leak with using debugfslookup CVE-2023-53334 - drivers: serial: jsm: fix some leaks in probe CVE-2022-50312 - drm: amd:...

CLSA-2026-1787303413 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 5.4.0-236...

CLSA-2026-1792419819 Fix of 74 CVEs

Bump kernel ABI to 30: ship the ELS kernel as 4.19.0-30-, distinct from the prior 4.19.0-29. CVE-2021-3493 - vfs: move capconvertnscap call into vfssetxattr CVE-2021-3493 - ecryptfs: fix uid translation for setxattr on security.capability CVE-2021-3493 CVE-2025-23142 - sctp: detect and prevent...

CLSA-2026-1787304608 kernel-uek: Fix of 34 CVEs

Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison CVE-2026-53309 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 - ixgbevf:...

CLSA-2026-1775655705 kernel-uek: Fix of 34 CVEs

ALSA: usb-audio: Fix use-after-free in sndusbmixerfree CVE-2026-23089 - HID: core: Harden s32ton against conversion to 0 bits CVE-2025-38556 - KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory CVE-2024-50115 - KVM: x86: Reset IRTE to host control if new route isn't postable CVE-2025-37885...

CLSA-2025-1757699693 kernel-uek: Fix of 19 CVEs

Bluetooth: afbluetooth: Fix Use-After-Free in btsockrecvmsg CVE-2024-21803 - net: defer final 'struct net' free in netns dismantle CVE-2024-56658 - netfilter: validate user input for expected length CVE-2024-35896 - drm/amd/display: Fix out-of-bounds access in 'dcn21linkencodercreate'...

CLSA-2026-1791132991 Fix of 400 CVEs

CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 CVE-2025-39827 - net: rose: include node references in roseneigh refcount CVE-2025-39827 CVE-2026-93140 - udf: Mark LVID...

CLSA-2026-1779202006 Fix of 6 CVEs

Ubuntu: 4.15.0-256.267 CVE-2026-46333 - ptrace: require CAPSYSPTRACE when task has no mm CVE-2026-46333 CVE-2026-46300 - net: skbuff: propagate shared-frag marker through copy/coalesce/gro/shift paths CVE-2026-46300 CVE-2026-43284 - xfrm: esp: avoid in-place decrypt on shared skb frags...

kernel: Fix of 12 CVEs

drm/vmwgfx: Fix invalid reads in fence signaled events CVE-2024-36960 - afunix: Fix garbage collector racing against connect CVE-2024-26923 - ipv6: remove maxsize check inline with ipv4 CVE-2023-52340 - aoe: fix the potential use-after-free problem in aoecmdcfgpkts CVE-2023-6270 - smb: client:...

CLSA-2025-1766599987 kernel: Fix of 64 CVEs

xfrm: Duplicate SPI Handling CVE-2025-39965 - xfrm: state: use atomicincnotzero to increment refcount - padata: Fix pd UAF once and for all CVE-2025-38584 - padata: Remove broken queue flushing CVE-2023-52854 - padata: ensure padatadoserial runs on the correct CPU - Bluetooth: L2CAP: Fix...

CLSA-2024-1728298943 kernel: Fix of 12 CVEs

btrfs: fix use-after-free after failure to create a snapshot CVE-2022-48733 - hwmon: nct6775-core Fix underflows seen when writing limit attributes CVE-2024-46757 - wifi: mac80211: Avoid address calculations via out of bounds array indexing CVE-2024-41071 - netfilter: conntrack: dccp: copy entire...

CLSA-2026-1786444011 kernel: Fix of 16 CVEs

KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level CVE-2026-63807 - KVM: x86: Check for invalid/obsolete root after making MMU pages available CVE-2026-64561 - comedi: vmk80xx: fix bulk-buffer overflow CVE-2021-47474 - staging: vmeuser: Fix possible UAF in...

CLSA-2026-1792236238 kernel: Fix of 74 CVEs

ipv4: validate checksumstart before completing checksum CVE-2026-99999 - smb: client: fix UAF and buffer leak in cifschecktrans2 for malformed secondary T2 CVE-2026-89637 - smb: client: fix OOB read/write from unvalidated DataOffset in coalescet2 CVE-2026-89633 - xen/netfront: drop RX packets...

CLSA-2025-1746479711 kernel-uek: Fix of 225 CVEs

sctp: sysctl: authenable: avoid using current-nsproxy - sctp: sysctl: cookiehmacalg: avoid using current-nsproxy CVE-2025-21640 - bpf: Use preemptcount directly in bpfsendsignalcommon - Revert "sctp: sysctl: cookiehmacalg: avoid using current-nsproxy" - jfs: fix slab-out-of-bounds read in eaget -...

CLSA-2025-1758796886 kernel: Fix of 23 CVEs

drm/amd/amdgpu: introduce gcmes2.bin v2 - proc: fix a dentry lock race between releasetask and lookup - scsi: aacraid: Stop using PCIIRQAFFINITY - scsi: aacraid: Remove useless code - scsi: aacraid: Remove unused aaccheckhealth - scsi: aacraid: struct user,sgmap,64,raw: Replace 1-element arrays...

CLSA-2026-1788449727 Fix of 235 CVEs

Bump kernel ABI to 29: ship the ELS kernel as 4.19.0-29-, distinct from the prior 4.19.0-28. CVE-2021-46984 - kyber: fix out of bounds access when preempted CVE-2021-46984 CVE-2021-47049 - Drivers: hv: vmbus: Use after free in vmbusopen CVE-2021-47049 CVE-2021-47101 - asix: fix uninit-value in...

CVE-2026-98510

A flaw was found in the Linux kernel's Intel Xe graphics driver. When closing a GPU virtual memory space, page tables were destroyed before contested virtual memory areas were properly unlinked from shared buffer objects. A concurrent thread evicting a shared buffer object can attempt to access t...