CLSA-2025-1763991095
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1763991095.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1763991095
- Upstream
- Published
- 2025-11-24T13:31:39Z
- Modified
- 2026-06-04T10:03:51.672456441Z
- Summary
- Fix of 25 CVEs
- Details
-
- Focal update: v5.4.291 upstream stable release (LP: #2106002) //
CVE-2025-21772
- partitions: mac: fix handling of bogus partition table
- CVE-url: https://ubuntu.com/security/CVE-2025-22079
- ocfs2: validate ltreedepth to avoid out-of-bounds access
- CVE-url: https://ubuntu.com/security/CVE-2024-58014
- wifi: brcmsmac: add gain range check to wlcphyiqcalgainparamsnphy()
- CVE-url: https://ubuntu.com/security/CVE-2024-41042
- netfilter: nftables: prefer nftchain_validate
- CVE-url: https://ubuntu.com/security/CVE-2024-46713
- perf/aux: Fix AUX buffer serialization
- CVE-url: https://ubuntu.com/security/CVE-2025-38352
- posix-cpu-timers: fix race between handleposixcputimers() and posixcputimerdel()
- CVE-url: https://ubuntu.com/security/CVE-2025-38477
- net/sched: schqfq: Fix race condition on qfqaggregate
- Focal update: v5.4.262 upstream stable release (LP: #2049069) // CVE-url:
https://ubuntu.com/security/CVE-2023-52804
- fs/jfs: Add check for negative db_l2nbperpage
- fs/jfs: Add validity check for dbmaxag and dbagpref
- Focal update: v5.4.251 upstream stable release (LP: #2034918) // CVE-url:
https://ubuntu.com/security/CVE-2023-52804
- jfs: jfsdmap: Validate dbl2nbperpage while mounting
- Bionic update: upstream stable patchset 2023-02-06 (LP: #2006403) // CVE-
url: https://ubuntu.com/security/CVE-2023-52804
- fs: jfs: fix shift-out-of-bounds in dbAllocAG
- CVE-url: https://ubuntu.com/security/CVE-2022-25265
- x86/elf: Add table to document READIMPLIESEXEC
- x86/elf: Split READIMPLIESEXEC from executable PTGNUSTACK
- x86/elf: Disable automatic READIMPLIESEXEC on 64-bit
- Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE-
url: https://ubuntu.com/security/CVE-2021-47153
- i2c: i801: Don't generate an interrupt on bus reset
- Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-
url: https://ubuntu.com/security/CVE-2022-48757
- net: fix information leakage in /proc/net/ptype
- Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url:
https://ubuntu.com/security/CVE-2024-37078
- nilfs2: fix potential kernel bug due to lack of writeback flag waiting
- Bionic update: upstream stable patchset 2022-03-04 (LP: #1963717) // CVE-
url: https://ubuntu.com/security/CVE-2022-48760
- USB: core: Fix hang in usbkillurb by adding memory barriers
- Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE-
url: https://ubuntu.com/security/CVE-2021-47383
- tty: Fix out-of-bound vmalloc access in imageblit
- Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-
url: https://ubuntu.com/security/CVE-2022-49145
- ACPI: CPPC: Avoid out of bounds access when parsing _CPC data
- Bionic update: upstream stable patchset 2021-11-23 (LP: #1951997) // CVE-
url: https://ubuntu.com/security/CVE-2021-47458
- ocfs2: mount fails with buffer overflow in strlen
- CVE-url: https://ubuntu.com/security/CVE-2022-49170
- f2fs: fix to do sanity check on curseg->alloc_type
- CVE-url: https://ubuntu.com/security/CVE-2021-47479
- staging: rtl8712: fix use-after-free in rtl8712dlfw
- Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE-
url: https://ubuntu.com/security/CVE-2021-47477
- comedi: dt9812: fix DMA buffers on stack
- Bionic update: upstream stable patchset 2022-05-17 (LP: #1973831) // CVE-
url: https://ubuntu.com/security/CVE-2021-47642
- video: fbdev: nvidiafb: Use strscpy() to prevent buffer overflow
- Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE-
url: https://ubuntu.com/security/CVE-2021-47565
- scsi: mpt3sas: Fix kernel panic during drive powercycle test
- Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE-
url: https://ubuntu.com/security/CVE-2021-47566
- proc/vmcore: fix clearing user buffer by properly using clear_user()
- Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url:
https://ubuntu.com/security/CVE-2024-39469
- nilfs2: fix nilfsemptydir() misjudgment and long loop on I/O errors
- CVE-url: https://ubuntu.com/security/CVE-2022-49519
- ath10k: skip ath10k_halt during suspend for driver state RESTARTING
- CVE-url: https://ubuntu.com/security/CVE-2024-36880
- Bluetooth: qca: add missing firmware sanity checks
- Miscellaneous upstream changes
- net: openvswitch: fix nested key length validation in the set() action
- isofs: Prevent the use of too small fid
- net: ppp: Add bound checking for skb data on pppsynctxmung
- wifi: at76c50x: fix use after free access in at76_disconnect
- Focal update: v5.4.291 upstream stable release (LP: #2106002) //
CVE-2025-21772
- References