EULEROS-SA-2026-3684

Summary:

An update for kernel is now available for EulerOS V2.0SP10(x86_64)

EulerOS Security has rated this update as having a security impact of Critical.A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.General:

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.

Security Fix(es):

locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)

IB/isert: Reject login PDUs shorter than ISER_HEADERS_LEN(CVE-2026-53176)

USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53194)

ipc: limit next_id allocation to the valid ID range(CVE-2026-52923)

tun: free page on build_skb failure in tun_xdp_one()(CVE-2026-46322)

tun: free page on short-frame rejection in tun_xdp_one()(CVE-2026-46321)

tap: free page on error paths in tap_get_user_xdp()(CVE-2026-46320)

net/sched: fix pedit partial COW leading to page cache corruption(CVE-2026-46331)

ipmi: Add limits to event and receive message requests(CVE-2026-46177)

dm: fix a buffer overflow in ioctl processing(CVE-2026-46294)

xsk: tighten UMEM headroom validation to account for tailroom and min frame(CVE-2026-43093)

net: consume xmit errors of GSO frames(CVE-2026-43194)

procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46259)

tipc: fix bc_ackers underflow on duplicate GRP_ACK_MSG(CVE-2026-31662)

RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-46133)

drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs()(CVE-2026-46209)

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-46227)

RDMA/vmw_pvrdma: Fix double free on...