CLSA-2026-1778260978

Update of kernel

No scoreFix available

xfrm: esp: avoid in-place decrypt on shared skb frags

What each source reports

OSV No score

Update of kernel

xfrm: esp: avoid in-place decrypt on shared skb frags

Record: CLSA-2026-1778260978
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`bpftool` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-cross-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug-core` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug-modules-extra` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-debug-modules-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18

Show 12 moreShow less

Affected packages
Package	Affected	Fixed
`kernel-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-headers` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-ipaclones-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-modules` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-modules-extra` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-modules-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-selftests-internal` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-tools` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-tools-libs` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`kernel-tools-libs-devel` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`perf` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18
`python3-perf` TuxCare:CentOS-Stream:8	before 4.18.0-553.6.1.el8_10.tuxcare.els18	4.18.0-553.6.1.el8_10.tuxcare.els18

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CLSA-2026-1778260978 is a vulnerability with no CVSS score yet in kernel, published May 8, 2026. No source lists public exploit code. Fixed in bpftool 4.18.0-553.6.1.el8_10.tuxcare.els18.

References

errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1778260978.html