CLSA-2025-1742319829
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1742319829.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1742319829
- Upstream
- Published
- 2025-03-18T17:43:54Z
- Modified
- 2026-06-04T10:04:02Z
- Summary
- Fix of 27 CVEs
- Details
-
- CVE-url: https://ubuntu.com/security/CVE-2023-52522
- net: fix possible store tearing in neigh_periodic_work()
- CVE-url: https://ubuntu.com/security/CVE-2024-40911
- wifi: cfg80211: Lock wiphy in cfg80211_get_station
- CVE-url: https://ubuntu.com/security/CVE-2024-43863
- drm/vmwgfx: Fix a deadlock in dma buf fence polling
- CVE-url: https://ubuntu.com/security/CVE-2024-44931
- gpio: prevent potential speculation leaks in gpio_device_get_desc()
- CVE-url: https://ubuntu.com/security/CVE-2024-50229
- nilfs2: fix potential deadlock with newly created symlinks
- CVE-url: https://ubuntu.com/security/CVE-2024-50171
- net: systemport: fix potential memory leak in bcm_sysport_xmit()
- CVE-url: https://ubuntu.com/security/CVE-2024-50233
- staging: iio: frequency: ad9832: fix division by zero in ad9832_calc_freqreg()
- CVE-url: https://ubuntu.com/security/CVE-2024-44938
- jfs: Fix shift-out-of-bounds in dbDiscardAG
- CVE-url: https://ubuntu.com/security/CVE-2024-50117
- drm/amd: Guard against bad data for ATIF ACPI method
- CVE-url: https://ubuntu.com/security/CVE-2024-49902
- jfs: check if leafidx greater than num leaves per dmap tree
- CVE-url: https://ubuntu.com/security/CVE-2023-52799
- jfs: fix array-index-out-of-bounds in dbFindLeaf
- CVE-url: https://ubuntu.com/security/CVE-2024-41063
- Bluetooth: fix power_on vs close race
- Bluetooth: hci_core: cancel all works upon hci_unregister_dev()
- CVE-url: https://ubuntu.com/security/CVE-2024-50267
- USB: serial: io_edgeport: fix use after free in debug printk
- CVE-url: https://ubuntu.com/security/CVE-2024-50230
- nilfs2: fix kernel bug due to missing clearing of checked flag
- CVE-url: https://ubuntu.com/security/CVE-2024-50302
- HID: core: zero-initialize the report buffer
- CVE-url: https://ubuntu.com/security/CVE-2024-50180
- fbdev: sisfb: Fix strbuf array overflow
- CVE-url: https://ubuntu.com/security/CVE-2024-50278
- dm cache: fix out-of-bounds access to the dirty bitset when resizing
- dm cache: fix potential out-of-bounds access on the first resume
- CVE-url: https://ubuntu.com/security/CVE-2024-50234
- wifi: iwlegacy: Clear stale interrupts before resuming device
- CVE-url: https://ubuntu.com/security/CVE-2024-50301
- security/keys: fix slab-out-of-bounds in key_task_permission
- CVE-url: https://ubuntu.com/security/CVE-2024-50143
- overflow: Add _must_check attribute to check*() helpers
- compiler.h: drop fallback overflow checkers
- overflow: Allow mixed type arguments
- udf: fix uninit-value use in udf_get_fileshortad
- Bionic update: upstream stable patchset 2020-11-10 (LP: #1903768) // CVE-
url: https://ubuntu.com/security/CVE-2024-50143
- overflow: Include header file with SIZE_MAX declaration
- Bionic update: upstream stable patchset 2020-09-16 (LP: #1895873) // CVE-
url: https://ubuntu.com/security/CVE-2024-50143
- overflow.h: Add allocation size calculation helpers
- Bionic update: upstream stable patchset 2020-05-07 (LP: #1877461) // CVE-
url: https://ubuntu.com/security/CVE-2024-50143
- overflow.h: Add arithmetic shift helper
- CVE-url: https://ubuntu.com/security/CVE-2024-53061
- media: s5p-jpeg: prevent buffer overflows
- CVE-url: https://ubuntu.com/security/CVE-2024-47809
- dlm: fix possible lkb_resource null dereference
- CVE-url: https://ubuntu.com/security/CVE-2024-41020
- filelock: Fix fcntl/close race recovery compat path
- CVE-url: https://ubuntu.com/security/CVE-2024-43892
- memcg: protect concurrent access to mem_cgroup_idr
- CVE-url: https://ubuntu.com/security/CVE-2021-47379
- blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd
- CVE-url: https://ubuntu.com/security/CVE-2024-53239
- ALSA: 6fire: Release resources at card release
- CVE-url: https://ubuntu.com/security/CVE-2024-50051
- spi: mpc52xx: Add cancel_work_sync before module remove
- CVE-url: https://ubuntu.com/security/CVE-2023-52522
- References
Affected packages
TuxCare:Ubuntu:16.04
linux-buildinfo-4.4.0-272-tuxcare.els43-generic
linux-buildinfo-4.4.0-272-tuxcare.els43-lowlatency
linux-cloud-tools-4.4.0-272-tuxcare.els43
linux-cloud-tools-4.4.0-272-tuxcare.els43-generic
linux-cloud-tools-4.4.0-272-tuxcare.els43-lowlatency
linux-cloud-tools-common
linux-cloud-tools-generic
linux-cloud-tools-lowlatency
linux-crashdump
linux-doc
linux-generic
linux-headers-4.4.0-272-tuxcare.els43
linux-headers-4.4.0-272-tuxcare.els43-generic
linux-headers-4.4.0-272-tuxcare.els43-lowlatency
linux-headers-generic
linux-headers-lowlatency
linux-image-generic
linux-image-lowlatency
linux-image-unsigned-4.4.0-272-tuxcare.els43-generic
linux-image-unsigned-4.4.0-272-tuxcare.els43-lowlatency
Package
- Name
- linux-image-unsigned-4.4.0-272-tuxcare.els43-lowlatency
- Purl
- pkg:deb/tuxcare/linux-image-unsigned-4.4.0-272-tuxcare.els43-lowlatency?distro=ubuntu-16.04