EULEROS-SA-2026-2535

Summary:

An update for kernel is now available for EulerOS V2.0SP12(x86_64)

EulerOS Security has rated this update as having a security impact of Critical.A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.General:

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.

Security Fix(es):

Input: alps - fix use-after-free bugs caused by dev3_register_work(CVE-2025-68822)

ext4: reject mount if bigalloc with s_first_data_block != 0(CVE-2026-31447)

tls: Fix race condition in tls_sw_cancel_work_tx()(CVE-2026-23240)

apparmor: replace recursive profile removal with iterative approach(CVE-2026-23404)

ethtool: Avoid overflowing userspace buffer on stats query(CVE-2025-68795)

ipv6: avoid overflows in ip6_datagram_send_ctl()(CVE-2026-31415)

ceph: add a bunch of missing ceph_path_info initializers(CVE-2026-43408)

netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-43027)

netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp()(CVE-2026-23457)

PM: runtime: Fix a race condition related to device removal(CVE-2026-23452)

net/sched: sch_hfsc: fix divide-by-zero in rtsc_min()(CVE-2026-31423)

mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

drm/ioc32: stop speculation on the drm_compat_ioctl path(CVE-2026-31781)

module: Fix kernel panic when a symbol st_shndx is out of bounds(CVE-2026-31521)

serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN(CVE-2026-23472)

net/tcp-md5: Fix MAC comparison to be constant-time(CVE-2026-43383)

ext4: avoid infinite loops caused by residual data(CVE-2026-31448)

smb: client: Don＆#39;t log plaintext credentials in...