CLSA-2025-1749480611
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1749480611.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1749480611
- Upstream
- Published
- 2025-06-09T14:50:16Z
- Modified
- 2026-05-27T11:35:28.816157767Z
- Summary
- kernel: Fix of 25 CVEs
- Details
-
- rcu-tasks: Fix showrcutaskstracegp_kthread buffer overflow {CVE-2024-38577}
- tcp: fix mptcp DSS corruption due to large pmtu xmit {CVE-2024-50083}
- vsock: Keep the binding until socket destruction {CVE-2025-21756}
- memstick: rtsxusbms: Fix slab-use-after-free in rtsxusbmsdrvremove {CVE-2025-22020}
- drm/i915: Fix potential bit_17 double-free {CVE-2023-52930}
- netfilter: nfttunnel: fix geneveopt type confusion addition {CVE-2025-22056}
- mm: shmem: fix data-race in shmem_getattr() {CVE-2024-46828}
- nvmet-auth: assign dhkey to NULL after kfreesensitive {CVE-2024-50215}
- net: explicitly clear the sk pointer, when pf->create fails {CVE-2024-50186}
- net: wwan: fix global oob in wwanrtnlpolicy {CVE-2024-50128}
- ext4: drop ppath from ext4extreplayupdateex() to avoid double-free {CVE-2024-49983}
- vhost_vdpa: assign irq bypass producer token correctly {CVE-2024-47748}
- wifi: rtw88: always wait for both firmware loading attempts {CVE-2024-47718}
- sched: sch_cake: fix bulk flow accounting logic for host fairness {CVE-2024-46828}
- fscache: delete fscachecookielru_timer when fscache exits to avoid UAF {CVE-2024-46786}
- net: bridge: mcast: wait for previous gc cycles when removing port {CVE-2024-44934}
- vhost/vsock: always initialize seqpacket_allow {CVE-2024-43873}
- ext4: check dot and dotdot of dx_root before making dir indexed {CVE-2024-42305}
- nfsd: make sure exp active before svcexportshow {CVE-2024-56558}
- SUNRPC: make sure cache entry active before cache_show {CVE-2024-53174}
- Bluetooth: MGMT: Fix slab-use-after-free Read in setpoweredsync {CVE-2024-53208}
- wifi: nl80211: fix NL80211ATTRMLOLINKID off-by-one {CVE-2024-56663}
- Bluetooth: fix use-after-free in deviceforeach_child() {CVE-2024-53237}
- hwmon: (ibmpex) Fix possible UAF when ibmpexregisterbmc() fails {CVE-2022-49029}
- tracing: Free buffers when a used dynamic event is removed {CVE-2022-49006}
- net: tun: Fix use-after-free in tun_detach() {CVE-2022-49014}
- References