CLSA-2025-1753083094
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1753083094.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1753083094
- Upstream
- Published
- 2025-07-21T07:31:38Z
- Modified
- 2026-06-04T10:04:16Z
- Summary
- Fix of 10 CVEs
- Details
-
- Focal update: v5.4.292 upstream stable release (LP: #2109357) // CVE-url:
https://ubuntu.com/security/CVE-2025-37937
- objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
- Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url:
https://ubuntu.com/security/CVE-2024-53197
- ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
- Bionic update: upstream stable patchset 2023-01-20 (LP: #2003596) // CVE-
url: https://ubuntu.com/security/CVE-2022-49909
- Bluetooth: L2CAP: fix use-after-free in l2cap_conn_del()
- Bionic update: upstream stable patchset 2022-07-25 (LP: #1982782) // CVE-
url: https://ubuntu.com/security/CVE-2022-49530
- drm/amd/pm: fix double free in si_parse_power_table()
- CVE-url: https://ubuntu.com/security/CVE-2025-39688
- nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
- CVE-url: https://ubuntu.com/security/CVE-2024-50106
- nfsd: simplify nfs4_put_deleg_lease calls
- nfsd: factor out common delegation-destruction code
- nfsd: Fix race to FREE_STATEID and cl_revoked
- nfsd: don't call functions with side-effecting inside WARN_ON()
- nfsd: remove fault injection code
- nfsd: avoid race after unhash_delegation_locked()
- nfsd: split sc_status out of sc_type
- nfsd: fix race between laundromat and free_stateid
- CVE-url: https://ubuntu.com/security/CVE-2024-35937
- wifi: cfg80211: check A-MSDU format more carefully
- CVE-url: https://ubuntu.com/security/CVE-2024-49966
- ocfs2: cancel dqi_sync_work before freeing oinfo
- CVE-url: https://ubuntu.com/security/CVE-2023-52588
- f2fs: fix to tag gcing flag on page during block migration
- CVE-url: https://ubuntu.com/security/CVE-2024-57798
- drm/dp-mst-helper: Remove hotplug callback
- drm/dp_mst: Remove huge conditional in drm_dp_mst_handle_up_req()
- drm/dp_mst: Refactor drm_dp_mst_handle_up_req()
- drm/dp_mst: Rename drm_dp_add_port and drm_dp_update_port
- drm/dp_mst: Handle UP requests asynchronously
- drm/dp_mst: Ensure mst_primary pointer is valid in drm_dp_mst_handle_up_req()
- Miscellaneous Ubuntu changes
- [Config] updateconfigs for NFSD_FAULT_INJECTION
- Focal update: v5.4.292 upstream stable release (LP: #2109357) // CVE-url:
https://ubuntu.com/security/CVE-2025-37937
- References
Affected packages
TuxCare:Ubuntu:16.04
linux-buildinfo-4.4.0-276-tuxcare.els47-generic
linux-buildinfo-4.4.0-276-tuxcare.els47-lowlatency
linux-cloud-tools-4.4.0-276-tuxcare.els47
linux-cloud-tools-4.4.0-276-tuxcare.els47-generic
linux-cloud-tools-4.4.0-276-tuxcare.els47-lowlatency
linux-cloud-tools-common
linux-doc
linux-headers-4.4.0-276-tuxcare.els47
linux-headers-4.4.0-276-tuxcare.els47-generic
linux-headers-4.4.0-276-tuxcare.els47-lowlatency
linux-image-unsigned-4.4.0-276-tuxcare.els47-generic
linux-image-unsigned-4.4.0-276-tuxcare.els47-lowlatency
Package
- Name
- linux-image-unsigned-4.4.0-276-tuxcare.els47-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.4.0-276-tuxcare.els47-lowlatency?distro=ubuntu-16.04