{"id":"CLSA-2025-1756482270","summary":"kernel: Fix of CVE-2024-2201","details":"- spec: up spec/misc to 1160.136.1, spectre mitigation is off by default\n- hugetlb, mempolicy: fix the mbind hugetlb migration\n- net: atm: fix use after free in lec_send()\n- net: atlantic: fix aq_vec index out of range error\n- block: initialize flush request via blk_mq_rq_ctx_init()\n- ALSA: usb-audio: Fix a DMA to stack memory bug\n- namei: -\u003ed_inode of a pinned dentry is stable only for positives\n- namei: results of d_is_negative() should be checked after dentry revalidation\n- namei: d_is_negative() should be checked before -\u003ed_seq validation\n- VFS: Combine inode checks with d_is_negative() and d_is_positive() in pathwalk\n- scsi: smartpqi: Fix DMA direction for RAID requests\n- scsi: smartpqi: Fix duplicate device nodes for tape changers\n- VFS: Impose ordering on accesses of d_inode and d_flags\n- neighbour: fix data-races around n-\u003eoutput\n- cipso: make cipso_v4_skbuff_delattr() fully remove the CIPSO options\n- cipso: fix total option length computation\n- proc: Use new_inode not new_inode_pseudo\n- lockd: skip shutdown of rpc clients with outstanding notifications\n- SUNRPC: ECONNRESET might require a rebind\n- SUNRPC: ECONNREFUSED should cause a rebind\n- x86/fpu: Prevent FPU state corruption\n- x86, fpu: Introduce per-cpu in_kernel_fpu state\n- x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI {CVE-2024-2201}\n- x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto {CVE-2024-2201}\n- x86/bugs: Fix BHI handling of RRSBA\n- x86/bugs: Fix BHI documentation {CVE-2024-2201}\n- x86/bugs: Fix return type of spectre_bhi_state() {CVE-2024-2201}\n- x86/bugs: Make CONFIG_SPECTRE_BHI_ON the default {CVE-2024-2201}\n- x86/bhi: Add BHI mitigation knob {CVE-2024-2201}\n- x86/bhi: Enumerate Branch History Injection (BHI) bug {CVE-2024-2201}\n- x86/bhi: Define SPEC_CTRL_BHI_DIS_S {CVE-2024-2201}\n- x86/bhi: Add support for clearing branch history at syscall entry {CVE-2024-2201}\n- Documentation/hw-vuln: Document the interaction between IBRS and STIBP\n- x86/bugs: Add X86_FEATURE_RETPOLINE\n- x86/bugs: Extend VMware Retbleed workaround to Nehalem\n- gfs2: Fix length of holes reported at end-of-file\n- gfs2: Only do glock put in gfs2_create_inode for free inodes\n- gfs2: Fix use-after-free in gfs2_logd after withdraw\n- gfs2: fix use-after-free in trans_drain\n- gfs2: Clean up revokes on normal withdraws\n- GFS2: gfs2_free_extlen can return an extent that is too long\n- gfs2: Wipe jdata and ail1 in gfs2_journal_wipe, formerly gfs2_meta_wipe\n- GFS2: Refactor gfs2_remove_from_journal\n- GFS2: Only set PageChecked for jdata pages\n- gfs2: keep bios separate for each journal\n- gfs2: Remove active journal side effect from gfs2_write_log_header\n- gfs2: clean_journal improperly set sd_log_flush_head\n- partial \"GFS2: Introduce new gfs2_log_header_v2\"\n- gfs2: change from write to read lock for sd_log_flush_lock in journal replay\n- GFS2: Reduce code redundancy writing log headers\n- gfs2: Grab glock reference sooner in gfs2_add_revoke\n- gfs2: fix glock reference problem in gfs2_trans_remove_revoke\n- gfs2: Fix occasional glock use-after-free\n- gfs2: Make sure we don't miss any delayed withdraws\n- gfs2: Fix bad comment for trans_drain\n- gfs2: add some much needed cleanup for log flushes that fail\n- gfs2: fix trans slab error when withdraw occurs inside log_flush\n- gfs2: initialize transaction tr_ailX_lists earlier\n- GFS2: Remove extra \"if\" in gfs2_log_flush()\n- gfs2: fix use-after-free on transaction ail lists\n- gfs2: Trim the ordered write list in gfs2_ordered_write()\n- GFS2: Clean up releasepage\n- gfs2: Only set PageChecked if we have a transaction\n- gfs2: Fix case in which ail writes are done to jdata holes\n- gfs2: simplify gfs2_block_map\n- gfs2: Remove unused gfs2_iomap_alloc argument\n- netfilter: ipset: fix ip_set_list allocation failure\n- gfs2: Be more careful with the quota sync generation\n- gfs2: Get rid of some unnecessary quota locking\n- gfs2: Add some missing quota locking\n- gfs2: Fold qd_fish into gfs2_quota_sync\n- gfs2: quota need_sync cleanup\n- gfs2: Fix and clean up function do_qc\n- gfs2: Revert \"Add quota_change type\"\n- gfs2: Revert \"ignore negated quota changes\"\n- gfs2: qd_check_sync cleanups\n- gfs2: Check quota consistency on mount\n- gfs2: Minor gfs2_quota_init error path cleanup\n- gfs2: fix kernel BUG in gfs2_quota_cleanup\n- gfs2: Clean up quota.c:print_message\n- gfs2: Clean up gfs2_alloc_parms initializers\n- gfs2: Two quota=account mode fixes\n- gfs2: Remove useless assignment\n- gfs2: simplify slot_get\n- gfs2: Simplify qd2offset\n- gfs2: Remove quota allocation info from quota file\n- gfs2: use constant for array size\n- gfs2: Set qd_sync_gen in do_sync\n- gfs2: Remove useless err set\n- gfs2: Small gfs2_quota_lock cleanup\n- gfs2: move qdsb_put and reduce redundancy\n- gfs2: Don't try to sync non-changes\n- gfs2: Simplify function need_sync\n- gfs2: remove unneeded pg_oflow variable\n- gfs2: remove unneeded variable done\n- gfs2: pass sdp to gfs2_write_buf_to_page\n- gfs2: pass sdp in to gfs2_write_disk_quota\n- gfs2: Pass sdp to gfs2_adjust_quota\n- gfs2: remove dead code for quota writes\n- gfs2: Use qd_sbd more consequently\n- gfs2: replace 'found' with dedicated list iterator variable\n- gfs2: Some whitespace cleanups\n- gfs2: Fix gfs2_qa_get imbalance in gfs2_quota_hold\n- tcp: fix zero cwnd in tcp_cwnd_reduction\n- epoll: fix use-after-free in eventpoll_release_file\n- kernel.spec: run initramfs generation in %post (not only in %posttrans)","modified":"2026-05-27T11:18:33.487152277Z","published":"2025-09-18T15:58:45Z","upstream":["CVE-2024-2201"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1756482270.html"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/bpftool?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-debug","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-debug?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-debug-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-debug-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-headers","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-headers?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-tools","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-tools-libs","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"kernel-tools-libs-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/perf?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/python-perf?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.0-1160.136.1.el7.tuxcare.els23"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1756482270.json"}}],"schema_version":"1.7.5"}