CLSA-2025-1742806909
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1742806909.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1742806909
- Upstream
- Published
- 2025-03-24T09:01:54Z
- Modified
- 2026-05-27T11:35:14.982193145Z
- Summary
- kernel: Fix of 37 CVEs
- Details
-
- HID: core: zero-initialize the report buffer {CVE-2024-50302}
- net: defer final 'struct net' free in netns dismantle {CVE-2024-56658}
- bus: mhi: host: Add alignment check for event ring read pointer {CVE-2023-52494}
- net: sched: fix ets qdisc OOB Indexing {CVE-2025-21692}
- parport: Proper fix for array out-of-bounds access {CVE-2024-50074}
- udf: fix uninit-value use in udfgetfileshortad {CVE-2024-50143}
- security/keys: fix slab-out-of-bounds in keytaskpermission {CVE-2024-50301}
- usb: typec: altmode should keep reference to parent {CVE-2024-50150}
- dm cache: fix potential out-of-bounds access on the first resume {CVE-2024-50278}
- dm cache: optimize dirty bit checking with findnextbit when resizing {CVE-2024-50278}
- dm cache: fix out-of-bounds access to the dirty bitset when resizing {CVE-2024-50279}
- spi: nxp-fspi: fix the KASAN report out-of-bounds bug {CVE-2024-46853}
- smb: client: fix OOBs when building SMB2_IOCTL request {CVE-2024-50151}
- net: sched: fix use-after-free in taprio_change() {CVE-2024-50127}
- USB: serial: io_edgeport: fix use after free in debug printk {CVE-2024-50267}
- wifi: iwlwifi: mvm: Fix response handling in iwlmvmsendrecoverycmd() {CVE-2024-53059}
- wifi: iwlwifi: mvm: disconnect station vifs if recovery failed {CVE-2024-53059}
- tracing: Consider the NULL character when validating the event length {CVE-2024-50131}
- crypto: scomp - fix req->dst buffer overflow {CVE-2023-52612}
- NFSD: fix hang in nfsd4shutdowncallback {CVE-2025-21795}
- NFSD: add courteous server support for thread with only delegation {CVE-2025-21795}
- mptcp: refactor passive socket initialization {CVE-2024-26782}
- mptcp: implement delayed seq generation for passive fastopen {CVE-2024-26782}
- smb: client: fix potential UAF in smb2isvalidleasebreak() {CVE-2024-35864}
- smb: client: fix potential UAF in cifsdumpfull_key() {CVE-2024-35866}
- cifs: fix session state check in reconnect to avoid use-after-free issue {CVE-2024-35866}
- smb: client: fix potential UAF in smb2isnetworknamedeleted() {CVE-2024-35862}
- smb: client: fix potential UAF in isvalidoplock_break() {CVE-2024-35863}
- smb: client: fix potential UAF in cifsstatsproc_show() {CVE-2024-35867}
- bpf: Protect against int overflow for stack access size {CVE-2024-35905}
- bpf: Fix verification of indirect var-off stack access {CVE-2024-35905}
- devlink: fix possible use-after-free and memory leaks in devlink_init() {CVE-2024-26734}
- leds: trigger: Unregister sysfs attributes before calling deactivate() {CVE-2024-43830}
- ionic: fix use after netifnapidel() {CVE-2024-39502}
- ionic: clean interrupt before enabling queue to avoid credit race {CVE-2024-39502}
- net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink {CVE-2024-44970}
- vtioctl: fix arrayindexnospec in vtsetactivate {CVE-2022-48804}
- hwmon: (coretemp) fix pci device refcount leak in nv1aramnew() {CVE-2022-49011}
- raid1: fix use-after-free for original bio in raid1writerequest() {CVE-2024-35979}
- md/raid1: free the r1bio before waiting for blocked rdev {CVE-2024-35979}
- drm/amdgpu: fix usage slab after free {CVE-2024-56551}
- drm/amd: Use
amdgpu_ucode_*helpers for GPU info bin {CVE-2024-56551} - drm/amd: Add a new helper for loading/validating microcode {CVE-2024-56551}
- drm/amd: check num of link levels when update pcie param {CVE-2023-52812}
- drm/amd: Update
update_pcie_parametersfunctions to use uint8_t arguments {CVE-2023-52812} - drm/amd: Disable PPPCIEDPM_MASK when dynamic speed switching not supported {CVE-2023-52812}
- drm/amd: Fix logic error in siennacichlidupdatepcieparameters() {CVE-2023-52812}
- drm/amd: Use amdgpudevicepciedynamicswitching_supported() for SMU7 {CVE-2023-52812}
- drm/amd: Align SMU11 SMUMSGOverridePcieParameters implementation with SMU13 {CVE-2023-52812}
- drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs {CVE-2023-52812}
- drm/amd: Move helper for dynamic speed switch check out of smu13 {CVE-2023-52812}
- drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 {CVE-2023-52812}
- drm/amd/pm: share the code around SMU13 pcie parameters update {CVE-2023-52812}
- drm: zynqmp_kms: Unplug DRM device before removal {CVE-2024-56538}
- padata: Fix refcnt handling in padatafreeshell() {CVE-2023-52854}
- padata: Convert from atomict to refcountt on parallel_data->refcnt {CVE-2023-52854}
- drm/dpmst: Ensure mstprimary pointer is valid in drmdpmsthandleup_req() {CVE-2024-57798}
- drm/dp_mst: Skip CSN if topology probing is not done yet {CVE-2024-57798}
- References