{"id":"CLSA-2025-1757699693","summary":"kernel-uek: Fix of 16 CVEs","details":"- Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg {CVE-2024-21803}\n- net: defer final 'struct net' free in netns dismantle {CVE-2024-56658}\n- netfilter: validate user input for expected length {CVE-2024-35896}\n- drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create' {CVE-2024-56608}\n- smb: client: fix UAF in async decryption {CVE-2024-50047}\n- drm/amdgpu: fix usage slab after free {CVE-2024-56551}\n- nvme: avoid double free special payload {CVE-2024-41073}\n- xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}\n- net/sched: act_mirred: don't override retval if we already lost the skb {CVE-2024-26739}\n- ext4: fix timer use-after-free on failed mount {CVE-2024-49960}\n- smb: client: fix potential UAF in cifs_stats_proc_show() {CVE-2024-35867}\n- smb: client: fix potential UAF in cifs_debug_files_proc_show() {CVE-2024-26928}\n- RDMA/mlx5: Fix fortify source warning while accessing Eth segment {CVE-2024-26907}\n- stddef: Introduce DECLARE_FLEX_ARRAY() helper\n- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927}\n- net_sched: sch_sfq: move the limit validation {CVE-2024-57996}\n- net_sched: sch_sfq: use a temporary work area for validating configuration\n- net_sched: sch_sfq: don't allow 1 packet limit {CVE-2024-57996}\n- net_sched: sch_sfq: handle bigger packets\n- net_sched: sch_sfq: annotate data-races around q-\u003eperturb_period\n- squashfs: fix memory leak in squashfs_fill_super\n- netfilter: nf_tables: adjust lockdep assertions handling\n- Revert \"vgacon: Add check for vc_origin address range in vgacon_scroll()\"\n- ASoC: ops: dynamically allocate struct snd_ctl_elem_value\n- KVM: x86: use array_index_nospec with indices that come from guest\n- KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi\n- rds: Fix NULL ptr deref in xas_start\n- mm: make page_mapped_in_vma() hugetlb walk aware\n- mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk\n- net_sched: sch_sfq: move the limit validation {CVE-2025-37752}\n- net_sched: sch_sfq: use a temporary work area for validating configuration\n- net_sched: sch_sfq: don't allow 1 packet limit {CVE-2024-57996}\n- net_sched: sch_sfq: handle bigger packets\n- net_sched: sch_sfq: annotate data-races around q-\u003eperturb_period\n- squashfs: fix memory leak in squashfs_fill_super\n- netfilter: nf_tables: adjust lockdep assertions handling\n- Revert \"vgacon: Add check for vc_origin address range in vgacon_scroll()\"\n- ASoC: ops: dynamically allocate struct snd_ctl_elem_value\n- KVM: x86: use array_index_nospec with indices that come from guest\n- KVM: APIC: add helper func to remove duplicate code in kvm_pv_send_ipi\n- rds: Fix NULL ptr deref in xas_start\n- mm: make page_mapped_in_vma() hugetlb walk aware\n- mm/rmap: Fix handling of hugetlbfs pages in page_vma_mapped_walk","modified":"2026-05-27T11:36:01.375209201Z","published":"2025-09-12T17:54:59Z","upstream":["CVE-2024-21803","CVE-2024-26739","CVE-2024-26907","CVE-2024-26928","CVE-2024-35867","CVE-2024-35896","CVE-2024-41014","CVE-2024-41073","CVE-2024-49960","CVE-2024-50047","CVE-2024-56551","CVE-2024-56608","CVE-2024-56658","CVE-2024-57996","CVE-2025-21927","CVE-2025-37752"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1757699693.html"}],"affected":[{"package":{"name":"bpftool","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-container","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-container?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-container-debug","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-container-debug?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-debug","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-debug?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-debug-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-debug-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-devel","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-devel?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-headers","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-headers?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"kernel-uek-tools","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/kernel-uek-tools?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}},{"package":{"name":"python-perf","ecosystem":"TuxCare:OracleLinux:7","purl":"pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.17-2136.338.4.2.el7uek.tuxcare.els3"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1757699693.json"}}],"schema_version":"1.7.5"}