{"id":"CLSA-2025-1758009836","summary":"Fix of 28 CVEs","details":"   * Bionic update: upstream stable patchset 2021-06-11 (LP: #1931740) // CVE-\n     url: https://ubuntu.com/security/CVE-2021-34981\n     - Bluetooth: cmtp: fix file refcount when cmtp_attach_device fails\n   * CVE-url: https://ubuntu.com/security/CVE-2025-37797\n     - net_sched: hfsc: Fix a UAF vulnerability in class handling\n   * CVE-url: https://ubuntu.com/security/CVE-2024-57996 // CVE-url:\n     https://ubuntu.com/security/CVE-2025-37752\n     - net_sched: sch_sfq: move the limit validation\n   * Focal update: v5.4.285 upstream stable release (LP: #2089233) //\n     CVE-2024-50202 // CVE-url: https://ubuntu.com/security/CVE-2024-50202\n     - nilfs2: propagate directory read errors from nilfs_find_entry()\n   * Focal update: v5.4.279 upstream stable release (LP: #2073621) // CVE-url:\n     https://ubuntu.com/security/CVE-2024-50202\n     - nilfs2: Remove check for PageError\n     - nilfs2: return the mapped address from nilfs_get_page()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50202\n     - make ext2_get_page() and friends work without external serialization\n   * Bionic update: upstream stable patchset 2021-08-03 (LP: #1938824) // CVE-\n     url: https://ubuntu.com/security/CVE-2021-47345\n     - RDMA/cma: Fix rdma_resolve_route() memory leak\n   * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url:\n     https://ubuntu.com/security/CVE-2024-53131\n     - nilfs2: fix null-ptr-deref in block_touch_buffer tracepoint\n   * Focal update: v5.4.287 upstream stable release (LP: #2095145) // CVE-url:\n     https://ubuntu.com/security/CVE-2024-53130\n     - nilfs2: fix null-ptr-deref in block_dirty_buffer tracepoint\n   * CVE-url: https://ubuntu.com/security/CVE-2025-37798\n     - codel: remove sch-\u003eq.qlen check before qdisc_tree_reduce_backlog()\n   * CVE-url: https://ubuntu.com/security/CVE-2025-21640\n     - sctp: sysctl: cookie_hmac_alg: avoid using current-\u003ensproxy\n   * CVE-url: https://ubuntu.com/security/CVE-2024-57913\n     - usb: gadget: f_fs: Remove WARN_ON in functionfs_bind\n   * CVE-url: https://ubuntu.com/security/CVE-2025-21638\n     - sctp: sysctl: auth_enable: avoid using current-\u003ensproxy\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50195\n     - posix-clock: Fix missing timespec64 check in pc_clock_settime()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50299\n     - sctp: properly validate chunk size in sctp_sf_ootb()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-41016\n     - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50287\n     - media: v4l2-tpg: prevent the risk of a division by zero\n   * CVE-url: https://ubuntu.com/security/CVE-2024-49965\n     - ocfs2: remove unreasonable unlock in ocfs2_read_blocks\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50179\n     - ceph: remove the incorrect Fw reference check when dirtying pages\n   * CVE-url: https://ubuntu.com/security/CVE-2024-40953\n     - KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50290\n     - media: cx24116: prevent overflows on SNR calculus\n   * CVE-url: https://ubuntu.com/security/CVE-2024-49877\n     - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate\n   * CVE-url: https://ubuntu.com/security/CVE-2024-50008\n     - wifi: mwifiex: Fix memcpy() field-spanning write warning in\n       mwifiex_cmd_802_11_scan_ext()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-49959\n     - jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error\n   * CVE-url: https://ubuntu.com/security/CVE-2024-49963\n     - mailbox: bcm2835: Fix timeout during suspend mode\n   * CVE-url: https://ubuntu.com/security/CVE-2024-47709\n     - can: bcm: Clear bo-\u003ebcm_proc_read after remove_proc_entry().\n   * CVE-url: https://ubuntu.com/security/CVE-2025-21699\n     - gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag\n   * CVE-url: https://ubuntu.com/security/CVE-2025-21689\n     - USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()\n   * CVE-url: https://ubuntu.com/security/CVE-2024-53101\n     - fs: Fix uninitialized value issue in from_kuid and from_kgid","modified":"2026-06-04T10:03:45.406110103Z","published":"2025-09-16T08:04:00Z","upstream":["CVE-2021-34981","CVE-2021-47345","CVE-2024-40953","CVE-2024-41016","CVE-2024-47709","CVE-2024-49877","CVE-2024-49959","CVE-2024-49963","CVE-2024-49965","CVE-2024-50008","CVE-2024-50179","CVE-2024-50195","CVE-2024-50202","CVE-2024-50287","CVE-2024-50290","CVE-2024-50299","CVE-2024-53101","CVE-2024-53130","CVE-2024-53131","CVE-2024-57913","CVE-2024-57996","CVE-2025-21638","CVE-2025-21640","CVE-2025-21689","CVE-2025-21699","CVE-2025-37752","CVE-2025-37797","CVE-2025-37798"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2025-1758009836.html"}],"affected":[{"package":{"name":"linux-buildinfo-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-buildinfo-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-278-tuxcare.els49","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-cloud-tools-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-cloud-tools-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-doc","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-doc?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-headers-4.4.0-278-tuxcare.els49","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-headers-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-headers-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-headers-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-image-unsigned-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-image-unsigned-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-libc-dev","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-libc-dev?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-modules-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-modules-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-modules-extra-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-modules-extra-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-source-4.4.0","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-source-4.4.0?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-tools-4.4.0-278-tuxcare.els49","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-tools-4.4.0-278-tuxcare.els49-generic","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49-generic?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-tools-4.4.0-278-tuxcare.els49-lowlatency","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-4.4.0-278-tuxcare.els49-lowlatency?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-tools-common","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-common?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}},{"package":{"name":"linux-tools-host","ecosystem":"TuxCare:Ubuntu:16.04","purl":"pkg:deb/tuxcare/linux-tools-host?distro=ubuntu-16.04"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-278.312"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2025-1758009836.json"}}],"schema_version":"1.7.5"}