CLSA-2025-1744624441
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1744624441.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1744624441
- Upstream
CVE (55)
- CVE-2021-47110
- CVE-2021-47219
- CVE-2021-47636
- CVE-2023-52621
- CVE-2023-52805
- CVE-2023-52847
- CVE-2024-26872
- CVE-2024-26982
- CVE-2024-36921
- CVE-2024-41014
- CVE-2024-47696
- CVE-2024-49982
- CVE-2024-50074
- CVE-2024-50269
- CVE-2024-52332
- CVE-2024-5317
- CVE-2024-53172
- CVE-2024-53174
- CVE-2024-53183
- CVE-2024-53184
- CVE-2024-53194
- CVE-2024-53214
- CVE-2024-53680
- CVE-2024-56531
- CVE-2024-56532
- CVE-2024-56539
- CVE-2024-56548
- CVE-2024-56570
- CVE-2024-56576
- CVE-2024-56594
- CVE-2024-56597
- CVE-2024-56619
- CVE-2024-56630
- CVE-2024-56637
- CVE-2024-56644
- CVE-2024-56681
- CVE-2024-56700
- CVE-2024-57850
- CVE-2024-57884
- CVE-2024-57889
- CVE-2024-57904
- CVE-2024-57908
- CVE-2024-57912
- CVE-2024-57929
- CVE-2024-57948
- CVE-2024-57980
- CVE-2024-58055
- CVE-2025-21664
- CVE-2025-21687
- CVE-2025-21718
- CVE-2025-21735
- CVE-2025-21782
- CVE-2025-21791
- CVE-2025-21855
- CVE-2025-21858
- Published
- 2026-10-21T08:30:23Z
- Modified
- 2026-10-26T09:43:47Z
- Summary
- Fix of 56 CVEs
- Details
-
[ Ubuntu: 4.15.0-246.257 ]
- CVE-url: https://ubuntu.com/security/CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
- CVE-url: https://ubuntu.com/security/CVE-2024-36921
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
- CVE-url: https://ubuntu.com/security/CVE-2023-52621
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
- CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
- CVE-url: https://ubuntu.com/security/CVE-2021-47110
- x86/kvm: Disable kvmclock on all CPUs on shutdown
- CVE-url: https://ubuntu.com/security/CVE-2025-21791
- vrf: use RCU protection in l3mdev_l3_out()
- CVE-url: https://ubuntu.com/security/CVE-2024-57980
- media: uvcvideo: Fix double free in error path
- CVE-url: https://ubuntu.com/security/CVE-2025-21718
- net: rose: fix timer races against user threads
- CVE-url: https://ubuntu.com/security/CVE-2025-21735
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
- CVE-url: https://ubuntu.com/security/CVE-2023-52805
- jfs: fix array-index-out-of-bounds in diAlloc
- CVE-url: https://ubuntu.com/security/CVE-2023-52847
- media: bttv: fix use after free error due to btv->timeout timer
- CVE-url: https://ubuntu.com/security/CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
- CVE-url: https://ubuntu.com/security/CVE-2025-21782
- orangefs: fix a oob in orangefs_debug_write
- CVE-url: https://ubuntu.com/security/CVE-2024-26872
- RDMA/srpt: Do not register event handler until srpt device is fully setup
- CVE-url: https://ubuntu.com/security/CVE-2024-26982
- Squashfs: check the inode number is not the invalid value of zero
- CVE-url: https://ubuntu.com/security/CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
- CVE-url: https://ubuntu.com/security/CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
- CVE-url: https://ubuntu.com/security/CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
- CVE-url: https://ubuntu.com/security/CVE-2024-47696
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
- CVE-url: https://ubuntu.com/security/CVE-2024-50074
- parport: Proper fix for array out-of-bounds access
- CVE-url: https://ubuntu.com/security/CVE-2025-21687
- vfio/platform: check the bounds of read/write syscalls
- CVE-url: https://ubuntu.com/security/CVE-2024-57889
- regmap: allow to disable all locking mechanisms
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
- CVE-url: https://ubuntu.com/security/CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()
- CVE-url: https://ubuntu.com/security/CVE-2024-53680
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
- CVE-url: https://ubuntu.com/security/CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
- CVE-url: https://ubuntu.com/security/CVE-2024-53184
- um: ubd: Do not use drvdata in release
- CVE-url: https://ubuntu.com/security/CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in throttle_direct_reclaim()
- CVE-url: https://ubuntu.com/security/CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
- CVE-url: https://ubuntu.com/security/CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
- CVE-url: https://ubuntu.com/security/CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
- CVE-url: https://ubuntu.com/security/CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
- CVE-url: https://ubuntu.com/security/CVE-2024-52332
- igb: Fix potential invalid memory access in igb_init_module()
- CVE-url: https://ubuntu.com/security/CVE-2024-56570
- ovl: Filter invalid inodes with missing lookup function
- CVE-url: https://ubuntu.com/security/CVE-2024-57912
- iio: pressure: zpa2326: fix information leak in triggered buffer
- CVE-url: https://ubuntu.com/security/CVE-2024-53172
- ubi: fastmap: Fix duplicate slab cache names while attaching
- CVE-url: https://ubuntu.com/security/CVE-2024-57929
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
- CVE-url: https://ubuntu.com/security/CVE-2024-56532
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-53183
- um: net: Do not use drvdata in release
- CVE-url: https://ubuntu.com/security/CVE-2024-56644
- net/ipv6: release expired exception dst cached in socket
- CVE-url: https://ubuntu.com/security/CVE-2024-57948
- mac802154: check local interfaces before deleting sdata list
- CVE-url: https://ubuntu.com/security/CVE-2024-57904
- iio: adc: at91: call input_free_device() on allocated iio_dev
- CVE-url: https://ubuntu.com/security/CVE-2024-56637
- netfilter: ipset: Hold module reference while requesting a module
- CVE-url: https://ubuntu.com/security/CVE-2024-56576
- media: i2c: tc358743: Fix crash in the probe error path when using polling
- CVE-url: https://ubuntu.com/security/CVE-2024-53214
- vfio/pci: Properly hide first-in-list PCIe extended capability
- CVE-url: https://ubuntu.com/security/CVE-2024-56700
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
- CVE-url: https://ubuntu.com/security/CVE-2024-56531
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
- CVE-url: https://ubuntu.com/security/CVE-2024-53194
- PCI: Fix use-after-free of slot->bus on hot remove
- CVE-url: https://ubuntu.com/security/CVE-2024-58055
- usb: gadget: f_tcm: Don't free command immediately
- CVE-url: https://ubuntu.com/security/CVE-2024-56619
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
- CVE-url: https://ubuntu.com/security/CVE-2021-47636
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
- CVE-url: https://ubuntu.com/security/CVE-2024-5317
- nfsd: make sure exp active before svc_export_show
- CVE-url: https://ubuntu.com/security/CVE-2024-53174
- SUNRPC: make sure cache entry active before cache_show
- CVE-url: https://ubuntu.com/security/CVE-2021-47219
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
- CVE-url: https://ubuntu.com/security/CVE-2024-50269
- usb: musb: sunxi: Fix accessing an released usb phy
- CVE-url: https://ubuntu.com/security/CVE-2024-57908
- iio: imu: kmx61: fix information leak in triggered buffer
- CVE-url: https://ubuntu.com/security/CVE-2025-21858
- References
-
- https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1744624441.html
- https://nvd.nist.gov/vuln/detail/CVE-2021-47110
- https://nvd.nist.gov/vuln/detail/CVE-2021-47219
- https://nvd.nist.gov/vuln/detail/CVE-2021-47636
- https://nvd.nist.gov/vuln/detail/CVE-2023-52621
- https://nvd.nist.gov/vuln/detail/CVE-2023-52805
- https://nvd.nist.gov/vuln/detail/CVE-2023-52847
- https://nvd.nist.gov/vuln/detail/CVE-2024-26872
- https://nvd.nist.gov/vuln/detail/CVE-2024-26982
- https://nvd.nist.gov/vuln/detail/CVE-2024-36921
- https://nvd.nist.gov/vuln/detail/CVE-2024-41014
- https://nvd.nist.gov/vuln/detail/CVE-2024-47696
- https://nvd.nist.gov/vuln/detail/CVE-2024-49982
- https://nvd.nist.gov/vuln/detail/CVE-2024-50074
- https://nvd.nist.gov/vuln/detail/CVE-2024-50269
- https://nvd.nist.gov/vuln/detail/CVE-2024-52332
- https://nvd.nist.gov/vuln/detail/CVE-2024-5317
- https://nvd.nist.gov/vuln/detail/CVE-2024-53172
- https://nvd.nist.gov/vuln/detail/CVE-2024-53174
- https://nvd.nist.gov/vuln/detail/CVE-2024-53183
- https://nvd.nist.gov/vuln/detail/CVE-2024-53184
- https://nvd.nist.gov/vuln/detail/CVE-2024-53194
- https://nvd.nist.gov/vuln/detail/CVE-2024-53214
- https://nvd.nist.gov/vuln/detail/CVE-2024-53680
- https://nvd.nist.gov/vuln/detail/CVE-2024-56531
- https://nvd.nist.gov/vuln/detail/CVE-2024-56532
- https://nvd.nist.gov/vuln/detail/CVE-2024-56539
- https://nvd.nist.gov/vuln/detail/CVE-2024-56548
- https://nvd.nist.gov/vuln/detail/CVE-2024-56558
- https://nvd.nist.gov/vuln/detail/CVE-2024-56570
- https://nvd.nist.gov/vuln/detail/CVE-2024-56576
- https://nvd.nist.gov/vuln/detail/CVE-2024-56594
- https://nvd.nist.gov/vuln/detail/CVE-2024-56597
- https://nvd.nist.gov/vuln/detail/CVE-2024-56619
- https://nvd.nist.gov/vuln/detail/CVE-2024-56630
- https://nvd.nist.gov/vuln/detail/CVE-2024-56637
- https://nvd.nist.gov/vuln/detail/CVE-2024-56644
- https://nvd.nist.gov/vuln/detail/CVE-2024-56681
- https://nvd.nist.gov/vuln/detail/CVE-2024-56700
- https://nvd.nist.gov/vuln/detail/CVE-2024-57850
- https://nvd.nist.gov/vuln/detail/CVE-2024-57884
- https://nvd.nist.gov/vuln/detail/CVE-2024-57889
- https://nvd.nist.gov/vuln/detail/CVE-2024-57904
- https://nvd.nist.gov/vuln/detail/CVE-2024-57908
- https://nvd.nist.gov/vuln/detail/CVE-2024-57912
- https://nvd.nist.gov/vuln/detail/CVE-2024-57929
- https://nvd.nist.gov/vuln/detail/CVE-2024-57948
- https://nvd.nist.gov/vuln/detail/CVE-2024-57980
- https://nvd.nist.gov/vuln/detail/CVE-2024-58055
- https://nvd.nist.gov/vuln/detail/CVE-2025-21664
- https://nvd.nist.gov/vuln/detail/CVE-2025-21687
- https://nvd.nist.gov/vuln/detail/CVE-2025-21718
- https://nvd.nist.gov/vuln/detail/CVE-2025-21735
- https://nvd.nist.gov/vuln/detail/CVE-2025-21782
- https://nvd.nist.gov/vuln/detail/CVE-2025-21791
- https://nvd.nist.gov/vuln/detail/CVE-2025-21855
- https://nvd.nist.gov/vuln/detail/CVE-2025-21858
Affected packages
TuxCare:Ubuntu:16.04
linux-buildinfo-4.15.0-246-tuxcare.els44-generic
linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency
Package
- Name
- linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency
- Purl
- pkg:deb/tuxcare/linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency?distro=ubuntu-16.04
linux-cloud-tools-4.15.0-246-tuxcare.els44-generic
linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency
Package
- Name
- linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency
- Purl
- pkg:deb/tuxcare/linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency?distro=ubuntu-16.04
linux-headers-4.15.0-246-tuxcare.els44
linux-headers-4.15.0-246-tuxcare.els44-generic
linux-headers-4.15.0-246-tuxcare.els44-lowlatency
linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44
linux-hwe-tools-4.15.0-246-tuxcare.els44
linux-image-unsigned-4.15.0-246-tuxcare.els44-generic
Package
- Name
- linux-image-unsigned-4.15.0-246-tuxcare.els44-generic
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-246-tuxcare.els44-generic?distro=ubuntu-16.04
linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency?distro=ubuntu-16.04
linux-modules-4.15.0-246-tuxcare.els44-generic
linux-modules-4.15.0-246-tuxcare.els44-lowlatency
linux-modules-extra-4.15.0-246-tuxcare.els44-generic
Package
- Name
- linux-modules-extra-4.15.0-246-tuxcare.els44-generic
- Purl
- pkg:deb/tuxcare/linux-modules-extra-4.15.0-246-tuxcare.els44-generic?distro=ubuntu-16.04