CLSA-2025-1758796886
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.2esu/CLSA-2025-1758796886.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CLSA-2025-1758796886
- Upstream
- Published
- 2025-09-25T10:41:30Z
- Modified
- 2026-05-27T11:34:04.567612955Z
- Summary
- kernel: Fix of 22 CVEs
- Details
-
- drm/amd/amdgpu: introduce gc_*mes2.bin v2
- proc: fix a dentry lock race between release_task and lookup
- scsi: aacraid: Stop using PCIIRQAFFINITY
- scsi: aacraid: Remove useless code
- scsi: aacraid: Remove unused aaccheckhealth()
- scsi: aacraid: struct {user,}sgmap{,64,raw}: Replace 1-element arrays with flexible arrays
- scsi: aacraid: Rearrange order of struct aacsrbunit
- scsi: aacraid: struct aaccissphyslunsresp: Replace 1-element array with flexible array
- scsi: aacraid: union aac_init: Replace 1-element array with flexible array
- scsi: aacraid: aachba: Replace snprintf() with the safer scnprintf() variant
- Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity"
- scsi: aacraid: Avoid -Warray-bounds warning
- scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity
- scsi: aacraid: Replace all non-returning strlcpy with strscpy
- scsi: aacraid: Declare SCSI host template const
- scsi: aacraid: Drop redundant pcienablepcieerrorreporting()
- scsi: aacraid: Allocate cmd_priv with scsicmd
- scsi: aacraid: Remove redundant "the"
- scsi: aacraid: Fix undefined behavior due to shift overflowing the constant
- scsi: aacraid: Clean up some inconsistent indenting
- scsi: aacraid: Move the SCSI pointer to private command data
- scsi: aacraid: Fix spelling of "its"
- scsi: aacraid: Call scsi_done() directly
- scsi: aacraid: Introduce aacscsidone()
- scsi: aacraid: Use scsicmdtorq() instead of scsicmnd.request
- scsi: aacraid: Remove an unused include
- x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler {CVE-2024-25743}
- net: sched: sfb: fix null pointer access issue when sfb_init() fails {CVE-2022-50356}
- ipv6: mcast: Delay put pmc->idev in mlddeldelrec() {CVE-2025-38550}
- scsi: lpfc: Use memcpy() for BIOS version {CVE-2025-38332}
- PM: hibernate: defer device probing when resuming from hibernation {CVE-2022-50202}
- net: fix UaF in netns ops registration error path {CVE-2023-52999}
- net: fix UAF issue in nfqnlnfhookdrop() when opsinit() failed {CVE-2023-52999}
- usb: typec: fix potential array underflow in ucsiccgsync_control() {CVE-2024-53203}
- soundwire: cadence: fix invalid PDI offset {CVE-2024-38635}
- drm/i915/vma: Fix UAF on destroy against retire race {CVE-2024-26939}
- netns: Make getnetns() handle zero refcount net {CVE-2024-40958}
- bonding: Fix out-of-bounds read in bondoptionarpiptargets_set() {CVE-2024-39487}
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal {CVE-2024-36921}
- wifi: ath11k: fix gtk offload status event locking {CVE-2023-52777}
- wifi: mac80211: fix potential key use-after-free {CVE-2023-52530}
- i2c: mlxbf: prevent stack overflow in mlxbfi2csmbusstarttransaction() {CVE-2022-48632}
- net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}
- can: j1939: j1939netdevstart(): fix UAF for rxkref of j1939priv {CVE-2021-47459}
- net: hns3: fix use-after-free bug in hclgevfsendmbx_msg {CVE-2021-47596}
- Squashfs: check the inode number is not the invalid value of zero {CVE-2024-26982}
- crypto: qat - resolve race condition during AER recovery {CVE-2024-26974}
- crypto: qat - fix double free during reset
- media: pvrusb2: fix use after free on context disconnection {CVE-2023-52445}
- fs/smb/client: Reset password pointer to NULL {CVE-2023-5345}
- References