Msrc Cbl2 Kernel 5.15.202.1-1 On Cbl Mariner 2.0 vulnerabilities

CVE-2026-23191 [HIGH] ALSA: aloop: Fix racy access at PCM trigger ALSA: aloop: Fix racy access at PCM trigger Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23214 [MEDIUM] btrfs: reject new transactions if the fs is fully read-only btrfs: reject new transactions if the fs is fully read-only Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23066 [HIGH] rxrpc: Fix recvmsg() unconditional requeue rxrpc: Fix recvmsg() unconditional requeue Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23204 [HIGH] net/sched: cls_u32: use skb_header_pointer_careful() net/sched: cls_u32: use skb_header_pointer_careful() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23213 [MEDIUM] drm/amd/pm: Disable MMIO access during SMU Mode 1 reset drm/amd/pm: Disable MMIO access during SMU Mode 1 reset Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23208 [HIGH] ALSA: usb-audio: Prevent excessive number of frames ALSA: usb-audio: Prevent excessive number of frames Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23141 [MEDIUM] btrfs: send: check for inline extents in range_is_hole_in_parent() btrfs: send: check for inline extents in range_is_hole_in_parent() Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23118 [MEDIUM] rxrpc: Fix data-race warning and potential load/store tearing rxrpc: Fix data-race warning and potential load/store tearing Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71225 [MEDIUM] md: suspend array while updating raid_disks via sysfs md: suspend array while updating raid_disks via sysfs Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2025-71227 [MEDIUM] wifi: mac80211: don't WARN for connections on invalid channels wifi: mac80211: don't WARN for connections on invalid channels Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23207 [MEDIUM] spi: tegra210-quad: Protect curr_xfer check in IRQ handler spi: tegra210-quad: Protect curr_xfer check in IRQ handler Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23157 [MEDIUM] btrfs: do not strictly require dirty metadata threshold for metadata writepages btrfs: do not strictly require dirty metadata threshold for metadata writepages Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23126 [MEDIUM] netdevsim: fix a race issue related to the operation on bpf_bound_progs list netdevsim: fix a race issue related to the operation on bpf_bound_progs list Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23088 [MEDIUM] tracing: Fix crash on synthetic stacktrace field usage tracing: Fix crash on synthetic stacktrace field usage Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23138 [MEDIUM] tracing: Add recursion protection in kernel stack trace recording tracing: Add recursion protection in kernel stack trace recording Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23154 [MEDIUM] net: fix segmentation of forwarding fraglist GRO net: fix segmentation of forwarding fraglist GRO Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23113 [MEDIUM] io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Mariner: Mariner Linux: Linux Customer Action Required: Yes

CVE-2026-23212 [MEDIUM] bonding: annotate data-races around slave->last_rx bonding: annotate data-races around slave->last_rx Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23220 [MEDIUM] ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths Mariner: Mariner Linux: Linux Customer Action Required: Yes Remediation: CBL-Mariner Releases Reference: https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade

CVE-2026-23086 [MEDIUM] vsock/virtio: cap TX credit to local buffer size vsock/virtio: cap TX credit to local buffer size Mariner: Mariner Linux: Linux Customer Action Required: Yes