CLSA-2025-1756482270

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2025-1756482270
Upstream
Published
2025-09-18T15:58:45Z
Modified
2026-06-01T00:33:27.536382410Z
Summary
kernel: Fix of CVE-2024-2201
Details
  • spec: up spec/misc to 1160.136.1, spectre mitigation is off by default
  • hugetlb, mempolicy: fix the mbind hugetlb migration
  • net: atm: fix use after free in lec_send()
  • net: atlantic: fix aq_vec index out of range error
  • block: initialize flush request via blkmqrqctxinit()
  • ALSA: usb-audio: Fix a DMA to stack memory bug
  • namei: ->d_inode of a pinned dentry is stable only for positives
  • namei: results of disnegative() should be checked after dentry revalidation
  • namei: disnegative() should be checked before ->d_seq validation
  • VFS: Combine inode checks with disnegative() and dispositive() in pathwalk
  • scsi: smartpqi: Fix DMA direction for RAID requests
  • scsi: smartpqi: Fix duplicate device nodes for tape changers
  • VFS: Impose ordering on accesses of dinode and dflags
  • neighbour: fix data-races around n->output
  • cipso: make cipsov4skbuff_delattr() fully remove the CIPSO options
  • cipso: fix total option length computation
  • proc: Use newinode not newinode_pseudo
  • lockd: skip shutdown of rpc clients with outstanding notifications
  • SUNRPC: ECONNRESET might require a rebind
  • SUNRPC: ECONNREFUSED should cause a rebind
  • x86/fpu: Prevent FPU state corruption
  • x86, fpu: Introduce per-cpu inkernelfpu state
  • x86/bugs: Replace CONFIGSPECTREBHI_{ON,OFF} with CONFIGMITIGATIONSPECTRE_BHI {CVE-2024-2201}
  • x86/bugs: Remove CONFIGBHIMITIGATIONAUTO and spectrebhi=auto {CVE-2024-2201}
  • x86/bugs: Fix BHI handling of RRSBA
  • x86/bugs: Fix BHI documentation {CVE-2024-2201}
  • x86/bugs: Fix return type of spectrebhistate() {CVE-2024-2201}
  • x86/bugs: Make CONFIGSPECTREBHI_ON the default {CVE-2024-2201}
  • x86/bhi: Add BHI mitigation knob {CVE-2024-2201}
  • x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201}
  • x86/bhi: Define SPECCTRLBHIDISS {CVE-2024-2201}
  • x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201}
  • Documentation/hw-vuln: Document the interaction between IBRS and STIBP
  • x86/bugs: Add X86FEATURERETPOLINE
  • x86/bugs: Extend VMware Retbleed workaround to Nehalem
  • gfs2: Fix length of holes reported at end-of-file
  • gfs2: Only do glock put in gfs2createinode for free inodes
  • gfs2: Fix use-after-free in gfs2_logd after withdraw
  • gfs2: fix use-after-free in trans_drain
  • gfs2: Clean up revokes on normal withdraws
  • GFS2: gfs2freeextlen can return an extent that is too long
  • gfs2: Wipe jdata and ail1 in gfs2journalwipe, formerly gfs2metawipe
  • GFS2: Refactor gfs2removefrom_journal
  • GFS2: Only set PageChecked for jdata pages
  • gfs2: keep bios separate for each journal
  • gfs2: Remove active journal side effect from gfs2writelog_header
  • gfs2: cleanjournal improperly set sdlogflushhead
  • partial "GFS2: Introduce new gfs2logheader_v2"
  • gfs2: change from write to read lock for sdlogflush_lock in journal replay
  • GFS2: Reduce code redundancy writing log headers
  • gfs2: Grab glock reference sooner in gfs2addrevoke
  • gfs2: fix glock reference problem in gfs2transremove_revoke
  • gfs2: Fix occasional glock use-after-free
  • gfs2: Make sure we don't miss any delayed withdraws
  • gfs2: Fix bad comment for trans_drain
  • gfs2: add some much needed cleanup for log flushes that fail
  • gfs2: fix trans slab error when withdraw occurs inside log_flush
  • gfs2: initialize transaction trailXlists earlier
  • GFS2: Remove extra "if" in gfs2logflush()
  • gfs2: fix use-after-free on transaction ail lists
  • gfs2: Trim the ordered write list in gfs2orderedwrite()
  • GFS2: Clean up releasepage
  • gfs2: Only set PageChecked if we have a transaction
  • gfs2: Fix case in which ail writes are done to jdata holes
  • gfs2: simplify gfs2blockmap
  • gfs2: Remove unused gfs2iomapalloc argument
  • netfilter: ipset: fix ipsetlist allocation failure
  • gfs2: Be more careful with the quota sync generation
  • gfs2: Get rid of some unnecessary quota locking
  • gfs2: Add some missing quota locking
  • gfs2: Fold qdfish into gfs2quota_sync
  • gfs2: quota need_sync cleanup
  • gfs2: Fix and clean up function do_qc
  • gfs2: Revert "Add quota_change type"
  • gfs2: Revert "ignore negated quota changes"
  • gfs2: qdchecksync cleanups
  • gfs2: Check quota consistency on mount
  • gfs2: Minor gfs2quotainit error path cleanup
  • gfs2: fix kernel BUG in gfs2quotacleanup
  • gfs2: Clean up quota.c:print_message
  • gfs2: Clean up gfs2allocparms initializers
  • gfs2: Two quota=account mode fixes
  • gfs2: Remove useless assignment
  • gfs2: simplify slot_get
  • gfs2: Simplify qd2offset
  • gfs2: Remove quota allocation info from quota file
  • gfs2: use constant for array size
  • gfs2: Set qdsyncgen in do_sync
  • gfs2: Remove useless err set
  • gfs2: Small gfs2quotalock cleanup
  • gfs2: move qdsb_put and reduce redundancy
  • gfs2: Don't try to sync non-changes
  • gfs2: Simplify function need_sync
  • gfs2: remove unneeded pg_oflow variable
  • gfs2: remove unneeded variable done
  • gfs2: pass sdp to gfs2writebuftopage
  • gfs2: pass sdp in to gfs2writedisk_quota
  • gfs2: Pass sdp to gfs2adjustquota
  • gfs2: remove dead code for quota writes
  • gfs2: Use qd_sbd more consequently
  • gfs2: replace 'found' with dedicated list iterator variable
  • gfs2: Some whitespace cleanups
  • gfs2: Fix gfs2qaget imbalance in gfs2quotahold
  • tcp: fix zero cwnd in tcpcwndreduction
  • epoll: fix use-after-free in eventpollreleasefile
  • kernel.spec: run initramfs generation in %post (not only in %posttrans)
References

Affected packages

TuxCare:RHEL:7
bpftool

Package

Name
bpftool
Purl
pkg:rpm/tuxcare/bpftool?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel

Package

Name
kernel
Purl
pkg:rpm/tuxcare/kernel?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-debug

Package

Name
kernel-debug
Purl
pkg:rpm/tuxcare/kernel-debug?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-debug-devel

Package

Name
kernel-debug-devel
Purl
pkg:rpm/tuxcare/kernel-debug-devel?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-devel

Package

Name
kernel-devel
Purl
pkg:rpm/tuxcare/kernel-devel?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-headers

Package

Name
kernel-headers
Purl
pkg:rpm/tuxcare/kernel-headers?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-tools

Package

Name
kernel-tools
Purl
pkg:rpm/tuxcare/kernel-tools?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-tools-libs

Package

Name
kernel-tools-libs
Purl
pkg:rpm/tuxcare/kernel-tools-libs?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
kernel-tools-libs-devel

Package

Name
kernel-tools-libs-devel
Purl
pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
perf

Package

Name
perf
Purl
pkg:rpm/tuxcare/perf?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"
python-perf

Package

Name
python-perf
Purl
pkg:rpm/tuxcare/python-perf?distro=rhel-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.10.0-1160.136.1.el7.tuxcare.els23

Database specific

source
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"