CLSA-2026-1792753995 Fix of 14 CVEs

CVE-2026-74480 - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 CVE-2026-74581 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 CVE-2026-80714 - ipvs: do not propagate one-packet flag to synced conns CVE-2026-80714 CVE-2026-43503 - net: skbuff: propagate...

CLSA-2026-1787293393 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...

CLSA-2026-1792137027 kernel-uek: Fix of 161 CVEs

net: usb: pegasus: don't rely on id table pointer arithmetic CVE-2026-97540 - ocfs2: validate directory-index entry counts when reading metadata CVE-2026-89492 - ocfs2: validate dxroot extent list fields during block read CVE-2026-89492 - nvme-tcp: reject a read that transferred too few bytes...

CLSA-2026-1791858923 Fix of 174 CVEs

CVE-2026-90205 - ocfs2: validate orphan slot during inode read CVE-2026-90205 CVE-2026-93054 - uio: Fix stale info pointer in failed registration path CVE-2026-93054 CVE-2026-93103 - RDMA/hfi1: Preserve unit 0 on allocation failure CVE-2026-93103 CVE-2026-89833 - f2fs: fix to avoid potential...

CLSA-2025-1758010922 Fix of 49 CVEs

CVE-url: https://ubuntu.com/security/CVE-2025-38000 - schhfsc: Fix qlen accounting bug when using peek in hfscenqueue CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752 - netsched: schsfq: move the limit validation Focal update: v5.4.285...

CLSA-2026-1787303413 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 5.4.0-236...

CLSA-2026-1787293144 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564

CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...

CLSA-2026-1787304608 kernel-uek: Fix of 34 CVEs

Rebased onto Oracle UEK base 5.4.17-2136.357.2.el7uek - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 - ocfs2/dlm: fix off-by-one in dlmmatchregions region comparison CVE-2026-53309 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 - ixgbevf:...

CLSA-2026-1791132991 Fix of 400 CVEs

CVE-2026-53266 - netfilter: bridge: make ebtsnat ARP rewrite writable CVE-2026-53266 CVE-2025-39964 - crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 CVE-2025-39827 - net: rose: include node references in roseneigh refcount CVE-2025-39827 CVE-2026-93140 - udf: Mark LVID...

OESA-2026-4357 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist Index allocation requires at least one bit in the $BITMAP attribute to track usage of inde...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: removing an entry instead of using null-ptr-dereference in ocfs2xaremove Syzkaller can trigger null-ptr-dereference in ocfs2xaremove: 57.319872 a.out,1161,7:ocfs2xaremove:2028 ERROR: status = -12 57.320420...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fixed a race condition between searching chunks and releasing the journalhead from the bufferhead. A race condition was encountered between ocfs2testbgbitallocatable and jbd2journalputjournalhead, resulting in the followin...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Do not call BUGON on an invalid journal dinode. BUG A corrupted OCFS2 image can corrupt the current slot journal dinode while mounting is still in progress. The mount path first reports the invalid journal block and then...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Avoid moving extents to occupied clusters. For non-auto OCFS2IOCMOVEEXT operations, the user space provides a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed a NULL pointer dereference in ocfs2assuretranscredits. BREAK A direct write over unwritten extents can cause the kernel to panic in ocfs2assuretranscredits, especially when the journal aborts during DIO completion...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Remove the unreasonable unlock in ocfs2readblocks. Patch series “Misc fixes for ocfs2readblocks”, version 5. This series contains two fixes for ocfs2readblocks. The first patch addresses the issue reported by syzbot, which...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Fixed an out-of-bounds write in ocfs2writeendinline. KASAN reports a use-after-free write of 4086 bytes in ocfs2writeendinline, which is called from ocfs2writeendnolock during a copyfilerange operation in a corrupted ocfs2...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: Validated the lengths of fields in dmMigLockResHandler. A node receiving a DLMMIGLOCKRES message relies on several fields of the peer-provided dmMigratableLockRes without any validation. numlocks and locknamelen are...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: ocfs2: The uncached inode fails to enter the group. Syzbot has reported the following BUG: Kernel BUG at fs/ocfs2/uptodate.c:509! … Call Trace: ? diebody+0x5f/0xb0 ? die+0x9e/0xc0 ? dotrap+0x15a/0x3a0 ?...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Synchronize heartbeat callbacks with o2net teardown This patch belongs to the series “ocfs2: Hardening heartbeat teardown races”. This series addresses two OCFS2 heartbeat/o2net teardown races detected by KASAN. This patch...