Msrc Cbl2 Kernel 5.15.200.1-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2026-23234 [HIGH] f2fs: fix to avoid UAF in f2fs_write_end_io() f2fs: fix to avoid UAF in f2fs_write_end_io() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23235 [HIGH] f2fs: fix out-of-bounds access in sysfs attribute read/write f2fs: fix out-of-bounds access in sysfs attribute read/write Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23231 [HIGH] netfilter: nf_tables: fix use-after-free in nf_tables_addchain() netfilter: nf_tables: fix use-after-free in nf_tables_addchain() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23238 [MEDIUM] romfs: check sb_set_blocksize() return value romfs: check sb_set_blocksize() return value Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23236 [HIGH] fbdev: smscufx: properly copy ioctl memory to kernelspace fbdev: smscufx: properly copy ioctl memory to kernelspace Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23237 [MEDIUM] platform/x86: classmate-laptop: Add missing NULL pointer checks platform/x86: classmate-laptop: Add missing NULL pointer checks Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71238 [HIGH] scsi: qla2xxx: Fix bsg_done() causing double free scsi: qla2xxx: Fix bsg_done() causing double free Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-71233 [MEDIUM] PCI: endpoint: Avoid creating sub-groups asynchronously PCI: endpoint: Avoid creating sub-groups asynchronously Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23191 [HIGH] ALSA: aloop: Fix racy access at PCM trigger ALSA: aloop: Fix racy access at PCM trigger Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23214 [MEDIUM] btrfs: reject new transactions if the fs is fully read-only btrfs: reject new transactions if the fs is fully read-only Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23221 [HIGH] bus: fsl-mc: fix use-after-free in driver_override_show() bus: fsl-mc: fix use-after-free in driver_override_show() Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2025-71221 [HIGH] dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23068 [HIGH] spi: spi-sprd-adi: Fix double free in probe error path spi: spi-sprd-adi: Fix double free in probe error path Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71236 [MEDIUM] scsi: qla2xxx: Validate sp before freeing associated memory scsi: qla2xxx: Validate sp before freeing associated memory Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23066 [HIGH] rxrpc: Fix recvmsg() unconditional requeue rxrpc: Fix recvmsg() unconditional requeue Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23227 [HIGH] drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23204 [HIGH] net/sched: cls_u32: use skb_header_pointer_careful() net/sched: cls_u32: use skb_header_pointer_careful() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23213 [MEDIUM] drm/amd/pm: Disable MMIO access during SMU Mode 1 reset drm/amd/pm: Disable MMIO access during SMU Mode 1 reset Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23229 [MEDIUM] crypto: virtio - Add spinlock protection with virtqueue notification crypto: virtio - Add spinlock protection with virtqueue notification Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23208 [HIGH] ALSA: usb-audio: Prevent excessive number of frames ALSA: usb-audio: Prevent excessive number of frames Mariner: Mariner Linux: Linux Customer Action Required: Yes