CLSA-2025-1742319747
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1742319747.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1742319747
- Upstream
- Published
- 2025-03-18T17:42:33Z
- Modified
- 2026-06-04T10:03:21.432441887Z
- Summary
- Fix of 29 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2024-50180
- fbdev: sisfb: Fix strbuf array overflow
- CVE-url: https://ubuntu.com/security/CVE-2023-52522
- net: fix possible store tearing in neighperiodicwork()
- CVE-url: https://ubuntu.com/security/CVE-2024-40911
- wifi: cfg80211: Lock wiphy in cfg80211getstation
- CVE-url: https://ubuntu.com/security/CVE-2024-43863
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- CVE-url: https://ubuntu.com/security/CVE-2024-44931
- gpio: prevent potential speculation leaks in gpiodeviceget_desc()
- CVE-url: https://ubuntu.com/security/CVE-2024-23848
- media: cec: cec-api: add locking in cecrelease()
- media: cec: core: avoid recursive cecclaimlogaddrs
- CVE-url: https://ubuntu.com/security/CVE-2024-50229
- nilfs2: fix potential deadlock with newly created symlinks
- CVE-url: https://ubuntu.com/security/CVE-2024-50171
- net: systemport: fix potential memory leak in bcmsysportxmit()
- CVE-url: https://ubuntu.com/security/CVE-2024-50233
- staging: iio: frequency: ad9832: fix division by zero in ad9832calcfreqreg()
- CVE-url: https://ubuntu.com/security/CVE-2024-50134
- drm/vboxvideo: Replace fake VLA at end of vbvamousepointer_shape with real VLA
- CVE-url: https://ubuntu.com/security/CVE-2024-44938
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- CVE-url: https://ubuntu.com/security/CVE-2024-50117
- drm/amd: Guard against bad data for ATIF ACPI method
- CVE-url: https://ubuntu.com/security/CVE-2024-49902
- jfs: check if leafidx greater than num leaves per dmap tree
- CVE-url: https://ubuntu.com/security/CVE-2023-52799
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- CVE-url: https://ubuntu.com/security/CVE-2024-49966
- ocfs2: cancel dqisyncwork before freeing oinfo
- CVE-url: https://ubuntu.com/security/CVE-2024-50267
- USB: serial: io_edgeport: fix use after free in debug printk
- CVE-url: https://ubuntu.com/security/CVE-2024-50230
- nilfs2: fix kernel bug due to missing clearing of checked flag
- CVE-url: https://ubuntu.com/security/CVE-2024-50302
- HID: core: zero-initialize the report buffer
- CVE-url: https://ubuntu.com/security/CVE-2024-50278
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix potential out-of-bounds access on the first resume
- CVE-url: https://ubuntu.com/security/CVE-2024-50234
- wifi: iwlegacy: Clear stale interrupts before resuming device
- CVE-url: https://ubuntu.com/security/CVE-2024-50301
- security/keys: fix slab-out-of-bounds in keytaskpermission
- CVE-url: https://ubuntu.com/security/CVE-2024-50143
- overflow: Add __mustcheck attribute to check*() helpers
- compiler.h: drop fallback overflow checkers
- overflow: Allow mixed type arguments
- udf: fix uninit-value use in udfgetfileshortad
- CVE-url: https://ubuntu.com/security/CVE-2024-53061
- media: s5p-jpeg: prevent buffer overflows
- CVE-url: https://ubuntu.com/security/CVE-2024-57798
- drm/dp-mst-helper: Remove hotplug callback
- drm/dpmst: Remove huge conditional in drmdpmsthandleupreq()
- drm/dpmst: Refactor drmdpmsthandleupreq()
- drm/dpmst: Rename drmdpaddport and drmdpupdateport
- drm/dpmst: Handle UP requests asynchronously
- drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleup_req()
- CVE-url: https://ubuntu.com/security/CVE-2023-52854
- padata: make padatadoparallel find alternate callback CPU
- padata: allocate workqueue internally
- crypto: pcrypt - remove padata cpumask notifier
- padata, pcrypt: take CPU hotplug lock internally in padataallocpossible
- padata: use separate workqueues for parallel and serial work
- padata: unbind parallel jobs from specific CPUs
- workqueue: Make alloc/apply/freeworkqueueattrs() static
- workqueue: Remove GPF argument from allocworkqueueattrs()
- workqueue: unconfine alloc/apply/freeworkqueueattrs()
- crypto: pcrypt - Avoid deadlock by using per-instance padata queues
- crypto: aead - pass instance to cryptograbaead()
- crypto: pcrypt - simplify error handling in pcryptcreateaead()
- padata: Fix refcnt handling in padatafreeshell()
- CVE-url: https://ubuntu.com/security/CVE-2024-53164
- net: sched: fix ordering of qlen adjustment
- CVE-url: https://ubuntu.com/security/CVE-2024-47809
- dlm: fix possible lkb_resource null dereference
- CVE-url: https://ubuntu.com/security/CVE-2021-47342
- ext4: fix memory leak in ext4fillsuper
- ext4: fix possible UAF when remounting r/o a mmp-protected file system
- CVE-url: https://ubuntu.com/security/CVE-2024-53179
- smb: client: fix use-after-free of signing key
- Miscellaneous upstream changes
- drm/amd/amdgpu: Fix GPR read from debugfs (v2)
- CVE-url: https://ubuntu.com/security/CVE-2024-50180
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-245-tuxcare.els33-generic
linux-buildinfo-4.15.0-245-tuxcare.els33-lowlatency
linux-cloud-tools-4.15.0-245-tuxcare.els33
linux-cloud-tools-4.15.0-245-tuxcare.els33-generic
linux-cloud-tools-4.15.0-245-tuxcare.els33-lowlatency
linux-cloud-tools-common
linux-cloud-tools-generic
linux-cloud-tools-lowlatency
linux-crashdump
linux-doc
linux-generic
linux-headers-4.15.0-245-tuxcare.els33
linux-headers-4.15.0-245-tuxcare.els33-generic
linux-headers-4.15.0-245-tuxcare.els33-lowlatency
linux-headers-generic
linux-headers-lowlatency
linux-image-generic
linux-image-lowlatency
linux-image-unsigned-4.15.0-245-tuxcare.els33-generic
linux-image-unsigned-4.15.0-245-tuxcare.els33-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-245-tuxcare.els33-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-245-tuxcare.els33-lowlatency?distro=ubuntu-18.04