CLSA-2025-1758009836

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2025-1758009836
Upstream
Published
2025-09-16T08:04:00Z
Modified
2026-06-04T10:03:22.591625424Z
Summary
Fix of 28 CVEs
Details
  • Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE- url: https://ubuntu.com/security/CVE-2021-34981
    • Bluetooth: cmtp: fix file refcount when cmtpattachdevice fails
  • CVE-url: https://ubuntu.com/security/CVE-2025-37797
    • net_sched: hfsc: Fix a UAF vulnerability in class handling
  • CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url: https://ubuntu.com/security/CVE-2025-37752
    • netsched: schsfq: move the limit validation
  • Focal update: v5.4.285 upstream stable release (LP: #2089233) // CVE-2024-50202 // CVE-url: https://ubuntu.com/security/CVE-2024-50202
    • nilfs2: propagate directory read errors from nilfsfindentry()
  • Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url: https://ubuntu.com/security/CVE-2024-50202
    • nilfs2: Remove check for PageError
    • nilfs2: return the mapped address from nilfsgetpage()
  • CVE-url: https://ubuntu.com/security/CVE-2024-50202
    • make ext2getpage() and friends work without external serialization
  • Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE- url: https://ubuntu.com/security/CVE-2021-47345
    • RDMA/cma: Fix rdmaresolveroute() memory leak
  • Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53131
    • nilfs2: fix null-ptr-deref in blocktouchbuffer tracepoint
  • Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url: https://ubuntu.com/security/CVE-2024-53130
    • nilfs2: fix null-ptr-deref in blockdirtybuffer tracepoint
  • CVE-url: https://ubuntu.com/security/CVE-2025-37798
    • codel: remove sch->q.qlen check before qdisctreereduce_backlog()
  • CVE-url: https://ubuntu.com/security/CVE-2025-21640
    • sctp: sysctl: cookiehmacalg: avoid using current->nsproxy
  • CVE-url: https://ubuntu.com/security/CVE-2024-57913
    • usb: gadget: ffs: Remove WARNON in functionfs_bind
  • CVE-url: https://ubuntu.com/security/CVE-2025-21638
    • sctp: sysctl: auth_enable: avoid using current->nsproxy
  • CVE-url: https://ubuntu.com/security/CVE-2024-50195
    • posix-clock: Fix missing timespec64 check in pcclocksettime()
  • CVE-url: https://ubuntu.com/security/CVE-2024-50299
    • sctp: properly validate chunk size in sctpsfootb()
  • CVE-url: https://ubuntu.com/security/CVE-2024-41016
    • ocfs2: strict bound check before memcmp in ocfs2xattrfind_entry()
  • CVE-url: https://ubuntu.com/security/CVE-2024-50287
    • media: v4l2-tpg: prevent the risk of a division by zero
  • CVE-url: https://ubuntu.com/security/CVE-2024-49965
    • ocfs2: remove unreasonable unlock in ocfs2readblocks
  • CVE-url: https://ubuntu.com/security/CVE-2024-50179
    • ceph: remove the incorrect Fw reference check when dirtying pages
  • CVE-url: https://ubuntu.com/security/CVE-2024-40953
    • KVM: Fix a data race on lastboostedvcpu in kvmvcpuon_spin()
  • CVE-url: https://ubuntu.com/security/CVE-2024-50290
    • media: cx24116: prevent overflows on SNR calculus
  • CVE-url: https://ubuntu.com/security/CVE-2024-49877
    • ocfs2: fix possible null-ptr-deref in ocfs2setbuffer_uptodate
  • CVE-url: https://ubuntu.com/security/CVE-2024-50008
    • wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiexcmd80211scan_ext()
  • CVE-url: https://ubuntu.com/security/CVE-2024-49959
    • jbd2: stop waiting for space when jbd2cleanupjournal_tail() returns error
  • CVE-url: https://ubuntu.com/security/CVE-2024-49963
    • mailbox: bcm2835: Fix timeout during suspend mode
  • CVE-url: https://ubuntu.com/security/CVE-2024-47709
    • can: bcm: Clear bo->bcmprocread after removeprocentry().
  • CVE-url: https://ubuntu.com/security/CVE-2025-21699
    • gfs2: Truncate address space when flipping GFS2DIFJDATA flag
  • CVE-url: https://ubuntu.com/security/CVE-2025-21689
    • USB: serial: quatech2: fix null-ptr-deref in qt2processread_urb()
  • CVE-url: https://ubuntu.com/security/CVE-2024-53101
    • fs: Fix uninitialized value issue in fromkuid and fromkgid
References

Affected packages

TuxCare:Ubuntu:16.04
linux-buildinfo-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-buildinfo-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-buildinfo-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-cloud-tools-4.4.0-278-tuxcare.els49

Package

Name
linux-cloud-tools-4.4.0-278-tuxcare.els49
Purl
pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-cloud-tools-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-cloud-tools-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-cloud-tools-common

Package

Name
linux-cloud-tools-common
Purl
pkg:deb/tuxcare/linux-cloud-tools-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-doc

Package

Name
linux-doc
Purl
pkg:deb/tuxcare/linux-doc?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-headers-4.4.0-278-tuxcare.els49

Package

Name
linux-headers-4.4.0-278-tuxcare.els49
Purl
pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-headers-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-headers-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-headers-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-headers-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-image-unsigned-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-image-unsigned-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-image-unsigned-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-libc-dev

Package

Name
linux-libc-dev
Purl
pkg:deb/tuxcare/linux-libc-dev?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-modules-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-modules-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-modules-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-modules-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-modules-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-modules-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-modules-extra-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-modules-extra-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-modules-extra-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-source-4.4.0

Package

Name
linux-source-4.4.0
Purl
pkg:deb/tuxcare/linux-source-4.4.0?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-tools-4.4.0-278-tuxcare.els49

Package

Name
linux-tools-4.4.0-278-tuxcare.els49
Purl
pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-tools-4.4.0-278-tuxcare.els49-generic

Package

Name
linux-tools-4.4.0-278-tuxcare.els49-generic
Purl
pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-tools-4.4.0-278-tuxcare.els49-lowlatency

Package

Name
linux-tools-4.4.0-278-tuxcare.els49-lowlatency
Purl
pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-tools-common

Package

Name
linux-tools-common
Purl
pkg:deb/tuxcare/linux-tools-common?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"
linux-tools-host

Package

Name
linux-tools-host
Purl
pkg:deb/tuxcare/linux-tools-host?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.0-278.312

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"