CLSA-2025-1766488019
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2025-1766488019.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2025-1766488019
- Upstream
- Published
- 2025-12-23T11:07:03Z
- Modified
- 2026-06-01T00:32:37.357213965Z
- Summary
- kernel: Fix of 63 CVEs
- Details
-
- scsi: target: iscsi: Fix timeout on deleted connection {CVE-2025-38075}
- tls: wait for pending async decryptions if tlsstrpmsg_hold fails {CVE-2025-40176}
- cloneprivatemnt(): make sure that caller has CAPSYSADMIN in the right userns {CVE-2025-38499}
- rcu: Fix rcureadunlock() deadloop due to IRQ work {CVE-2025-39744}
- pagepool: Fix use-after-free in pagepoolrecyclein_ring {CVE-2025-38129}
- rcu/nocb: Fix possible invalid rdp's->nocbcbkthread pointer access {CVE-2025-38704}
- bpf: Fix UAF via mismatching bpf_prog/attachment RCU flavors {CVE-2024-56675}
- padata: Fix pd UAF once and for all {CVE-2025-38584}
- padata: do not leak refcount in reorder_work {CVE-2025-38031}
- Bluetooth: MGMT: Fix possible UAFs {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock {CVE-2025-38117}
- Bluetooth: MGMT: Remove unused mgmtpendingfind_data
- Bluetooth: MGMT: set_mesh: update LE scan interval and window
- Bluetooth: hcisync: fix setlocal_name race condition {CVE-2025-39797}
- xfrm: Duplicate SPI Handling {CVE-2025-39797}
- kernfs: Fix UAF in polling when open file is released {CVE-2025-39881}
- OPP: add index check to assert to avoid buffer overflow in readfreq() {CVE-2024-57998}
- block: fix uaf for flush rq while iterating tags {CVE-2024-58072} {CVE-2024-53170}
- wifi: rtlwifi: remove unused checkbuddypriv {CVE-2024-58072}
- wifi: brcmsmac: add gain range check to wlcphyiqcalgainparamsnphy() {CVE-2024-58014}
- block, bfq: fix wakerbfqq UAF after bfqsplit_bfqq() {CVE-2025-21631}
- net: afcan: do not leave a dangling sk pointer in cancreate() {CVE-2024-40954}
- Squashfs: sanity check symbolic link size {CVE-2024-46744}
- e1000e: fix heap overflow in e1000seteeprom {CVE-2025-39898}
- wifi: cfg80211: fix use-after-free in cmp_bss() {CVE-2025-39864}
- nfsd: handle getclientlocked() failure in nfsd4setclientidconfirm() {CVE-2025-38724}
- i40e: fix idx validation in config queues msg {CVE-2025-39971}
- NFS: Fix a race when updating an existing write {CVE-2025-39697}
- tcp: Clear tcpsk(sk)->fastopenrsk in tcp_disconnect(). {CVE-2025-39955}
- wifi: mt76: fix linked list corruption {CVE-2025-39918}
- iouring/waitid: always prune wait queue entry in iowaitid_wait() {CVE-2025-40047}
- Bluetooth: hcievent: Fix UAF in hciaclcreateconn_sync {CVE-2025-39982}
- workqueue: Put the pwq after detaching the rescuer from the pool {CVE-2025-21786}
- zram: fix potential UAF of zram table {CVE-2025-21671}
- sched: sch_cake: add bounds checks to host bulk flow fairness counts {CVE-2025-21647}
- wifi: mt76: mt7925: fix off by one in mt7925loadclc() {CVE-2024-57990}
- blk-cgroup: Fix UAF in blkcgunpinonline() {CVE-2024-56672}
- NFS: Fix potential buffer overflowin nfssysfslinkrpcclient() {CVE-2024-54456}
- nfsd: release svcexpkey/svcexport with rcu_work {CVE-2024-53216}
- igb: Fix potential invalid memory access in igbinitmodule() {CVE-2024-52332}
- x86/tdx: Fix "in-kernel MMIO" check {CVE-2024-47727}
- drm/amd/display: Check dce_hwseq before dereferencing it {CVE-2025-38361}
- dm-bufio: don't schedule in atomic context {CVE-2025-37928}
- usb: xhci: Fix isochronous Ring Underrun/Overrun event handling {CVE-2025-37882}
- KVM: arm64: Tear down vGIC on failed vCPU creation {CVE-2025-37849}
- usb: xhci: Apply the link chain quirk on NEC isoc endpoints {CVE-2025-22022}
- drm/amd/display: Fix out-of-bound accesses {CVE-2025-21985}
- usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704}
- pfifotailenqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702}
- partitions: mac: fix handling of bogus partition table {CVE-2025-21772}
- ipmr: do not call mrmfcuses_dev() for unres entries {CVE-2025-21719}
- net: openvswitch: fix nested key length validation in the set() action {CVE-2025-37789}
- isofs: Prevent the use of too small fid {CVE-2025-37780}
- sctp: detect and prevent references to a freed transport in sendmsg {CVE-2025-23142}
- iommu/amd: Fix potential buffer overflow in parseivrsacpihid {CVE-2025-37927}
- tracing: Fix oob write in traceseqto_buffer() {CVE-2025-37923}
- KVM: x86: Reset IRTE to host control if new route isn't postable {CVE-2025-37885}
- jbd2: remove wrong sb->s_sequence check {CVE-2025-37839}
- irqchip/gic-v2m: Prevent use after free of gicv2mgetfwnode() {CVE-2025-37819}
- drm/amd/display: Fix slab-use-after-free on hdcp_work {CVE-2025-21968}
- netfilter: nfttunnel: fix geneveopt type confusion addition {CVE-2025-22056}
- io_uring: prevent opcode speculation {CVE-2025-21863}
- geneve: Fix use-after-free in genevefinddev(). {CVE-2025-21858}
- vrf: use RCU protection in l3mdevl3out() {CVE-2025-21791}
- drm/amdgpu: avoid buffer overflow attach in smusyssetpptable() {CVE-2025-21780}
- net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692}
- References