CLSA-2025-1765463110
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1765463110.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1765463110
- Upstream
- Published
- 2025-12-11T14:25:14Z
- Modified
- 2026-06-01T00:31:29.541553519Z
- Summary
- kernel: Fix of 51 CVEs
- Details
-
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
- padata: Fix pd UAF once and for all {CVE-2025-38584}
- wifi: cfg80211: Fix use after free for wext {CVE-2023-53153}
- padata: Fix list iterator in padatadoserial()
- padata: do not leak refcount in reorder_work {CVE-2025-38031}
- padata: avoid UAF for reorder_work {CVE-2025-21726}
- padata: add pd get/put refcnt helper
- net/smc: fix UAF on smcsk after smclistenout() {CVE-2025-38734}
- scsi: mpi3mr: Bad drive in topology results kernel crash {CVE-2023-53037}
- scsi: mpi3mr: Driver unload crashes host when enhanced logging is enabled
- wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmfcpreinit_dcmds() {CVE-2022-50258}
- igb: Fix igb_down hung on surprise removal {CVE-2023-53148}
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds access {CVE-2023-53112}
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
- dm-bufio: don't schedule in atomic context {CVE-2025-37928}
- fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117}
- vhost-scsi: Fix handling of multiple calls to vhostscsiset_endpoint {CVE-2025-22083}
- iommu/amd: Fix potential buffer overflow in parseivrsacpihid {CVE-2025-37927}
- tracing: Fix oob write in traceseqto_buffer() {CVE-2025-37923}
- KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
- KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
- KVM: Reject attempts to consume or refresh inactive gfntopfn_cache {CVE-2022-49882}
- jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
- power: supply: gpio-charger: Fix set charge current limits {CVE-2024-57792}
- ASoC: dapm: Fix UAF for sndsocpcm_runtime object {CVE-2024-46798}
- ipv6: prevent possible UAF in ip6_xmit() {CVE-2024-44985}
- ipv6: fix possible UAF in ip6finishoutput2() {CVE-2024-44986}
- netfilter: flowtable: validate vlan header {CVE-2024-44983}
- usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd() {CVE-2024-50268}
- usb: vhci-hcd: Do not drop references before new references are gained {CVE-2024-43883}
- drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968}
- drm/amd/display: Check numvalidsets before accessing readerwmsets[] {CVE-2024-46815}
- drm/amd/display: Check index msg_id before read or write {CVE-2024-42121}
- drm/amd/display: Check pipe offset before setting vblank {CVE-2024-42120}
- drm/amdkfd: don't allow mapping the MMIO HDP page with large pages {CVE-2024-41011}
- drm/amdkfd: Fix an illegal memory access {CVE-2023-53090}
- drm/shmem-helper: Remove another errant put in error path {CVE-2023-53084}
- drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes {CVE-2023-53077}
- drm/i915: mark requests for GuC virtual engines to avoid use-after-free {CVE-2023-53552}
- ptp: fix integer overflow in maxvclocksstore {CVE-2024-40994}
- nvmet: avoid potential UAF in nvmetreqcomplete() {CVE-2023-53116}
- loop: Fix use-after-free issues {CVE-2023-53111}
- ftrace: Fix invalid address access in lookup_rec() when index is 0 {CVE-2023-53075}
- mptcp: use the workqueue to destroy unaccepted sockets {CVE-2023-53072}
- perf/core: Fix perfoutputbegin parameter is incorrectly invoked in perfeventbpf_output {CVE-2023-53065}
- erspan: do not use skbmacheader() in ndostartxmit() {CVE-2023-53053}
- HID: intel-ish-hid: ipc: Fix potential use-after-free in work function {CVE-2023-53039}
- netlink: prevent potential spectre v1 gadgets {CVE-2023-53000}
- coresight: Clear the connection field properly {CVE-2022-50214}
- Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition {CVE-2023-53145}
- Bluetooth: hcievent: Fix UAF in hciaclcreateconn_sync {CVE-2025-39982}
- x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
- arm64: sme: Use STR P to clear FFR context field in streaming SVE mode {CVE-2023-53713}
- wifi: mt76: mt7921: fix error code of return in mt7921acpiread {CVE-2023-53710}
- References