CLSA-2025-1760647898
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu18.04els/CLSA-2025-1760647898.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1760647898
- Upstream
- Published
- 2025-10-16T20:51:42Z
- Modified
- 2026-06-04T10:03:14.824274102Z
- Summary
- Fix of 22 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2022-43945
- NFSD: Protect against send buffer overflow in NFSv3 READ
- Focal update: v5.4.285 upstream stable release (LP: #2089233) //
CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924
- fbdev: pxafb: Fix possible use after free in pxafb_task()
- CVE-url: https://ubuntu.com/security/CVE-2025-38477
- net/sched: schqfq: Fix race condition on qfqaggregate
- net/sched: schqfq: Avoid triggering mightsleep in atomic context in qfqdeleteclass
- CVE-url: https://ubuntu.com/security/CVE-2025-38618
- vsock: Do not allow binding to VMADDRPORTANY
- CVE-url: https://ubuntu.com/security/CVE-2025-38617
- net/packet: fix a race in packetsetring() and packet_notifier()
- CVE-url: https://ubuntu.com/security/CVE-2025-21796
- nfsd: clear aclaccess/acldefault after releasing them
- CVE-url: https://ubuntu.com/security/CVE-2022-48827
- NFSD: Fix the behavior of READ near OFFSET_MAX
- CVE-url: https://ubuntu.com/security/CVE-2021-47391
- RDMA/cma: Ensure rdmaaddrcancel() happens before issuing more requests
- CVE-url: https://ubuntu.com/security/CVE-2024-41069
- ASoC: topology: Fix references to freed memory
- ASoC: topology: Do not assign fields that are already set
- ASoC: topology: Clean up route loading
- CVE-url: https://ubuntu.com/security/CVE-2024-56616
- drm/dp_mst: Fix MST sideband message body length check
- Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url:
https://ubuntu.com/security/CVE-2023-52868
- thermal: core: prevent potential string overflow
- Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url:
https://ubuntu.com/security/CVE-2023-52836
- locking/ww_mutex/test: Fix potential workqueue corruption
- CVE-2024-35965 // CVE-url: https://ubuntu.com/security/CVE-2024-35965
- Bluetooth: L2CAP: uninitialized variables in l2capsocksetsockopt()
- Bluetooth: L2CAP: Fix not validating setsockopt user input
- Focal update: v5.4.188 upstream stable release (LP: #1971496) // CVE-url:
https://ubuntu.com/security/CVE-2022-49292
- ALSA: oss: Fix PCM OSS buffer allocation overflow
- Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url:
https://ubuntu.com/security/CVE-2023-52835
- perf/core: Bail out early if the request AUX area is out of bound
- Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url:
https://ubuntu.com/security/CVE-2023-52764
- media: gspca: cpia1: shift-out-of-bounds in set_flicker
- Focal update: v5.4.261 upstream stable release (LP: #2049049) // CVE-url:
https://ubuntu.com/security/CVE-2023-52864
- platform/x86: wmi: Fix probe failure when failing to register WMI devices
- platform/x86: wmi: remove unnecessary initializations
- platform/x86: wmi: Fix opening of char device
- CVE-2024-35966 // CVE-url: https://ubuntu.com/security/CVE-2024-35966
- Bluetooth: RFCOMM: Fix not validating setsockopt user input
- CVE-2024-35967 // CVE-url: https://ubuntu.com/security/CVE-2024-35966
- Bluetooth: SCO: Fix not validating setsockopt user input
- Focal update: v5.4.291 upstream stable release (LP: #2106002) //
CVE-2025-21704 // CVE-url: https://ubuntu.com/security/CVE-2025-21704
- usb: cdc-acm: Check control transfer buffer size before access
- CVE-url: https://ubuntu.com/security/CVE-2025-38350
- net/sched: Always pass notifications when child class becomes empty
- CVE-url: https://ubuntu.com/security/CVE-2025-37798
- schhtb: make htbqlen_notify() idempotent
- CVE-url: https://ubuntu.com/security/CVE-2022-43945
- References
Affected packages
TuxCare:Ubuntu:18.04
linux-buildinfo-4.15.0-252-tuxcare.els40-generic
linux-buildinfo-4.15.0-252-tuxcare.els40-lowlatency
linux-cloud-tools-4.15.0-252-tuxcare.els40
linux-cloud-tools-4.15.0-252-tuxcare.els40-generic
linux-cloud-tools-4.15.0-252-tuxcare.els40-lowlatency
linux-cloud-tools-common
linux-cloud-tools-generic
linux-cloud-tools-lowlatency
linux-crashdump
linux-doc
linux-generic
linux-headers-4.15.0-252-tuxcare.els40
linux-headers-4.15.0-252-tuxcare.els40-generic
linux-headers-4.15.0-252-tuxcare.els40-lowlatency
linux-headers-generic
linux-headers-lowlatency
linux-image-generic
linux-image-lowlatency
linux-image-unsigned-4.15.0-252-tuxcare.els40-generic
linux-image-unsigned-4.15.0-252-tuxcare.els40-lowlatency
Package
- Name
- linux-image-unsigned-4.15.0-252-tuxcare.els40-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.15.0-252-tuxcare.els40-lowlatency?distro=ubuntu-18.04