EULEROS-SA-2026-3744

Summary:

An update for kernel is now available for EulerOS V2.0SP10

EulerOS Security has rated this update as having a security impact of Critical.A Common Vunlnerability Scoring System(CVSS)base score, which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.General:

The kernel package contains the Linux kernel (vmlinuz), the core of any Linux operating system. The kernel handles the basic functions of the operating system: memory allocation, process allocation, device input and output, etc.

Security Fix(es):

locking/rtmutex: Skip remove_waiter() when waiter is not enqueued(CVE-2026-53163)

RDMA/umem: Fix truncation for block sizes ＞= 4G(CVE-2026-53075)

USB: serial: kl5kusb105: fix bulk-out buffer overflow(CVE-2026-53133)

ipc: limit next_id allocation to the valid ID range(CVE-2026-53194)

HID: core: Mitigate potential OOB by removing bogus memset()(CVE-2026-53176)

dm: fix a buffer overflow in ioctl processing(CVE-2026-52923)

bonding: alb: fix UAF in rlb_arp_recv during bond up/down(CVE-2026-46331)

RDMA/rxe: Fix double free in rxe_srq_from_init(CVE-2026-43047)

netfilter: x_tables: ensure names are nul-terminated(CVE-2026-43048)

procfs: fix missing RCU protection when reading real_parent in do_task_stat()(CVE-2026-46294)

netfilter: nf_conntrack_helper: pass helper to expect cleanup(CVE-2026-45970)

net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs(CVE-2026-45852)

openvswitch: cap upcall PID array size and pre-size vport replies(CVE-2026-43028)

ipv6: prevent possible UaF in addrconf_permanent_addr()(CVE-2026-46259)

netfilter: xt_tcpmss: check remaining length before reading optlen(CVE-2026-43027)

RDMA/rxe: Reject unknown opcodes before ICRC processing(CVE-2026-23340)

sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL(CVE-2026-45840)

RDMA/rxe: Validate pad and ICRC before payload_size() in...