CLSA-2026-1778260666

Update of kernel

No scoreFix available

xfrm: esp: avoid in-place decrypt on shared skb frags

What each source reports

OSV No score

Update of kernel

xfrm: esp: avoid in-place decrypt on shared skb frags

Record: CLSA-2026-1778260666
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-cross-headers` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug-core` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug-modules` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug-modules-extra` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-debug-modules-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37

Show 12 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-headers` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-ipaclones-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-modules` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-modules-extra` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-modules-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-selftests-internal` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-tools` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-tools-libs` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`kernel-tools-libs-devel` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`perf` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37
`python3-perf` TuxCare:CentOS:8.4	before 4.18.0-305.25.1.el8_4.tuxcare.els37	4.18.0-305.25.1.el8_4.tuxcare.els37

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2026-1778260666 is a vulnerability with no CVSS score yet in kernel, published May 8, 2026. No source lists public exploit code. Fixed in bpftool 4.18.0-305.25.1.el8_4.tuxcare.els37.

References

errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1778260666.html