CLSA-2025-1757962453
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/centos8.5els/CLSA-2025-1757962453.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1757962453
- Upstream
- Published
- 2025-09-15T18:54:17Z
- Modified
- 2026-05-27T11:33:13Z
- Summary
- kernel: Fix of 32 CVEs
- Details
-
- inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103}
- ALSA: usb-audio: Fix out of bounds reads when finding clock sources {CVE-2024-53150}
- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}
- can: peak_usb: fix use after free bugs {CVE-2021-47670}
- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}
- RDMA/rxe: Fix error unwind in rxe_create_qp() {CVE-2022-50127}
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}
- udp: Fix memory accounting leak. {CVE-2025-22058}
- ALSA: bcd2000: Fix a UAF bug on the error path of probing {CVE-2022-50083}
- ext4: correct the misjudgment in ext4_iget_extra_inode {CVE-2022-50083}
- ext4: correct max_inline_xattr_value_size computing {CVE-2022-50083}
- ext4: fix use-after-free in ext4_xattr_set_entry {CVE-2022-50083}
- ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h {CVE-2022-50083}
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}
- net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-38085}
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}
- padata: fix UAF in padata_reorder {CVE-2025-21727}
- net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}
- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}
- sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}
- sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}
- sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}
- sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}
- sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}
- mptcp: do not queue data on closed subflows {CVE-2022-50070}
- mptcp: export mptcp_subflow_active {CVE-2022-50070}
- net/sched: sch_qfq: Fix race condition on qfq_aggregate {CVE-2025-38477}
- tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}
- scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
- crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}
- ext4: avoid resizing to a partial cluster size {CVE-2022-50020}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}
- net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}
- ice: xsk: prohibit usage of non-balanced queue id {CVE-2022-50003}
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}
- virtio-gpu: fix a missing check to avoid NULL dereference {CVE-2022-50181}
- usb: xhci_plat_remove: avoid NULL dereference {CVE-2022-50133}
- ASoC: SOF: Intel: hda-ipc: Do not process IPC reply before firmware boot {CVE-2022-50015}
- netfilter: nft_tproxy: restrict to prerouting hook {CVE-2022-50001}
- scsi: storvsc: Remove WQ_MEM_RECLAIM from storvsc_error_wq {CVE-2022-49986}
- ath11k: fix netdev open race {CVE-2022-50187}
- References