EULEROS-SA-2026-2642

Summary:

An update for kernel is now available for EulerOS V2.0SP10(x86_64)

EulerOS Security has rated this update as having a security impact of Important.A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.General:

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.

Security Fix(es):

mrp: introduce active flags to prevent UAF when applicant uninit(CVE-2022-50697)

net: skbuff: propagate shared-frag marker through frag-transfer helpers(CVE-2026-43503)

crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption(CVE-2026-43033)

PCI: Fix pci_slot_trylock() error handling(CVE-2026-43211)

HID: multitouch: Check to ensure report responses match the request(CVE-2026-43047)

HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-43048)

smb: client: fix OOB read in smb2_ioctl_query_info QUERY_INFO path(CVE-2026-31708)

crypto: pcrypt - Fix handling of MAY_BACKLOG requests(CVE-2026-43493)

mm: blk-cgroup: fix use-after-free in cgwb_release_workfn()(CVE-2026-31586)

crypto: algif_aead - Fix minimum RX size check for decryption(CVE-2026-43077)

ptrace: slightly saner ＆#39;get_dumpable()＆#39; logic(CVE-2026-46333)

dlm: validate length in dlm_search_rsb_tree(CVE-2026-43125)

lib/crypto: chacha: Zeroize permuted_state before it leaves scope(CVE-2026-43336)

openvswitch: defer tunnel netdev_put to RCU release(CVE-2026-31678)

mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()(CVE-2026-43281)

ext4: validate p_idx bounds in ext4_ext_correct_indexes(CVE-2026-31449)

af_unix: read UNIX_DIAG_VFS data under unix_state_lock(CVE-2026-31673)

ext4: publish jinode after...