[CLSA-2026:1787918353] Fix of 5 CVEs
Type:
security
Severity:
Important
Release date:
2026-10-19 13:09:54 UTC
Description:
* TuxCare ELS build of the Debian 11 (bullseye) 5.10.262 kernel (x86_64/aarch64/armel). * Reconstructed on the newer bullseye-security 5.10.262-1 base (rolls up upstream stable 5.10.260 / .261 / .262), replacing the prior 5.10.259-1 base. Debian patch set re-imported as git commits (ip6_vti patch dropped — now upstream; firmware log-message patch refreshed). * Single-source: embed the linux-latest + linux-signed meta packages into the source tree (debian/meta/) so one dpkg-buildpackage run produces the versioned kernel AND the meta/signed packages. * ABI: this ELS changelog entry increments the gencontrol-computed abiname 5.10.0-46 -> 5.10.0-47, so the ELS kernel ships as linux-image-5.10.0-47-*, a distinct, co-installable package vs Debian stock 5.10.0-46. * Disable the rt and cloud featuresets/flavours (not shipped by ELS). * Fix the duplicate pinned image/headers meta on signed arches under disable-signed: gate the pinned-meta emission on raw signed-code so only the embed's fallback meta (linux-image-5.10.0-47-amd64 | ...-unsigned) ships. * Backport security fixes for potentially-exploited (KCARE 0/1-day) CVEs: CVE-2026-46113 (KVM x86 shadow-paging UAF, unexpected GFN/role), CVE-2026-64561 (KVM x86: check obsolete root after making MMU pages available), CVE-2026-64564 (SCTP ASCONF DEL-IP transport use-after-free), CVE-2026-64600 (XFS: resample data-fork mapping after cycling ILOCK). * Drop the prior CVE-2026-43499 (rtmutex remove_waiter UAF) and CVE-2026-46331 (net/sched pedit partial-COW) backports — both are included upstream in the 5.10.260 / .261 / .262 stable roll-up.
CVEs fixed:
Updated packages:
  • bpftool_5.10.262-1+tuxcare.els1_amd64.deb
    sha:4d7facb157112048413c6af1e474fa52cadf0b57
  • hyperv-daemons_5.10.262-1+tuxcare.els1_amd64.deb
    sha:f98d9a3491fc58b718df617048efa02a6dd12715
  • libcpupower-dev_5.10.262-1+tuxcare.els1_amd64.deb
    sha:720efaa7d433c0c19739c0f91f60ef5b73881168
  • libcpupower1_5.10.262-1+tuxcare.els1_amd64.deb
    sha:3dfbd49739ffdc1d6505dd868f48c52e78b3f65e
  • linux-compiler-gcc-10-x86_5.10.262-1+tuxcare.els1_amd64.deb
    sha:3007d4a0f59d27f972570761e95b5e1058869be4
  • linux-config-5.10_5.10.262-1+tuxcare.els1_amd64.deb
    sha:84367decf735c421b0375ef8abc184d7d5dfdd90
  • linux-cpupower_5.10.262-1+tuxcare.els1_amd64.deb
    sha:3c3a7fe08981094ae49e3bbbf481c9122b634c72
  • linux-doc_5.10.262-1+tuxcare.els1_all.deb
    sha:6aaa3709f273c1f92e81eb57a7b443ec97e4ee0e
  • linux-doc-5.10_5.10.262-1+tuxcare.els1_all.deb
    sha:d7e82ac28c413e9b8fe434fa8f69e112570a3fe9
  • linux-headers-5.10.0-47-amd64_5.10.262-1+tuxcare.els1_amd64.deb
    sha:1018cd26dfc2ab7b866355dd1d9f7e7037584266
  • linux-headers-5.10.0-47-common_5.10.262-1+tuxcare.els1_all.deb
    sha:1d9ef2741366c703de6c96b52a9ae778771bfd57
  • linux-headers-amd64_5.10.262-1+tuxcare.els1_amd64.deb
    sha:b88aa3f3ae66955b69dee2820b52e3409f8c7c7d
  • linux-image-5.10.0-47-amd64-unsigned_5.10.262-1+tuxcare.els1_amd64.deb
    sha:7f5ed4fd0053e889de9f84f11e5b806c60a18666
  • linux-image-amd64_5.10.262-1+tuxcare.els1_amd64.deb
    sha:e30c84decc14eef60b90a519550904e31c745dfa
  • linux-image-amd64-signed-template_5.10.262-1+tuxcare.els1_amd64.deb
    sha:8237b25a27b7155b624fda43c7e8aa5b8a4b28fd
  • linux-kbuild-5.10_5.10.262-1+tuxcare.els1_amd64.deb
    sha:4e645327845cacb33d12638762650cf870adcf8d
  • linux-libc-dev_5.10.262-1+tuxcare.els1_amd64.deb
    sha:512b2e0f938b3fc87724655285ee244cc9a68de0
  • linux-perf_5.10.262-1+tuxcare.els1_amd64.deb
    sha:325e5fc4ffcbc3081e5c95b334b360d42da63d5d
  • linux-perf-5.10_5.10.262-1+tuxcare.els1_amd64.deb
    sha:22d320de0473e9f787fc19c618c1b3604cada40f
  • linux-source_5.10.262-1+tuxcare.els1_all.deb
    sha:03f847b48ae56bf588066a42f705a2e9dbf44271
  • linux-source-5.10_5.10.262-1+tuxcare.els1_all.deb
    sha:516825fb1e12eadc37ee122b0e34d8eccb4db059
  • linux-support-5.10.0-47_5.10.262-1+tuxcare.els1_all.deb
    sha:965079f47e09f13fd9c0369adb829a084d902d38
  • bpftool_5.10.262-1+tuxcare.els1_arm64.deb
    sha:03270aa88d76ad2e356d5c3ce500b1088c8dab93
  • hyperv-daemons_5.10.262-1+tuxcare.els1_arm64.deb
    sha:366a6207a28e940dc59349e976e73c867e306320
  • libcpupower-dev_5.10.262-1+tuxcare.els1_arm64.deb
    sha:d9defde5ba8ee88c4165cdd0973935d320b2ce68
  • libcpupower1_5.10.262-1+tuxcare.els1_arm64.deb
    sha:a033c09c7298466271083f0a85a9e2df25056605
  • linux-config-5.10_5.10.262-1+tuxcare.els1_arm64.deb
    sha:1e8c1a803bbec1c9d500387f3b8111db23fa56a9
  • linux-cpupower_5.10.262-1+tuxcare.els1_arm64.deb
    sha:5b6ecd3b93232e45344f8d4afe0dc68bcd32b5af
  • linux-headers-5.10.0-47-arm64_5.10.262-1+tuxcare.els1_arm64.deb
    sha:222310ac127ae61e8be6d991f96a437f06e56601
  • linux-headers-arm64_5.10.262-1+tuxcare.els1_arm64.deb
    sha:10178d7e31e33bcb8dc0126bb0eb037f0acfec9f
  • linux-image-5.10.0-47-arm64-unsigned_5.10.262-1+tuxcare.els1_arm64.deb
    sha:e4a606772df02b0ed8c641079bc392b4691da13e
  • linux-image-arm64_5.10.262-1+tuxcare.els1_arm64.deb
    sha:d138d724e1c36395ea1f688b0ead48a544bb535c
  • linux-image-arm64-signed-template_5.10.262-1+tuxcare.els1_arm64.deb
    sha:ecd43bdc50f39a67b5089c02e903c27dc0663d9e
  • linux-kbuild-5.10_5.10.262-1+tuxcare.els1_arm64.deb
    sha:4edf19dd35c853322083ea3997ae70883622edc4
  • linux-libc-dev_5.10.262-1+tuxcare.els1_arm64.deb
    sha:1b9dbbabcd8788932e96541991ccbb102a657221
  • linux-perf_5.10.262-1+tuxcare.els1_arm64.deb
    sha:8bd012a75749a99068f5e2e4bff5d4d58743529c
  • linux-perf-5.10_5.10.262-1+tuxcare.els1_arm64.deb
    sha:8a288edd675ad849a23c3cfe333d018672d8fb82
  • bpftool_5.10.262-1+tuxcare.els1_armel.deb
    sha:4a1acab2c122dd4943c9525657c7ad962ccf8615
  • libcpupower-dev_5.10.262-1+tuxcare.els1_armel.deb
    sha:0f5dd064be1b37cd5fd0788759abdf1a6b0cd743
  • libcpupower1_5.10.262-1+tuxcare.els1_armel.deb
    sha:1eb2361debdcc99d17c2ba9f48bedbe2a0fdcabc
  • linux-compiler-gcc-10-arm_5.10.262-1+tuxcare.els1_armel.deb
    sha:79342968b67af45d014c7c1d66eb06cda0ee45e7
  • linux-config-5.10_5.10.262-1+tuxcare.els1_armel.deb
    sha:83e23df0ae8052def0b0e3e2f334fe29f9e08305
  • linux-cpupower_5.10.262-1+tuxcare.els1_armel.deb
    sha:76a1651f19dac9756bf110f79317f9f4e2016fc2
  • linux-headers-5.10.0-47-marvell_5.10.262-1+tuxcare.els1_armel.deb
    sha:e198b379a5f2d391afa846d219168b33cec47dbc
  • linux-headers-5.10.0-47-rpi_5.10.262-1+tuxcare.els1_armel.deb
    sha:7dc4b08666b5f8042d558d90169e7ae303015d89
  • linux-headers-marvell_5.10.262-1+tuxcare.els1_armel.deb
    sha:618315f338adf3085ce96091ac0c92e0bf6dff25
  • linux-headers-rpi_5.10.262-1+tuxcare.els1_armel.deb
    sha:ba0ad331b8281767bd7e372a5200209a86bef305
  • linux-image-5.10.0-47-marvell_5.10.262-1+tuxcare.els1_armel.deb
    sha:c34cda47bcf68f4011204abbdda0bdad51480878
  • linux-image-5.10.0-47-rpi_5.10.262-1+tuxcare.els1_armel.deb
    sha:71bb3363af2c7d9074d6639a27ca12b290cd0e07
  • linux-image-marvell_5.10.262-1+tuxcare.els1_armel.deb
    sha:f792fe723cb0efa2b4323966e0c2e552535dc7f6
  • linux-image-rpi_5.10.262-1+tuxcare.els1_armel.deb
    sha:aa9fb819920b4a9fc2a5d249b0fd129871c36a5c
  • linux-kbuild-5.10_5.10.262-1+tuxcare.els1_armel.deb
    sha:ed3d326d51ca98a2f222bc2b4d7067d88336d915
  • linux-libc-dev_5.10.262-1+tuxcare.els1_armel.deb
    sha:f5d7d3940723be616c1d7f85e90ad20b9525d1c5
  • linux-perf_5.10.262-1+tuxcare.els1_armel.deb
    sha:685eefb6e05cc8a5e084e984929005e26fc52e15
  • linux-perf-5.10_5.10.262-1+tuxcare.els1_armel.deb
    sha:12f76801fba95e25de05d0e3d2ec9ce1b5e77922
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.