{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "ext4: fix OOB read when checking dotdot dir {CVE-2025-37785}\n- wifi: iwlwifi: limit printed string from FW file {CVE-2025-21905}\n- drm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()' {CVE-2024-27042}\n- dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763}\n- sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket {CVE-2024-53168}\n- cifs: Fix UAF in cifs_demultiplex_thread() {CVE-2023-52572}\n- veth: Fix use after free in XDP_REDIRECT {CVE-2023-53107}\n- firmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier() {CVE-2024-53068}\n- arm64/sve: Discard stale CPU state when handling SVE traps {CVE-2024-50275}\n- Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd {CVE-2025-21969}\n- wifi: mt76: mt7921e: fix use-after-free in free_irq() {CVE-2024-26892}\n- rtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read {CVE-2024-58069}\n- nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu() {CVE-2025-21927}\n- pfifo_tail_enqueue: Drop new packet when sch->limit == 0 {CVE-2025-21702}\n- net_sched: sch_fifo: implement lockless __fifo_dump() {CVE-2025-21702}\n- iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() {CVE-2025-21993}\n- vlan: enforce underlying device type {CVE-2025-21920}\n- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() {CVE-2025-21928}\n- watch_queue: Actually free the watch {CVE-2022-49256}\n- can: bcm: Fix UAF in bcm_proc_show() {CVE-2023-52922}\n- ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() {CVE-2023-52988}\n- netfilter: nf_set_pipapo: fix initial map fill {CVE-2024-57947}\n- hwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations {CVE-2021-47098}\n- aio: fix use-after-free due to missing POLLFREE handling {CVE-2021-47505}\n- aio: keep poll requests on waitqueue until completed {CVE-2021-47505}\n- smb: client: fix potential deadlock when releasing mids {CVE-2023-52757}\n- cifs: remove useless DeleteMidQEntry() {CVE-2023-52757}\n- media: uvcvideo: Remove dangling pointers {CVE-2024-58002}\n- media: uvcvideo: Only save async fh if success {CVE-2024-58002}\n- media: uvcvideo: Refactor iterators {CVE-2024-58002}\n- drm: nv04: Fix out of bounds access {CVE-2024-27008}\n- drm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table() {CVE-2025-21780}\n- arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array {CVE-2025-21785}\n- net: rose: fix timer races against user threads {CVE-2025-21718}\n- media: uvcvideo: Fix double free in error path {CVE-2024-57980}\n- vrf: use RCU protection in l3mdev_l3_out() {CVE-2025-21791}\n- geneve: Fix use-after-free in geneve_find_dev(). {CVE-2025-21858}\n- afs: Increase buffer size in afs_update_volume_status() {CVE-2024-26736}\n- net: atlantic: eliminate double free in error handling logic {CVE-2023-52664}\n- bpf: Check validity of link->type in bpf_link_show_fdinfo() {CVE-2024-53099}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1747725447.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "tracking": { "current_release_date": "2026-02-16T09:23:43Z", "generator": { "date": "2026-02-16T09:23:43Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1747725447", "initial_release_date": "2025-05-20T07:17:29Z", "revision_history": [ { "date": "2025-05-20T07:17:29Z", "number": "1", "summary": "Initial version" }, { "date": "2025-05-20T10:26:31Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-02-16T09:23:43Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "kernel: Fix of 35 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els13?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els13?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els13?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els13?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els13?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els13?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product_id": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.1101.el9_2.tuxcare.7.els13?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2024-53168", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsunrpc: fix one UAF issue caused by sunrpc kernel tcp socket\n\nBUG: KASAN: slab-use-after-free in tcp_write_timer_handler+0x156/0x3e0\nRead of size 1 at addr ffff888111f322cd by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc4-dirty #7\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1\nCall Trace:\n \n dump_stack_lvl+0x68/0xa0\n print_address_description.constprop.0+0x2c/0x3d0\n print_report+0xb4/0x270\n kasan_report+0xbd/0xf0\n tcp_write_timer_handler+0x156/0x3e0\n tcp_write_timer+0x66/0x170\n call_timer_fn+0xfb/0x1d0\n __run_timers+0x3f8/0x480\n run_timer_softirq+0x9b/0x100\n handle_softirqs+0x153/0x390\n __irq_exit_rcu+0x103/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_apic_timer_interrupt+0x76/0x90\n \n \n asm_sysvec_apic_timer_interrupt+0x1a/0x20\nRIP: 0010:default_idle+0xf/0x20\nCode: 4c 01 c7 4c 29 c2 e9 72 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90\n 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 f8 25 00 fb f4 c3 cc cc cc\n cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90\nRSP: 0018:ffffffffa2007e28 EFLAGS: 00000242\nRAX: 00000000000f3b31 RBX: 1ffffffff4400fc7 RCX: ffffffffa09c3196\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9f00590f\nRBP: 0000000000000000 R08: 0000000000000001 R09: ffffed102360835d\nR10: ffff88811b041aeb R11: 0000000000000001 R12: 0000000000000000\nR13: ffffffffa202d7c0 R14: 0000000000000000 R15: 00000000000147d0\n default_idle_call+0x6b/0xa0\n cpuidle_idle_call+0x1af/0x1f0\n do_idle+0xbc/0x130\n cpu_startup_entry+0x33/0x40\n rest_init+0x11f/0x210\n start_kernel+0x39a/0x420\n x86_64_start_reservations+0x18/0x30\n x86_64_start_kernel+0x97/0xa0\n common_startup_64+0x13e/0x141\n \n\nAllocated by task 595:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x87/0x90\n kmem_cache_alloc_noprof+0x12b/0x3f0\n copy_net_ns+0x94/0x380\n create_new_namespaces+0x24c/0x500\n unshare_nsproxy_namespaces+0x75/0xf0\n ksys_unshare+0x24e/0x4f0\n __x64_sys_unshare+0x1f/0x30\n do_syscall_64+0x70/0x180\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nFreed by task 100:\n kasan_save_stack+0x24/0x50\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x54/0x70\n kmem_cache_free+0x156/0x5d0\n cleanup_net+0x5d3/0x670\n process_one_work+0x776/0xa90\n worker_thread+0x2e2/0x560\n kthread+0x1a8/0x1f0\n ret_from_fork+0x34/0x60\n ret_from_fork_asm+0x1a/0x30\n\nReproduction script:\n\nmkdir -p /mnt/nfsshare\nmkdir -p /mnt/nfs/netns_1\nmkfs.ext4 /dev/sdb\nmount /dev/sdb /mnt/nfsshare\nsystemctl restart nfs-server\nchmod 777 /mnt/nfsshare\nexportfs -i -o rw,no_root_squash *:/mnt/nfsshare\n\nip netns add netns_1\nip link add name veth_1_peer type veth peer veth_1\nifconfig veth_1_peer 11.11.0.254 up\nip link set veth_1 netns netns_1\nip netns exec netns_1 ifconfig veth_1 11.11.0.1\n\nip netns exec netns_1 /root/iptables -A OUTPUT -d 11.11.0.254 -p tcp \\\n\t--tcp-flags FIN FIN -j DROP\n\n(note: In my environment, a DESTROY_CLIENTID operation is always sent\n immediately, breaking the nfs tcp connection.)\nip netns exec netns_1 timeout -s 9 300 mount -t nfs -o proto=tcp,vers=4.1 \\\n\t11.11.0.254:/mnt/nfsshare /mnt/nfs/netns_1\n\nip netns del netns_1\n\nThe reason here is that the tcp socket in netns_1 (nfs side) has been\nshutdown and closed (done in xs_destroy), but the FIN message (with ack)\nis discarded, and the nfsd side keeps sending retransmission messages.\nAs a result, when the tcp sock in netns_1 processes the received message,\nit sends the message (FIN message) in the sending queue, and the tcp timer\nis re-established. When the network namespace is deleted, the net structure\naccessed by tcp's timer handler function causes problems.\n\nTo fix this problem, let's hold netns refcnt for the tcp kernel socket as\ndone in other modules. This is an ugly hack which can easily be backported\nto earlier kernels. A proper fix which cleans up the interfaces will\nfollow, but may not be so easy to backport.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53168" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ca87e5063757132a044d35baba40a7d4bb25394", "url": "https://git.kernel.org/stable/c/0ca87e5063757132a044d35baba40a7d4bb25394" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f23f96528e8fcf8619895c4c916c52653892ec1", "url": "https://git.kernel.org/stable/c/3f23f96528e8fcf8619895c4c916c52653892ec1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/61c0a5eac96836de5e3a5897eccdc63162a94936", "url": "https://git.kernel.org/stable/c/61c0a5eac96836de5e3a5897eccdc63162a94936" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/694ccb05b79ee5f5a9f14c2f80d2635d3bb8bdc3", "url": "https://git.kernel.org/stable/c/694ccb05b79ee5f5a9f14c2f80d2635d3bb8bdc3" } ], "release_date": "2024-12-27T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52664", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atlantic: eliminate double free in error handling logic\n\nDriver has a logic leak in ring data allocation/free,\nwhere aq_ring_free could be called multiple times on same ring,\nif system is under stress and got memory allocation error.\n\nRing pointer was used as an indicator of failure, but this is\nnot correct since only ring data is allocated/deallocated.\nRing itself is an array member.\n\nChanging ring allocation functions to return error code directly.\nThis simplifies error handling and eliminates aq_ring_free\non higher layer.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52664" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0edb3ae8bfa31cd544b0c195bdec00e036002b5d", "url": "https://git.kernel.org/stable/c/0edb3ae8bfa31cd544b0c195bdec00e036002b5d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b3cb7a830a24527877b0bc900b9bd74a96aea928", "url": "https://git.kernel.org/stable/c/b3cb7a830a24527877b0bc900b9bd74a96aea928" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c11a870a73a3bc4cc7df6dd877a45b181795fcbf", "url": "https://git.kernel.org/stable/c/c11a870a73a3bc4cc7df6dd877a45b181795fcbf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d1fde4a7e1dcc4d49cce285107a7a43c3030878d", "url": "https://git.kernel.org/stable/c/d1fde4a7e1dcc4d49cce285107a7a43c3030878d" } ], "release_date": "2024-05-17T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53107", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nveth: Fix use after free in XDP_REDIRECT\n\nCommit 718a18a0c8a6 (\"veth: Rework veth_xdp_rcv_skb in order\nto accept non-linear skb\") introduced a bug where it tried to\nuse pskb_expand_head() if the headroom was less than\nXDP_PACKET_HEADROOM. This however uses kmalloc to expand the head,\nwhich will later allow consume_skb() to free the skb while is it still\nin use by AF_XDP.\n\nPreviously if the headroom was less than XDP_PACKET_HEADROOM we\ncontinued on to allocate a new skb from pages so this restores that\nbehavior.\n\nBUG: KASAN: use-after-free in __xsk_rcv+0x18d/0x2c0\nRead of size 78 at addr ffff888976250154 by task napi/iconduit-g/148640\n\nCPU: 5 PID: 148640 Comm: napi/iconduit-g Kdump: loaded Tainted: G O 6.1.4-cloudflare-kasan-2023.1.2 #1\nHardware name: Quanta Computer Inc. QuantaPlex T41S-2U/S2S-MB, BIOS S2S_3B10.03 06/21/2018\nCall Trace:\n \n dump_stack_lvl+0x34/0x48\n print_report+0x170/0x473\n ? __xsk_rcv+0x18d/0x2c0\n kasan_report+0xad/0x130\n ? __xsk_rcv+0x18d/0x2c0\n kasan_check_range+0x149/0x1a0\n memcpy+0x20/0x60\n __xsk_rcv+0x18d/0x2c0\n __xsk_map_redirect+0x1f3/0x490\n ? veth_xdp_rcv_skb+0x89c/0x1ba0 [veth]\n xdp_do_redirect+0x5ca/0xd60\n veth_xdp_rcv_skb+0x935/0x1ba0 [veth]\n ? __netif_receive_skb_list_core+0x671/0x920\n ? veth_xdp+0x670/0x670 [veth]\n veth_xdp_rcv+0x304/0xa20 [veth]\n ? do_xdp_generic+0x150/0x150\n ? veth_xdp_rcv_one+0xde0/0xde0 [veth]\n ? _raw_spin_lock_bh+0xe0/0xe0\n ? newidle_balance+0x887/0xe30\n ? __perf_event_task_sched_in+0xdb/0x800\n veth_poll+0x139/0x571 [veth]\n ? veth_xdp_rcv+0xa20/0xa20 [veth]\n ? _raw_spin_unlock+0x39/0x70\n ? finish_task_switch.isra.0+0x17e/0x7d0\n ? __switch_to+0x5cf/0x1070\n ? __schedule+0x95b/0x2640\n ? io_schedule_timeout+0x160/0x160\n __napi_poll+0xa1/0x440\n napi_threaded_poll+0x3d1/0x460\n ? __napi_poll+0x440/0x440\n ? __kthread_parkme+0xc6/0x1f0\n ? __napi_poll+0x440/0x440\n kthread+0x2a2/0x340\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x22/0x30\n \n\nFreed by task 148640:\n kasan_save_stack+0x23/0x50\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x2a/0x40\n ____kasan_slab_free+0x169/0x1d0\n slab_free_freelist_hook+0xd2/0x190\n __kmem_cache_free+0x1a1/0x2f0\n skb_release_data+0x449/0x600\n consume_skb+0x9f/0x1c0\n veth_xdp_rcv_skb+0x89c/0x1ba0 [veth]\n veth_xdp_rcv+0x304/0xa20 [veth]\n veth_poll+0x139/0x571 [veth]\n __napi_poll+0xa1/0x440\n napi_threaded_poll+0x3d1/0x460\n kthread+0x2a2/0x340\n ret_from_fork+0x22/0x30\n\nThe buggy address belongs to the object at ffff888976250000\n which belongs to the cache kmalloc-2k of size 2048\nThe buggy address is located 340 bytes inside of\n 2048-byte region [ffff888976250000, ffff888976250800)\n\nThe buggy address belongs to the physical page:\npage:00000000ae18262a refcount:2 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x976250\nhead:00000000ae18262a order:3 compound_mapcount:0 compound_pincount:0\nflags: 0x2ffff800010200(slab|head|node=0|zone=2|lastcpupid=0x1ffff)\nraw: 002ffff800010200 0000000000000000 dead000000000122 ffff88810004cf00\nraw: 0000000000000000 0000000080080008 00000002ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888976250000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff888976250080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n> ffff888976250100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff888976250180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff888976250200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53107" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e755b56896df48b0fae0db275e148f8d8aa7d6f", "url": "https://git.kernel.org/stable/c/6e755b56896df48b0fae0db275e148f8d8aa7d6f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/717d20710596b5b26595ede454d1105fa176f4a4", "url": "https://git.kernel.org/stable/c/717d20710596b5b26595ede454d1105fa176f4a4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7c10131803e45269ddc6c817f19ed649110f3cae", "url": "https://git.kernel.org/stable/c/7c10131803e45269ddc6c817f19ed649110f3cae" } ], "release_date": "2025-05-02T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21993", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\niscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()\n\nWhen performing an iSCSI boot using IPv6, iscsistart still reads the\n/sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix\nlength is 64, this causes the shift exponent to become negative,\ntriggering a UBSAN warning. As the concept of a subnet mask does not\napply to IPv6, the value is set to ~0 to suppress the warning message.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21993" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/07e0d99a2f701123ad3104c0f1a1e66bce74d6e5", "url": "https://git.kernel.org/stable/c/07e0d99a2f701123ad3104c0f1a1e66bce74d6e5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2d1eef248107bdf3d5a69d0fde04c30a79a7bf5d", "url": "https://git.kernel.org/stable/c/2d1eef248107bdf3d5a69d0fde04c30a79a7bf5d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9bfa80c8aa4e06dff55a953c3fffbfc68a3a3b1c", "url": "https://git.kernel.org/stable/c/9bfa80c8aa4e06dff55a953c3fffbfc68a3a3b1c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a858cd58dea06cf85b142673deea8c5d87f11e70", "url": "https://git.kernel.org/stable/c/a858cd58dea06cf85b142673deea8c5d87f11e70" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b253660fac5e0e9080d2c95e3a029e1898d49afb", "url": "https://git.kernel.org/stable/c/b253660fac5e0e9080d2c95e3a029e1898d49afb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b388e185bfad32bfed6a97a6817f74ca00a4318f", "url": "https://git.kernel.org/stable/c/b388e185bfad32bfed6a97a6817f74ca00a4318f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1c6e527470e5eab0b2d57bd073530fbace39eab", "url": "https://git.kernel.org/stable/c/c1c6e527470e5eab0b2d57bd073530fbace39eab" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f763c82db8166e28f45b7cc4a5398a7859665940", "url": "https://git.kernel.org/stable/c/f763c82db8166e28f45b7cc4a5398a7859665940" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-02T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-58002", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Remove dangling pointers\n\nWhen an async control is written, we copy a pointer to the file handle\nthat started the operation. That pointer will be used when the device is\ndone. Which could be anytime in the future.\n\nIf the user closes that file descriptor, its structure will be freed,\nand there will be one dangling pointer per pending async control, that\nthe driver will try to use.\n\nClean all the dangling pointers during release().\n\nTo avoid adding a performance penalty in the most common case (no async\noperation), a counter has been introduced with some logic to make sure\nthat it is properly handled.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-58002" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50", "url": "https://git.kernel.org/stable/c/117f7a2975baa4b7d702d3f4830d5a4ebd0c6d50" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb", "url": "https://git.kernel.org/stable/c/221cd51efe4565501a3dbf04cc011b537dcce7fb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2a29413ace64627e178fd422dd8a5d95219a2c0b", "url": "https://git.kernel.org/stable/c/2a29413ace64627e178fd422dd8a5d95219a2c0b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac", "url": "https://git.kernel.org/stable/c/438bda062b2c40ddd7df23b932e29ffe0a448cac" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971", "url": "https://git.kernel.org/stable/c/4dbaa738c583a0e947803c69e8996e88cf98d971" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/653993f46861f2971e95e9a0e36a34b49dec542c", "url": "https://git.kernel.org/stable/c/653993f46861f2971e95e9a0e36a34b49dec542c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c", "url": "https://git.kernel.org/stable/c/9edc7d25f7e49c33a1ce7a5ffadea2222065516c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ac18d781466252cd35a3e311e0a4b264260fd927", "url": "https://git.kernel.org/stable/c/ac18d781466252cd35a3e311e0a4b264260fd927" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-02-27T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-27042", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'\n\nThe issue arises when the array 'adev->vcn.vcn_config' is accessed\nbefore checking if the index 'adev->vcn.num_vcn_inst' is within the\nbounds of the array.\n\nThe fix involves moving the bounds check before the array access. This\nensures that 'adev->vcn.num_vcn_inst' is within the bounds of the array\nbefore it is used as an index.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset 'adev->vcn.num_vcn_inst' after use.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-27042" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d", "url": "https://git.kernel.org/stable/c/8db10cee51e3e11a6658742465edc21986cf1e8d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775", "url": "https://git.kernel.org/stable/c/8f3e68c6a3fff53c2240762a47a0045d89371775" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058", "url": "https://git.kernel.org/stable/c/b33d4af102b9c1f7a83d3f0ad3cab7d2bab8f058" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9", "url": "https://git.kernel.org/stable/c/cdb637d339572398821204a1142d8d615668f1e9" } ], "release_date": "2024-05-01T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-53068", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfirmware: arm_scmi: Fix slab-use-after-free in scmi_bus_notifier()\n\nThe scmi_dev->name is released prematurely in __scmi_device_destroy(),\nwhich causes slab-use-after-free when accessing scmi_dev->name in\nscmi_bus_notifier(). So move the release of scmi_dev->name to\nscmi_device_release() to avoid slab-use-after-free.\n\n | BUG: KASAN: slab-use-after-free in strncmp+0xe4/0xec\n | Read of size 1 at addr ffffff80a482bcc0 by task swapper/0/1\n |\n | CPU: 1 PID: 1 Comm: swapper/0 Not tainted 6.6.38-debug #1\n | Hardware name: Qualcomm Technologies, Inc. SA8775P Ride (DT)\n | Call trace:\n | dump_backtrace+0x94/0x114\n | show_stack+0x18/0x24\n | dump_stack_lvl+0x48/0x60\n | print_report+0xf4/0x5b0\n | kasan_report+0xa4/0xec\n | __asan_report_load1_noabort+0x20/0x2c\n | strncmp+0xe4/0xec\n | scmi_bus_notifier+0x5c/0x54c\n | notifier_call_chain+0xb4/0x31c\n | blocking_notifier_call_chain+0x68/0x9c\n | bus_notify+0x54/0x78\n | device_del+0x1bc/0x840\n | device_unregister+0x20/0xb4\n | __scmi_device_destroy+0xac/0x280\n | scmi_device_destroy+0x94/0xd0\n | scmi_chan_setup+0x524/0x750\n | scmi_probe+0x7fc/0x1508\n | platform_probe+0xc4/0x19c\n | really_probe+0x32c/0x99c\n | __driver_probe_device+0x15c/0x3c4\n | driver_probe_device+0x5c/0x170\n | __driver_attach+0x1c8/0x440\n | bus_for_each_dev+0xf4/0x178\n | driver_attach+0x3c/0x58\n | bus_add_driver+0x234/0x4d4\n | driver_register+0xf4/0x3c0\n | __platform_driver_register+0x60/0x88\n | scmi_driver_init+0xb0/0x104\n | do_one_initcall+0xb4/0x664\n | kernel_init_freeable+0x3c8/0x894\n | kernel_init+0x24/0x1e8\n | ret_from_fork+0x10/0x20\n |\n | Allocated by task 1:\n | kasan_save_stack+0x2c/0x54\n | kasan_set_track+0x2c/0x40\n | kasan_save_alloc_info+0x24/0x34\n | __kasan_kmalloc+0xa0/0xb8\n | __kmalloc_node_track_caller+0x6c/0x104\n | kstrdup+0x48/0x84\n | kstrdup_const+0x34/0x40\n | __scmi_device_create.part.0+0x8c/0x408\n | scmi_device_create+0x104/0x370\n | scmi_chan_setup+0x2a0/0x750\n | scmi_probe+0x7fc/0x1508\n | platform_probe+0xc4/0x19c\n | really_probe+0x32c/0x99c\n | __driver_probe_device+0x15c/0x3c4\n | driver_probe_device+0x5c/0x170\n | __driver_attach+0x1c8/0x440\n | bus_for_each_dev+0xf4/0x178\n | driver_attach+0x3c/0x58\n | bus_add_driver+0x234/0x4d4\n | driver_register+0xf4/0x3c0\n | __platform_driver_register+0x60/0x88\n | scmi_driver_init+0xb0/0x104\n | do_one_initcall+0xb4/0x664\n | kernel_init_freeable+0x3c8/0x894\n | kernel_init+0x24/0x1e8\n | ret_from_fork+0x10/0x20\n |\n | Freed by task 1:\n | kasan_save_stack+0x2c/0x54\n | kasan_set_track+0x2c/0x40\n | kasan_save_free_info+0x38/0x5c\n | __kasan_slab_free+0xe8/0x164\n | __kmem_cache_free+0x11c/0x230\n | kfree+0x70/0x130\n | kfree_const+0x20/0x40\n | __scmi_device_destroy+0x70/0x280\n | scmi_device_destroy+0x94/0xd0\n | scmi_chan_setup+0x524/0x750\n | scmi_probe+0x7fc/0x1508\n | platform_probe+0xc4/0x19c\n | really_probe+0x32c/0x99c\n | __driver_probe_device+0x15c/0x3c4\n | driver_probe_device+0x5c/0x170\n | __driver_attach+0x1c8/0x440\n | bus_for_each_dev+0xf4/0x178\n | driver_attach+0x3c/0x58\n | bus_add_driver+0x234/0x4d4\n | driver_register+0xf4/0x3c0\n | __platform_driver_register+0x60/0x88\n | scmi_driver_init+0xb0/0x104\n | do_one_initcall+0xb4/0x664\n | kernel_init_freeable+0x3c8/0x894\n | kernel_init+0x24/0x1e8\n | ret_from_fork+0x10/0x20", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53068" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/15b17bbcea07d49c43d21aa700485cbd9f9d00d8", "url": "https://git.kernel.org/stable/c/15b17bbcea07d49c43d21aa700485cbd9f9d00d8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e1f523b185a8ccdcba625b31ff0312d052900e2", "url": "https://git.kernel.org/stable/c/1e1f523b185a8ccdcba625b31ff0312d052900e2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/295416091e44806760ccf753aeafdafc0ae268f3", "url": "https://git.kernel.org/stable/c/295416091e44806760ccf753aeafdafc0ae268f3" } ], "release_date": "2024-11-19T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21718", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: rose: fix timer races against user threads\n\nRose timers only acquire the socket spinlock, without\nchecking if the socket is owned by one user thread.\n\nAdd a check and rearm the timers if needed.\n\nBUG: KASAN: slab-use-after-free in rose_timer_expiry+0x31d/0x360 net/rose/rose_timer.c:174\nRead of size 2 at addr ffff88802f09b82a by task swapper/0/0\n\nCPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.13.0-rc5-syzkaller-00172-gd1bf27c4e176 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n rose_timer_expiry+0x31d/0x360 net/rose/rose_timer.c:174\n call_timer_fn+0x187/0x650 kernel/time/timer.c:1793\n expire_timers kernel/time/timer.c:1844 [inline]\n __run_timers kernel/time/timer.c:2418 [inline]\n __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2430\n run_timer_base kernel/time/timer.c:2439 [inline]\n run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2449\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:561\n __do_softirq kernel/softirq.c:595 [inline]\n invoke_softirq kernel/softirq.c:435 [inline]\n __irq_exit_rcu+0xf7/0x220 kernel/softirq.c:662\n irq_exit_rcu+0x9/0x30 kernel/softirq.c:678\n instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1049 [inline]\n sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1049\n ", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21718" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0d5bca3be27bfcf8f980f2fed49b6cbb7dafe4a1", "url": "https://git.kernel.org/stable/c/0d5bca3be27bfcf8f980f2fed49b6cbb7dafe4a1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1409b45d4690308c502c6caf22f01c3c205b4717", "url": "https://git.kernel.org/stable/c/1409b45d4690308c502c6caf22f01c3c205b4717" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1992fb261c90e9827cf5dc3115d89bb0853252c9", "url": "https://git.kernel.org/stable/c/1992fb261c90e9827cf5dc3115d89bb0853252c9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/51c128ba038cf1b79d605cbee325919b45ab95a5", "url": "https://git.kernel.org/stable/c/51c128ba038cf1b79d605cbee325919b45ab95a5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/52f5aff33ca73b2c2fa93f40a3de308012e63cf4", "url": "https://git.kernel.org/stable/c/52f5aff33ca73b2c2fa93f40a3de308012e63cf4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/58051a284ac18a3bb815aac6289a679903ddcc3f", "url": "https://git.kernel.org/stable/c/58051a284ac18a3bb815aac6289a679903ddcc3f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5de7665e0a0746b5ad7943554b34db8f8614a196", "url": "https://git.kernel.org/stable/c/5de7665e0a0746b5ad7943554b34db8f8614a196" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f55c88e3ca5939a6a8a329024aed8f3d98eea8e4", "url": "https://git.kernel.org/stable/c/f55c88e3ca5939a6a8a329024aed8f3d98eea8e4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2025-02-27T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-47505", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\naio: fix use-after-free due to missing POLLFREE handling\n\nsignalfd_poll() and binder_poll() are special in that they use a\nwaitqueue whose lifetime is the current task, rather than the struct\nfile as is normally the case. This is okay for blocking polls, since a\nblocking poll occurs within one task; however, non-blocking polls\nrequire another solution. This solution is for the queue to be cleared\nbefore it is freed, by sending a POLLFREE notification to all waiters.\n\nUnfortunately, only eventpoll handles POLLFREE. A second type of\nnon-blocking poll, aio poll, was added in kernel v4.18, and it doesn't\nhandle POLLFREE. This allows a use-after-free to occur if a signalfd or\nbinder fd is polled with aio poll, and the waitqueue gets freed.\n\nFix this by making aio poll handle POLLFREE.\n\nA patch by Ramji Jiyani \n(https://lore.kernel.org/r/20211027011834.2497484-1-ramjiyani@google.com)\ntried to do this by making aio_poll_wake() always complete the request\ninline if POLLFREE is seen. However, that solution had two bugs.\nFirst, it introduced a deadlock, as it unconditionally locked the aio\ncontext while holding the waitqueue lock, which inverts the normal\nlocking order. Second, it didn't consider that POLLFREE notifications\nare missed while the request has been temporarily de-queued.\n\nThe second problem was solved by my previous patch. This patch then\nproperly fixes the use-after-free by handling POLLFREE in a\ndeadlock-free way. It does this by taking advantage of the fact that\nfreeing of the waitqueue is RCU-delayed, similar to what eventpoll does.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-47505" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/321fba81ec034f88aea4898993c1bf15605c023f", "url": "https://git.kernel.org/stable/c/321fba81ec034f88aea4898993c1bf15605c023f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4105e6a128e8a98455dfc9e6dbb2ab0c33c4497f", "url": "https://git.kernel.org/stable/c/4105e6a128e8a98455dfc9e6dbb2ab0c33c4497f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/47ffefd88abfffe8a040bcc1dd0554d4ea6f7689", "url": "https://git.kernel.org/stable/c/47ffefd88abfffe8a040bcc1dd0554d4ea6f7689" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50252e4b5e989ce64555c7aef7516bdefc2fea72", "url": "https://git.kernel.org/stable/c/50252e4b5e989ce64555c7aef7516bdefc2fea72" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/60d311f9e6381d779d7d53371f87285698ecee24", "url": "https://git.kernel.org/stable/c/60d311f9e6381d779d7d53371f87285698ecee24" } ], "release_date": "2024-05-24T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21702", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npfifo_tail_enqueue: Drop new packet when sch->limit == 0\n\nExpected behaviour:\nIn case we reach scheduler's limit, pfifo_tail_enqueue() will drop a\npacket in scheduler's queue and decrease scheduler's qlen by one.\nThen, pfifo_tail_enqueue() enqueue new packet and increase\nscheduler's qlen by one. Finally, pfifo_tail_enqueue() return\n`NET_XMIT_CN` status code.\n\nWeird behaviour:\nIn case we set `sch->limit == 0` and trigger pfifo_tail_enqueue() on a\nscheduler that has no packet, the 'drop a packet' step will do nothing.\nThis means the scheduler's qlen still has value equal 0.\nThen, we continue to enqueue new packet and increase scheduler's qlen by\none. In summary, we can leverage pfifo_tail_enqueue() to increase qlen by\none and return `NET_XMIT_CN` status code.\n\nThe problem is:\nLet's say we have two qdiscs: Qdisc_A and Qdisc_B.\n - Qdisc_A's type must have '->graft()' function to create parent/child relationship.\n Let's say Qdisc_A's type is `hfsc`. Enqueue packet to this qdisc will trigger `hfsc_enqueue`.\n - Qdisc_B's type is pfifo_head_drop. Enqueue packet to this qdisc will trigger `pfifo_tail_enqueue`.\n - Qdisc_B is configured to have `sch->limit == 0`.\n - Qdisc_A is configured to route the enqueued's packet to Qdisc_B.\n\nEnqueue packet through Qdisc_A will lead to:\n - hfsc_enqueue(Qdisc_A) -> pfifo_tail_enqueue(Qdisc_B)\n - Qdisc_B->q.qlen += 1\n - pfifo_tail_enqueue() return `NET_XMIT_CN`\n - hfsc_enqueue() check for `NET_XMIT_SUCCESS` and see `NET_XMIT_CN` => hfsc_enqueue() don't increase qlen of Qdisc_A.\n\nThe whole process lead to a situation where Qdisc_A->q.qlen == 0 and Qdisc_B->q.qlen == 1.\nReplace 'hfsc' with other type (for example: 'drr') still lead to the same problem.\nThis violate the design where parent's qlen should equal to the sum of its childrens'qlen.\n\nBug impact: This issue can be used for user->kernel privilege escalation when it is reachable.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21702" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/020ecb76812a0526f4130ab5aeb6dc7c773e7ab9", "url": "https://git.kernel.org/stable/c/020ecb76812a0526f4130ab5aeb6dc7c773e7ab9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/647cef20e649c576dff271e018d5d15d998b629d", "url": "https://git.kernel.org/stable/c/647cef20e649c576dff271e018d5d15d998b629d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/78285b53266d6d51fa4ff504a23df03852eba84e", "url": "https://git.kernel.org/stable/c/78285b53266d6d51fa4ff504a23df03852eba84e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/79a955ea4a2e5ddf4a36328959de0de496419888", "url": "https://git.kernel.org/stable/c/79a955ea4a2e5ddf4a36328959de0de496419888" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7a9723ec27aff5674f1fd4934608937f1d650980", "url": "https://git.kernel.org/stable/c/7a9723ec27aff5674f1fd4934608937f1d650980" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a56a6e8589a9b98d8171611fbcc1e45a15fd2455", "url": "https://git.kernel.org/stable/c/a56a6e8589a9b98d8171611fbcc1e45a15fd2455" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b6a079c3b6f95378f26e2aeda520cb3176f7067b", "url": "https://git.kernel.org/stable/c/b6a079c3b6f95378f26e2aeda520cb3176f7067b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e40cb34b7f247fe2e366fd192700d1b4f38196ca", "url": "https://git.kernel.org/stable/c/e40cb34b7f247fe2e366fd192700d1b4f38196ca" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-02-18T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21969", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd\n\nAfter the hci sync command releases l2cap_conn, the hci receive data work\nqueue references the released l2cap_conn when sending to the upper layer.\nAdd hci dev lock to the hci receive data work queue to synchronize the two.\n\n[1]\nBUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954\nRead of size 8 at addr ffff8880271a4000 by task kworker/u9:2/5837\n\nCPU: 0 UID: 0 PID: 5837 Comm: kworker/u9:2 Not tainted 6.13.0-rc5-syzkaller-00163-gab75170520d4 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: hci1 hci_rx_work\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n l2cap_build_cmd net/bluetooth/l2cap_core.c:2964 [inline]\n l2cap_send_cmd+0x187/0x8d0 net/bluetooth/l2cap_core.c:954\n l2cap_sig_send_rej net/bluetooth/l2cap_core.c:5502 [inline]\n l2cap_sig_channel net/bluetooth/l2cap_core.c:5538 [inline]\n l2cap_recv_frame+0x221f/0x10db0 net/bluetooth/l2cap_core.c:6817\n hci_acldata_packet net/bluetooth/hci_core.c:3797 [inline]\n hci_rx_work+0x508/0xdb0 net/bluetooth/hci_core.c:4040\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \n\nAllocated by task 5837:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4329\n kmalloc_noprof include/linux/slab.h:901 [inline]\n kzalloc_noprof include/linux/slab.h:1037 [inline]\n l2cap_conn_add+0xa9/0x8e0 net/bluetooth/l2cap_core.c:6860\n l2cap_connect_cfm+0x115/0x1090 net/bluetooth/l2cap_core.c:7239\n hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline]\n hci_remote_features_evt+0x68e/0xac0 net/bluetooth/hci_event.c:3726\n hci_event_func net/bluetooth/hci_event.c:7473 [inline]\n hci_event_packet+0xac2/0x1540 net/bluetooth/hci_event.c:7525\n hci_rx_work+0x3f3/0xdb0 net/bluetooth/hci_core.c:4035\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nFreed by task 54:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2353 [inline]\n slab_free mm/slub.c:4613 [inline]\n kfree+0x196/0x430 mm/slub.c:4761\n l2cap_connect_cfm+0xcc/0x1090 net/bluetooth/l2cap_core.c:7235\n hci_connect_cfm include/net/bluetooth/hci_core.h:2057 [inline]\n hci_conn_failed+0x287/0x400 net/bluetooth/hci_conn.c:1266\n hci_abort_conn_sync+0x56c/0x11f0 net/bluetooth/hci_sync.c:5603\n hci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:332\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entr\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21969" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7790a79c6fce8d5d552bc64f5c82819f719e4f28", "url": "https://git.kernel.org/stable/c/7790a79c6fce8d5d552bc64f5c82819f719e4f28" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b4f82f9ed43aefa79bec2504ae8c29be0c0f5d1d", "url": "https://git.kernel.org/stable/c/b4f82f9ed43aefa79bec2504ae8c29be0c0f5d1d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c96cce853542b3b13da3738f35ef1be8cfcc9d1d", "url": "https://git.kernel.org/stable/c/c96cce853542b3b13da3738f35ef1be8cfcc9d1d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f8094625a591eeb0b75b1bd9e713fac1d93f5ca9", "url": "https://git.kernel.org/stable/c/f8094625a591eeb0b75b1bd9e713fac1d93f5ca9" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21858", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ngeneve: Fix use-after-free in geneve_find_dev().\n\nsyzkaller reported a use-after-free in geneve_find_dev() [0]\nwithout repro.\n\ngeneve_configure() links struct geneve_dev.next to\nnet_generic(net, geneve_net_id)->geneve_list.\n\nThe net here could differ from dev_net(dev) if IFLA_NET_NS_PID,\nIFLA_NET_NS_FD, or IFLA_TARGET_NETNSID is set.\n\nWhen dev_net(dev) is dismantled, geneve_exit_batch_rtnl() finally\ncalls unregister_netdevice_queue() for each dev in the netns,\nand later the dev is freed.\n\nHowever, its geneve_dev.next is still linked to the backend UDP\nsocket netns.\n\nThen, use-after-free will occur when another geneve dev is created\nin the netns.\n\nLet's call geneve_dellink() instead in geneve_destroy_tunnels().\n\n[0]:\nBUG: KASAN: slab-use-after-free in geneve_find_dev drivers/net/geneve.c:1295 [inline]\nBUG: KASAN: slab-use-after-free in geneve_configure+0x234/0x858 drivers/net/geneve.c:1343\nRead of size 2 at addr ffff000054d6ee24 by task syz.1.4029/13441\n\nCPU: 1 UID: 0 PID: 13441 Comm: syz.1.4029 Not tainted 6.13.0-g0ad9617c78ac #24 dc35ca22c79fb82e8e7bc5c9c9adafea898b1e3d\nHardware name: linux,dummy-virt (DT)\nCall trace:\n show_stack+0x38/0x50 arch/arm64/kernel/stacktrace.c:466 (C)\n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0xbc/0x108 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x16c/0x6f0 mm/kasan/report.c:489\n kasan_report+0xc0/0x120 mm/kasan/report.c:602\n __asan_report_load2_noabort+0x20/0x30 mm/kasan/report_generic.c:379\n geneve_find_dev drivers/net/geneve.c:1295 [inline]\n geneve_configure+0x234/0x858 drivers/net/geneve.c:1343\n geneve_newlink+0xb8/0x128 drivers/net/geneve.c:1634\n rtnl_newlink_create+0x23c/0x868 net/core/rtnetlink.c:3795\n __rtnl_newlink net/core/rtnetlink.c:3906 [inline]\n rtnl_newlink+0x1054/0x1630 net/core/rtnetlink.c:4021\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2543\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6938\n netlink_unicast_kernel net/netlink/af_netlink.c:1322 [inline]\n netlink_unicast+0x618/0x838 net/netlink/af_netlink.c:1348\n netlink_sendmsg+0x5fc/0x8b0 net/netlink/af_netlink.c:1892\n sock_sendmsg_nosec net/socket.c:713 [inline]\n __sock_sendmsg net/socket.c:728 [inline]\n ____sys_sendmsg+0x410/0x6f8 net/socket.c:2568\n ___sys_sendmsg+0x178/0x1d8 net/socket.c:2622\n __sys_sendmsg net/socket.c:2654 [inline]\n __do_sys_sendmsg net/socket.c:2659 [inline]\n __se_sys_sendmsg net/socket.c:2657 [inline]\n __arm64_sys_sendmsg+0x12c/0x1c8 net/socket.c:2657\n __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]\n invoke_syscall+0x90/0x278 arch/arm64/kernel/syscall.c:49\n el0_svc_common+0x13c/0x250 arch/arm64/kernel/syscall.c:132\n do_el0_svc+0x54/0x70 arch/arm64/kernel/syscall.c:151\n el0_svc+0x4c/0xa8 arch/arm64/kernel/entry-common.c:744\n el0t_64_sync_handler+0x78/0x108 arch/arm64/kernel/entry-common.c:762\n el0t_64_sync+0x198/0x1a0 arch/arm64/kernel/entry.S:600\n\nAllocated by task 13247:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x30/0x68 mm/kasan/common.c:68\n kasan_save_alloc_info+0x44/0x58 mm/kasan/generic.c:568\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x84/0xa0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4298 [inline]\n __kmalloc_node_noprof+0x2a0/0x560 mm/slub.c:4304\n __kvmalloc_node_noprof+0x9c/0x230 mm/util.c:645\n alloc_netdev_mqs+0xb8/0x11a0 net/core/dev.c:11470\n rtnl_create_link+0x2b8/0xb50 net/core/rtnetlink.c:3604\n rtnl_newlink_create+0x19c/0x868 net/core/rtnetlink.c:3780\n __rtnl_newlink net/core/rtnetlink.c:3906 [inline]\n rtnl_newlink+0x1054/0x1630 net/core/rtnetlink.c:4021\n rtnetlink_rcv_msg+0x61c/0x918 net/core/rtnetlink.c:6911\n netlink_rcv_skb+0x1dc/0x398 net/netlink/af_netlink.c:2543\n rtnetlink_rcv+0x34/0x50 net/core/rtnetlink.c:6938\n netlink_unicast_kernel net/netlink/af_n\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21858" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3ce92ca990cfac88a87c61df3cc0b5880e688ecf", "url": "https://git.kernel.org/stable/c/3ce92ca990cfac88a87c61df3cc0b5880e688ecf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a0538ac6826807d6919f6aecbb8996c2865af2c", "url": "https://git.kernel.org/stable/c/5a0538ac6826807d6919f6aecbb8996c2865af2c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/788dbca056a8783ec063da3c9d49a3a71c76c283", "url": "https://git.kernel.org/stable/c/788dbca056a8783ec063da3c9d49a3a71c76c283" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/904e746b2e7fa952ab8801b303ce826a63153d78", "url": "https://git.kernel.org/stable/c/904e746b2e7fa952ab8801b303ce826a63153d78" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9593172d93b9f91c362baec4643003dc29802929", "url": "https://git.kernel.org/stable/c/9593172d93b9f91c362baec4643003dc29802929" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d5e86e27de0936f3cb0a299ce519d993e9cf3886", "url": "https://git.kernel.org/stable/c/d5e86e27de0936f3cb0a299ce519d993e9cf3886" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/da9b0ae47f084014b1e4b3f31f70a0defd047ff3", "url": "https://git.kernel.org/stable/c/da9b0ae47f084014b1e4b3f31f70a0defd047ff3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f74f6560146714241c6e167b03165ee77a86e316", "url": "https://git.kernel.org/stable/c/f74f6560146714241c6e167b03165ee77a86e316" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-03-12T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21780", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: avoid buffer overflow attach in smu_sys_set_pp_table()\n\nIt malicious user provides a small pptable through sysfs and then\na bigger pptable, it may cause buffer overflow attack in function\nsmu_sys_set_pp_table().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21780" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699", "url": "https://git.kernel.org/stable/c/1abb2648698bf10783d2236a6b4a7ca5e8021699" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de", "url": "https://git.kernel.org/stable/c/231075c5a8ea54f34b7c4794687baa980814e6de" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084", "url": "https://git.kernel.org/stable/c/2498d2db1d35e88a2060ea191ae75dce853dd084" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a", "url": "https://git.kernel.org/stable/c/3484ea33157bc7334f57e64826ec5a4bf992151a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab", "url": "https://git.kernel.org/stable/c/e43a8b9c4d700ffec819c5043a48769b3e7d9cab" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" } ], "release_date": "2025-02-27T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-26736", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Increase buffer size in afs_update_volume_status()\n\nThe max length of volume->vid value is 20 characters.\nSo increase idbuf[] size up to 24 to avoid overflow.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\n[DH: Actually, it's 20 + NUL, so increase it to 24 and use snprintf()]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26736" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5", "url": "https://git.kernel.org/stable/c/5c27d85a69fa16a08813ba37ddfb4bbc9a1ed6b5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e", "url": "https://git.kernel.org/stable/c/6e6065dd25b661420fac19c34282b6c626fcd35e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d", "url": "https://git.kernel.org/stable/c/6ea38e2aeb72349cad50e38899b0ba6fbcb2af3d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa", "url": "https://git.kernel.org/stable/c/d34a5e57632bb5ff825196ddd9a48ca403626dfa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637", "url": "https://git.kernel.org/stable/c/d9b5e2b7a8196850383c70d099bfd39e81ab6637" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e", "url": "https://git.kernel.org/stable/c/e56662160fc24d28cb75ac095cc6415ae1bda43e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1", "url": "https://git.kernel.org/stable/c/e8530b170e464017203e3b8c6c49af6e916aece1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" } ], "release_date": "2024-04-03T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21905", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: limit printed string from FW file\n\nThere's no guarantee here that the file is always with a\nNUL-termination, so reading the string may read beyond the\nend of the TLV. If that's the last TLV in the file, it can\nperhaps even read beyond the end of the file buffer.\n\nFix that by limiting the print format to the size of the\nbuffer we have.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21905" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/38f0d398b6d7640d223db69df022c4a232f24774", "url": "https://git.kernel.org/stable/c/38f0d398b6d7640d223db69df022c4a232f24774" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/47616b82f2d42ea2060334746fed9a2988d845c9", "url": "https://git.kernel.org/stable/c/47616b82f2d42ea2060334746fed9a2988d845c9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/59cdda202829d1d6a095d233386870a59aff986f", "url": "https://git.kernel.org/stable/c/59cdda202829d1d6a095d233386870a59aff986f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/88ed69f924638c7503644e1f8eed1e976f3ffa7a", "url": "https://git.kernel.org/stable/c/88ed69f924638c7503644e1f8eed1e976f3ffa7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b02f8d5a71c8571ccf77f285737c566db73ef5e5", "url": "https://git.kernel.org/stable/c/b02f8d5a71c8571ccf77f285737c566db73ef5e5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c0e626f2b2390472afac52dfe72b29daf9ed8e1d", "url": "https://git.kernel.org/stable/c/c0e626f2b2390472afac52dfe72b29daf9ed8e1d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e0dc2c1bef722cbf16ae557690861e5f91208129", "url": "https://git.kernel.org/stable/c/e0dc2c1bef722cbf16ae557690861e5f91208129" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f265e6031d0bc4fc40c4619cb42466722b46eaa9", "url": "https://git.kernel.org/stable/c/f265e6031d0bc4fc40c4619cb42466722b46eaa9" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21928", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()\n\nThe system can experience a random crash a few minutes after the driver is\nremoved. This issue occurs due to improper handling of memory freeing in\nthe ishtp_hid_remove() function.\n\nThe function currently frees the `driver_data` directly within the loop\nthat destroys the HID devices, which can lead to accessing freed memory.\nSpecifically, `hid_destroy_device()` uses `driver_data` when it calls\n`hid_ishtp_set_feature()` to power off the sensor, so freeing\n`driver_data` beforehand can result in accessing invalid memory.\n\nThis patch resolves the issue by storing the `driver_data` in a temporary\nvariable before calling `hid_destroy_device()`, and then freeing the\n`driver_data` after the device is destroyed.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21928" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/01b18a330cda61cc21423a7d1af92cf31ded8f60", "url": "https://git.kernel.org/stable/c/01b18a330cda61cc21423a7d1af92cf31ded8f60" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/07583a0010696a17fb0942e0b499a62785c5fc9f", "url": "https://git.kernel.org/stable/c/07583a0010696a17fb0942e0b499a62785c5fc9f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0c1fb475ef999d6c22fc3f963fdf20cb3ed1b03d", "url": "https://git.kernel.org/stable/c/0c1fb475ef999d6c22fc3f963fdf20cb3ed1b03d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/560f4d1299342504a6ab8a47f575b5e6b8345ada", "url": "https://git.kernel.org/stable/c/560f4d1299342504a6ab8a47f575b5e6b8345ada" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cf1a6015d2f6b1f0afaa0fd6a0124ff2c7943394", "url": "https://git.kernel.org/stable/c/cf1a6015d2f6b1f0afaa0fd6a0124ff2c7943394" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d3faae7f42181865c799d88c5054176f38ae4625", "url": "https://git.kernel.org/stable/c/d3faae7f42181865c799d88c5054176f38ae4625" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dea6a349bcaf243fff95dfd0428a26be6a0fb44e", "url": "https://git.kernel.org/stable/c/dea6a349bcaf243fff95dfd0428a26be6a0fb44e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/eb0695d87a81e7c1f0509b7d8ee7c65fbc26aec9", "url": "https://git.kernel.org/stable/c/eb0695d87a81e7c1f0509b7d8ee7c65fbc26aec9" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21791", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvrf: use RCU protection in l3mdev_l3_out()\n\nl3mdev_l3_out() can be called without RCU being held:\n\nraw_sendmsg()\n ip_push_pending_frames()\n ip_send_skb()\n ip_local_out()\n __ip_local_out()\n l3mdev_ip_out()\n\nAdd rcu_read_lock() / rcu_read_unlock() pair to avoid\na potential UAF.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21791" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/022cac1c693add610ae76ede03adf4d9d5a2cf21", "url": "https://git.kernel.org/stable/c/022cac1c693add610ae76ede03adf4d9d5a2cf21" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/20a3489b396764cc9376e32a9172bee26a89dc3b", "url": "https://git.kernel.org/stable/c/20a3489b396764cc9376e32a9172bee26a89dc3b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5bb4228c32261d06e4fbece37ec3828bcc005b6b", "url": "https://git.kernel.org/stable/c/5bb4228c32261d06e4fbece37ec3828bcc005b6b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e", "url": "https://git.kernel.org/stable/c/6ccaa5797f5362a2aad6baa6ddaf4715ac2dd51e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6d0ce46a93135d96b7fa075a94a88fe0da8e8773", "url": "https://git.kernel.org/stable/c/6d0ce46a93135d96b7fa075a94a88fe0da8e8773" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7b81425b517accefd46bee854d94954f5c57e019", "url": "https://git.kernel.org/stable/c/7b81425b517accefd46bee854d94954f5c57e019" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c40cb5c03e37552d6eff963187109e2c3f78ef6f", "url": "https://git.kernel.org/stable/c/c40cb5c03e37552d6eff963187109e2c3f78ef6f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c7574740be8ce68a57d0aece24987b9be2114c3c", "url": "https://git.kernel.org/stable/c/c7574740be8ce68a57d0aece24987b9be2114c3c" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2025-02-27T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52757", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential deadlock when releasing mids\n\nAll release_mid() callers seem to hold a reference of @mid so there is\nno need to call kref_put(&mid->refcount, __release_mid) under\n@server->mid_lock spinlock. If they don't, then an use-after-free bug\nwould have occurred anyways.\n\nBy getting rid of such spinlock also fixes a potential deadlock as\nshown below\n\nCPU 0 CPU 1\n------------------------------------------------------------------\ncifs_demultiplex_thread() cifs_debug_data_proc_show()\n release_mid()\n spin_lock(&server->mid_lock);\n spin_lock(&cifs_tcp_ses_lock)\n\t\t\t\t spin_lock(&server->mid_lock)\n __release_mid()\n smb2_find_smb_tcon()\n spin_lock(&cifs_tcp_ses_lock) *deadlock*", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52757" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/99f476e27aad5964ab13777d84fda67d1356dec1", "url": "https://git.kernel.org/stable/c/99f476e27aad5964ab13777d84fda67d1356dec1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9eb44db68c5b7f5aa22b8fc7de74a3e2e08d1f29", "url": "https://git.kernel.org/stable/c/9eb44db68c5b7f5aa22b8fc7de74a3e2e08d1f29" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b9bb9607b1fc12fca51f5632da25b36975f599bf", "url": "https://git.kernel.org/stable/c/b9bb9607b1fc12fca51f5632da25b36975f599bf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1a5962f1462b64fe7b69f20a4b6af8067bc2d26", "url": "https://git.kernel.org/stable/c/c1a5962f1462b64fe7b69f20a4b6af8067bc2d26" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ce49569079a9d4cad26c0f1d4653382fd9a5ca7a", "url": "https://git.kernel.org/stable/c/ce49569079a9d4cad26c0f1d4653382fd9a5ca7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e6322fd177c6885a21dd4609dc5e5c973d1a2eb7", "url": "https://git.kernel.org/stable/c/e6322fd177c6885a21dd4609dc5e5c973d1a2eb7" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2024-05-21T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52988", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()\n\nsnd_hda_get_connections() can return a negative error code.\nIt may lead to accessing 'conn' array at a negative index.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52988" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1b9256c96220bcdba287eeeb90e7c910c77f8c46", "url": "https://git.kernel.org/stable/c/1b9256c96220bcdba287eeeb90e7c910c77f8c46" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2b557fa635e7487f638c0f030c305870839eeda2", "url": "https://git.kernel.org/stable/c/2b557fa635e7487f638c0f030c305870839eeda2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/437e50ef6290ac835d526d0e45f466a0aa69ba1b", "url": "https://git.kernel.org/stable/c/437e50ef6290ac835d526d0e45f466a0aa69ba1b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e1f586ddec48d71016b81acf68ba9f49ca54db8", "url": "https://git.kernel.org/stable/c/6e1f586ddec48d71016b81acf68ba9f49ca54db8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa", "url": "https://git.kernel.org/stable/c/b9cee506da2b7920b5ea02ccd8e78a907d0ee7aa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d6870f3800dbb212ae8433183ee82f566d067c6c", "url": "https://git.kernel.org/stable/c/d6870f3800dbb212ae8433183ee82f566d067c6c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f011360ad234a07cb6fbcc720fff646a93a9f0d6", "url": "https://git.kernel.org/stable/c/f011360ad234a07cb6fbcc720fff646a93a9f0d6" } ], "release_date": "2025-03-27T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21920", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvlan: enforce underlying device type\n\nCurrently, VLAN devices can be created on top of non-ethernet devices.\n\nBesides the fact that it doesn't make much sense, this also causes a\nbug which leaks the address of a kernel function to usermode.\n\nWhen creating a VLAN device, we initialize GARP (garp_init_applicant)\nand MRP (mrp_init_applicant) for the underlying device.\n\nAs part of the initialization process, we add the multicast address of\neach applicant to the underlying device, by calling dev_mc_add.\n\n__dev_mc_add uses dev->addr_len to determine the length of the new\nmulticast address.\n\nThis causes an out-of-bounds read if dev->addr_len is greater than 6,\nsince the multicast addresses provided by GARP and MRP are only 6\nbytes long.\n\nThis behaviour can be reproduced using the following commands:\n\nip tunnel add gretest mode ip6gre local ::1 remote ::2 dev lo\nip l set up dev gretest\nip link add link gretest name vlantest type vlan id 100\n\nThen, the following command will display the address of garp_pdu_rcv:\n\nip maddr show | grep 01:80:c2:00:00:21\n\nFix the bug by enforcing the type of the underlying device during VLAN\ndevice initialization.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21920" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0fb7aa04c19eac4417f360a9f7611a60637bdacc", "url": "https://git.kernel.org/stable/c/0fb7aa04c19eac4417f360a9f7611a60637bdacc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/30e8aee77899173a82ae5ed89f536c096f20aaeb", "url": "https://git.kernel.org/stable/c/30e8aee77899173a82ae5ed89f536c096f20aaeb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3561442599804905c3defca241787cd4546e99a7", "url": "https://git.kernel.org/stable/c/3561442599804905c3defca241787cd4546e99a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a515d13e15536e82c5c7c83eb6cf5bc4827fee5", "url": "https://git.kernel.org/stable/c/5a515d13e15536e82c5c7c83eb6cf5bc4827fee5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7f1564b2b2072b7aa1ac75350e9560a07c7a44fd", "url": "https://git.kernel.org/stable/c/7f1564b2b2072b7aa1ac75350e9560a07c7a44fd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b33a534610067ade2bdaf2052900aaad99701353", "url": "https://git.kernel.org/stable/c/b33a534610067ade2bdaf2052900aaad99701353" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b6c72479748b7ea09f53ed64b223cee6463dc278", "url": "https://git.kernel.org/stable/c/b6c72479748b7ea09f53ed64b223cee6463dc278" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fa40ebef69234e39ec2d26930d045f2fb9a8cb2b", "url": "https://git.kernel.org/stable/c/fa40ebef69234e39ec2d26930d045f2fb9a8cb2b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21785", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array\n\nThe loop that detects/populates cache information already has a bounds\ncheck on the array size but does not account for cache levels with\nseparate data/instructions cache. Fix this by incrementing the index\nfor any populated leaf (instead of any populated level).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21785" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa", "url": "https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4ff25f0b18d1d0174c105e4620428bcdc1213860", "url": "https://git.kernel.org/stable/c/4ff25f0b18d1d0174c105e4620428bcdc1213860" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/67b99a2b5811df4294c2ad50f9bff3b6a08bd618", "url": "https://git.kernel.org/stable/c/67b99a2b5811df4294c2ad50f9bff3b6a08bd618" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/715eb1af64779e1b1aa0a7b2ffb81414d9f708e5", "url": "https://git.kernel.org/stable/c/715eb1af64779e1b1aa0a7b2ffb81414d9f708e5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/875d742cf5327c93cba1f11e12b08d3cce7a88d2", "url": "https://git.kernel.org/stable/c/875d742cf5327c93cba1f11e12b08d3cce7a88d2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/88a3e6afaf002250220793df99404977d343db14", "url": "https://git.kernel.org/stable/c/88a3e6afaf002250220793df99404977d343db14" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ab90894f33c15b14c1cee6959ab6c8dcb09127f8", "url": "https://git.kernel.org/stable/c/ab90894f33c15b14c1cee6959ab6c8dcb09127f8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e4fde33107351ec33f1a64188612fbc6ca659284", "url": "https://git.kernel.org/stable/c/e4fde33107351ec33f1a64188612fbc6ca659284" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2025-02-27T03:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-27008", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: nv04: Fix out of bounds access\n\nWhen Output Resource (dcb->or) value is assigned in\nfabricate_dcb_output(), there may be out of bounds access to\ndac_users array in case dcb->or is zero because ffs(dcb->or) is\nused as index there.\nThe 'or' argument of fabricate_dcb_output() must be interpreted as a\nnumber of bit to set, not value.\n\nUtilize macros from 'enum nouveau_or' in calls instead of hardcoding.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-27008" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062", "url": "https://git.kernel.org/stable/c/097c7918fcfa1dee233acfd1f3029f00c3bc8062" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5", "url": "https://git.kernel.org/stable/c/26212da39ee14a52c76a202c6ae5153a84f579a5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1", "url": "https://git.kernel.org/stable/c/5050ae879a828d752b439e3827aac126709da6d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face", "url": "https://git.kernel.org/stable/c/5fd4b090304e450aa0e7cc9cc2b4873285c6face" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042", "url": "https://git.kernel.org/stable/c/6690cc2732e2a8d0eaca44dcbac032a4b0148042" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb", "url": "https://git.kernel.org/stable/c/c2b97f26f081ceec3298151481687071075a25cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e", "url": "https://git.kernel.org/stable/c/cf92bb778eda7830e79452c6917efa8474a30c1e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04", "url": "https://git.kernel.org/stable/c/df0991da7db846f7fa4ec6740350f743d3b69b04" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DAMSOZXJEPUOXW33WZYWCVAY7Z5S7OOY/" }, { "category": "external", "summary": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCBZZEC7L7KTWWAS2NLJK6SO3IZIL4WW/" } ], "release_date": "2024-05-01T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21927", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()\n\nnvme_tcp_recv_pdu() doesn't check the validity of the header length.\nWhen header digests are enabled, a target might send a packet with an\ninvalid header length (e.g. 255), causing nvme_tcp_verify_hdgst()\nto access memory outside the allocated area and cause memory corruptions\nby overwriting it with the calculated digest.\n\nFix this by rejecting packets with an unexpected header length.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21927" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/22b06c89aa6b2d1ecb8aea72edfb9d53af8d5126", "url": "https://git.kernel.org/stable/c/22b06c89aa6b2d1ecb8aea72edfb9d53af8d5126" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9fbc953d6b38bc824392e01850f0aeee3b348722", "url": "https://git.kernel.org/stable/c/9fbc953d6b38bc824392e01850f0aeee3b348722" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ad95bab0cd28ed77c2c0d0b6e76e03e031391064", "url": "https://git.kernel.org/stable/c/ad95bab0cd28ed77c2c0d0b6e76e03e031391064" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-50275", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/sve: Discard stale CPU state when handling SVE traps\n\nThe logic for handling SVE traps manipulates saved FPSIMD/SVE state\nincorrectly, and a race with preemption can result in a task having\nTIF_SVE set and TIF_FOREIGN_FPSTATE clear even though the live CPU state\nis stale (e.g. with SVE traps enabled). This has been observed to result\nin warnings from do_sve_acc() where SVE traps are not expected while\nTIF_SVE is set:\n\n| if (test_and_set_thread_flag(TIF_SVE))\n| WARN_ON(1); /* SVE access shouldn't have trapped */\n\nWarnings of this form have been reported intermittently, e.g.\n\n https://lore.kernel.org/linux-arm-kernel/CA+G9fYtEGe_DhY2Ms7+L7NKsLYUomGsgqpdBj+QwDLeSg=JhGg@mail.gmail.com/\n https://lore.kernel.org/linux-arm-kernel/000000000000511e9a060ce5a45c@google.com/\n\nThe race can occur when the SVE trap handler is preempted before and\nafter manipulating the saved FPSIMD/SVE state, starting and ending on\nthe same CPU, e.g.\n\n| void do_sve_acc(unsigned long esr, struct pt_regs *regs)\n| {\n| // Trap on CPU 0 with TIF_SVE clear, SVE traps enabled\n| // task->fpsimd_cpu is 0.\n| // per_cpu_ptr(&fpsimd_last_state, 0) is task.\n|\n| ...\n|\n| // Preempted; migrated from CPU 0 to CPU 1.\n| // TIF_FOREIGN_FPSTATE is set.\n|\n| get_cpu_fpsimd_context();\n|\n| if (test_and_set_thread_flag(TIF_SVE))\n| WARN_ON(1); /* SVE access shouldn't have trapped */\n|\n| sve_init_regs() {\n| if (!test_thread_flag(TIF_FOREIGN_FPSTATE)) {\n| ...\n| } else {\n| fpsimd_to_sve(current);\n| current->thread.fp_type = FP_STATE_SVE;\n| }\n| }\n|\n| put_cpu_fpsimd_context();\n|\n| // Preempted; migrated from CPU 1 to CPU 0.\n| // task->fpsimd_cpu is still 0\n| // If per_cpu_ptr(&fpsimd_last_state, 0) is still task then:\n| // - Stale HW state is reused (with SVE traps enabled)\n| // - TIF_FOREIGN_FPSTATE is cleared\n| // - A return to userspace skips HW state restore\n| }\n\nFix the case where the state is not live and TIF_FOREIGN_FPSTATE is set\nby calling fpsimd_flush_task_state() to detach from the saved CPU\nstate. This ensures that a subsequent context switch will not reuse the\nstale CPU state, and will instead set TIF_FOREIGN_FPSTATE, forcing the\nnew state to be reloaded from memory prior to a return to userspace.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50275" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/51d11ea0250d6ee461987403bbfd4b2abb5613a7", "url": "https://git.kernel.org/stable/c/51d11ea0250d6ee461987403bbfd4b2abb5613a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/51d3d80a6dc314982a9a0aeb0961085922a1aa15", "url": "https://git.kernel.org/stable/c/51d3d80a6dc314982a9a0aeb0961085922a1aa15" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/751ecf6afd6568adc98f2a6052315552c0483d18", "url": "https://git.kernel.org/stable/c/751ecf6afd6568adc98f2a6052315552c0483d18" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de529504b3274d57caf8f66800b714b0d3ee235a", "url": "https://git.kernel.org/stable/c/de529504b3274d57caf8f66800b714b0d3ee235a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fa9ce027b3ce37a2bb173bf2553b5caa438fd8c9", "url": "https://git.kernel.org/stable/c/fa9ce027b3ce37a2bb173bf2553b5caa438fd8c9" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html" } ], "release_date": "2024-11-19T02:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-57947", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_set_pipapo: fix initial map fill\n\nThe initial buffer has to be inited to all-ones, but it must restrict\nit to the size of the first field, not the total field size.\n\nAfter each round in the map search step, the result and the fill map\nare swapped, so if we have a set where f->bsize of the first element\nis smaller than m->bsize_max, those one-bits are leaked into future\nrounds result map.\n\nThis makes pipapo find an incorrect matching results for sets where\nfirst field size is not the largest.\n\nFollowup patch adds a test case to nft_concat_range.sh selftest script.\n\nThanks to Stefano Brivio for pointing out that we need to zero out\nthe remainder explicitly, only correcting memset() argument isn't enough.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-57947" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/69b6a67f7052905e928d75a0c5871de50e686986", "url": "https://git.kernel.org/stable/c/69b6a67f7052905e928d75a0c5871de50e686986" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/77bf0c4ab928ca4c9a99311f4f70ba0c17fecba9", "url": "https://git.kernel.org/stable/c/77bf0c4ab928ca4c9a99311f4f70ba0c17fecba9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/791a615b7ad2258c560f91852be54b0480837c93", "url": "https://git.kernel.org/stable/c/791a615b7ad2258c560f91852be54b0480837c93" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8058c88ac0df21239daee54b5934d5c80ca9685f", "url": "https://git.kernel.org/stable/c/8058c88ac0df21239daee54b5934d5c80ca9685f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/957a4d1c4c5849e4515c9fb4db21bf85318103dc", "url": "https://git.kernel.org/stable/c/957a4d1c4c5849e4515c9fb4db21bf85318103dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9625c46ce6fd4f922595a4b32b1de5066d70464f", "url": "https://git.kernel.org/stable/c/9625c46ce6fd4f922595a4b32b1de5066d70464f" } ], "release_date": "2025-01-23T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-57980", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Fix double free in error path\n\nIf the uvc_status_init() function fails to allocate the int_urb, it will\nfree the dev->status pointer but doesn't reset the pointer to NULL. This\nresults in the kfree() call in uvc_status_cleanup() trying to\ndouble-free the memory. Fix it by resetting the dev->status pointer to\nNULL after freeing it.\n\nReviewed by: Ricardo Ribalda ", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-57980" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277", "url": "https://git.kernel.org/stable/c/3ba8884a56a3eb97c22f0ce0e4dd410d4ca4c277" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6c36dcd662ec5276782838660f8533a7cb26be49", "url": "https://git.kernel.org/stable/c/6c36dcd662ec5276782838660f8533a7cb26be49" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/87522ef165e5b6de8ef98cc318f3335166a1512c", "url": "https://git.kernel.org/stable/c/87522ef165e5b6de8ef98cc318f3335166a1512c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9232719ac9ce4d5c213cebda23d72aec3e1c4c0d", "url": "https://git.kernel.org/stable/c/9232719ac9ce4d5c213cebda23d72aec3e1c4c0d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bac", "url": "https://git.kernel.org/stable/c/c6ef3a7fa97ec823a1e1af9085cf13db9f7b3bac" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d1f8e69eec91d5a75ef079778a5d0151db2a7f22", "url": "https://git.kernel.org/stable/c/d1f8e69eec91d5a75ef079778a5d0151db2a7f22" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2d", "url": "https://git.kernel.org/stable/c/d6e5ba2516c5bef87c1fcb8189b6f3cad7c64b2d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d8e63dd7b6683969d3d47c7b8e9635f96d554ad4", "url": "https://git.kernel.org/stable/c/d8e63dd7b6683969d3d47c7b8e9635f96d554ad4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2025-02-27T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52572", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix UAF in cifs_demultiplex_thread()\n\nThere is a UAF when xfstests on cifs:\n\n BUG: KASAN: use-after-free in smb2_is_network_name_deleted+0x27/0x160\n Read of size 4 at addr ffff88810103fc08 by task cifsd/923\n\n CPU: 1 PID: 923 Comm: cifsd Not tainted 6.1.0-rc4+ #45\n ...\n Call Trace:\n \n dump_stack_lvl+0x34/0x44\n print_report+0x171/0x472\n kasan_report+0xad/0x130\n kasan_check_range+0x145/0x1a0\n smb2_is_network_name_deleted+0x27/0x160\n cifs_demultiplex_thread.cold+0x172/0x5a4\n kthread+0x165/0x1a0\n ret_from_fork+0x1f/0x30\n \n\n Allocated by task 923:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x54/0x60\n kmem_cache_alloc+0x147/0x320\n mempool_alloc+0xe1/0x260\n cifs_small_buf_get+0x24/0x60\n allocate_buffers+0xa1/0x1c0\n cifs_demultiplex_thread+0x199/0x10d0\n kthread+0x165/0x1a0\n ret_from_fork+0x1f/0x30\n\n Freed by task 921:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x2a/0x40\n ____kasan_slab_free+0x143/0x1b0\n kmem_cache_free+0xe3/0x4d0\n cifs_small_buf_release+0x29/0x90\n SMB2_negotiate+0x8b7/0x1c60\n smb2_negotiate+0x51/0x70\n cifs_negotiate_protocol+0xf0/0x160\n cifs_get_smb_ses+0x5fa/0x13c0\n mount_get_conns+0x7a/0x750\n cifs_mount+0x103/0xd00\n cifs_smb3_do_mount+0x1dd/0xcb0\n smb3_get_tree+0x1d5/0x300\n vfs_get_tree+0x41/0xf0\n path_mount+0x9b3/0xdd0\n __x64_sys_mount+0x190/0x1d0\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x46/0xb0\n\nThe UAF is because:\n\n mount(pid: 921) | cifsd(pid: 923)\n-------------------------------|-------------------------------\n | cifs_demultiplex_thread\nSMB2_negotiate |\n cifs_send_recv |\n compound_send_recv |\n smb_send_rqst |\n wait_for_response |\n wait_event_state [1] |\n | standard_receive3\n | cifs_handle_standard\n | handle_mid\n | mid->resp_buf = buf; [2]\n | dequeue_mid [3]\n KILL the process [4] |\n resp_iov[i].iov_base = buf |\n free_rsp_buf [5] |\n | is_network_name_deleted [6]\n | callback\n\n1. After send request to server, wait the response until\n mid->mid_state != SUBMITTED;\n2. Receive response from server, and set it to mid;\n3. Set the mid state to RECEIVED;\n4. Kill the process, the mid state already RECEIVED, get 0;\n5. Handle and release the negotiate response;\n6. UAF.\n\nIt can be easily reproduce with add some delay in [3] - [6].\n\nOnly sync call has the problem since async call's callback is\nexecuted in cifsd process.\n\nAdd an extra state to mark the mid state to READY before wakeup the\nwaitter, then it can get the resp safely.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52572" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/76569e3819e0bb59fc19b1b8688b017e627c268a", "url": "https://git.kernel.org/stable/c/76569e3819e0bb59fc19b1b8688b017e627c268a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/908b3b5e97d25e879de3d1f172a255665491c2c3", "url": "https://git.kernel.org/stable/c/908b3b5e97d25e879de3d1f172a255665491c2c3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/99960d282fba6634fa758df4124cb73ef8a77d8a", "url": "https://git.kernel.org/stable/c/99960d282fba6634fa758df4124cb73ef8a77d8a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d527f51331cace562393a8038d870b3e9916686f", "url": "https://git.kernel.org/stable/c/d527f51331cace562393a8038d870b3e9916686f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ed3b36f351d97dacb62cd0f399e8cf79f73bd30a", "url": "https://git.kernel.org/stable/c/ed3b36f351d97dacb62cd0f399e8cf79f73bd30a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fe87e2d0e6265859c659a3ef1e2559a83c5e8e68", "url": "https://git.kernel.org/stable/c/fe87e2d0e6265859c659a3ef1e2559a83c5e8e68" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2024-03-02T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-53099", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check validity of link->type in bpf_link_show_fdinfo()\n\nIf a newly-added link type doesn't invoke BPF_LINK_TYPE(), accessing\nbpf_link_type_strs[link->type] may result in an out-of-bounds access.\n\nTo spot such missed invocations early in the future, checking the\nvalidity of link->type in bpf_link_show_fdinfo() and emitting a warning\nwhen such invocations are missed.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53099" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/24fec234d2ba9ca3c14e545ebe3fd6dcb47f074d", "url": "https://git.kernel.org/stable/c/24fec234d2ba9ca3c14e545ebe3fd6dcb47f074d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4e8074bb33d18f56af30a0252cb3606d27eb1c13", "url": "https://git.kernel.org/stable/c/4e8074bb33d18f56af30a0252cb3606d27eb1c13" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/79f87a6ec39fb5968049a6775a528bf58b25c20a", "url": "https://git.kernel.org/stable/c/79f87a6ec39fb5968049a6775a528bf58b25c20a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8421d4c8762bd022cb491f2f0f7019ef51b4f0a7", "url": "https://git.kernel.org/stable/c/8421d4c8762bd022cb491f2f0f7019ef51b4f0a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b3eb1b6a9f745d6941b345f0fae014dc8bb06d36", "url": "https://git.kernel.org/stable/c/b3eb1b6a9f745d6941b345f0fae014dc8bb06d36" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d5092b0a1aaf35d77ebd8d33384d7930bec5cb5d", "url": "https://git.kernel.org/stable/c/d5092b0a1aaf35d77ebd8d33384d7930bec5cb5d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html" } ], "release_date": "2024-11-25T22:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-58069", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrtc: pcf85063: fix potential OOB write in PCF85063 NVMEM read\n\nThe nvmem interface supports variable buffer sizes, while the regmap\ninterface operates with fixed-size storage. If an nvmem client uses a\nbuffer size less than 4 bytes, regmap_read will write out of bounds\nas it expects the buffer to point at an unsigned int.\n\nFix this by using an intermediary unsigned int to hold the value.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-58069" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4", "url": "https://git.kernel.org/stable/c/21cd59fcb9952eb7505da2bdfc1eb9c619df3ff4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c", "url": "https://git.kernel.org/stable/c/3ab8c5ed4f84fa20cd16794fe8dc31f633fbc70c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/517aedb365f2c94e2d7e0b908ac7127df76203a1", "url": "https://git.kernel.org/stable/c/517aedb365f2c94e2d7e0b908ac7127df76203a1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7c", "url": "https://git.kernel.org/stable/c/6f2a8ca9a0a38589f52a7f0fb9425b9ba987ae7c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9adefa7b9559d0f21034a5d5ec1b55840c9348b9", "url": "https://git.kernel.org/stable/c/9adefa7b9559d0f21034a5d5ec1b55840c9348b9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1", "url": "https://git.kernel.org/stable/c/c72b7a474d3f445bf0c5bcf8ffed332c78eb28a1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e5536677da803ed54a29a446515c28dce7d3d574", "url": "https://git.kernel.org/stable/c/e5536677da803ed54a29a446515c28dce7d3d574" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e5e06455760f2995b16a176033909347929d1128", "url": "https://git.kernel.org/stable/c/e5e06455760f2995b16a176033909347929d1128" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2025-03-06T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-49256", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatch_queue: Actually free the watch\n\nfree_watch() does everything barring actually freeing the watch object. Fix\nthis by adding the missing kfree.\n\nkmemleak produces a report something like the following. Note that as an\naddress can be seen in the first word, the watch would appear to have gone\nthrough call_rcu().\n\nBUG: memory leak\nunreferenced object 0xffff88810ce4a200 (size 96):\n comm \"syz-executor352\", pid 3605, jiffies 4294947473 (age 13.720s)\n hex dump (first 32 bytes):\n e0 82 48 0d 81 88 ff ff 00 00 00 00 00 00 00 00 ..H.............\n 80 a2 e4 0c 81 88 ff ff 00 00 00 00 00 00 00 00 ................\n backtrace:\n [] kmalloc include/linux/slab.h:581 [inline]\n [] kzalloc include/linux/slab.h:714 [inline]\n [] keyctl_watch_key+0xec/0x2e0 security/keys/keyctl.c:1800\n [] __do_sys_keyctl+0x3c4/0x490 security/keys/keyctl.c:2016\n [] do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n [] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n [] entry_SYSCALL_64_after_hwframe+0x44/0xae", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-49256" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/31824613a42aacdcbeb325bf07a1c8247a11ebe2", "url": "https://git.kernel.org/stable/c/31824613a42aacdcbeb325bf07a1c8247a11ebe2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3d8dcf278b1ee1eff1e90be848fa2237db4c07a7", "url": "https://git.kernel.org/stable/c/3d8dcf278b1ee1eff1e90be848fa2237db4c07a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7e8c9b0df07a77f0d072603b8ced2677e30e1893", "url": "https://git.kernel.org/stable/c/7e8c9b0df07a77f0d072603b8ced2677e30e1893" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d92be1a09fbb3dd65600dbfe7eedb40e7228e4b", "url": "https://git.kernel.org/stable/c/9d92be1a09fbb3dd65600dbfe7eedb40e7228e4b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f69aecb49968e14196366bbe896eab0a904229f5", "url": "https://git.kernel.org/stable/c/f69aecb49968e14196366bbe896eab0a904229f5" } ], "release_date": "2025-02-26T07:01:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-37785", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix OOB read when checking dotdot dir\n\nMounting a corrupted filesystem with directory which contains '.' dir\nentry with rec_len == block size results in out-of-bounds read (later\non, when the corrupted directory is removed).\n\next4_empty_dir() assumes every ext4 directory contains at least '.'\nand '..' as directory entries in the first data block. It first loads\nthe '.' dir entry, performs sanity checks by calling ext4_check_dir_entry()\nand then uses its rec_len member to compute the location of '..' dir\nentry (in ext4_next_entry). It assumes the '..' dir entry fits into the\nsame data block.\n\nIf the rec_len of '.' is precisely one block (4KB), it slips through the\nsanity checks (it is considered the last directory entry in the data\nblock) and leaves \"struct ext4_dir_entry_2 *de\" point exactly past the\nmemory slot allocated to the data block. The following call to\next4_check_dir_entry() on new value of de then dereferences this pointer\nwhich results in out-of-bounds mem access.\n\nFix this by extending __ext4_check_dir_entry() to check for '.' dir\nentries that reach the end of data block. Make sure to ignore the phony\ndir entries for checksum (by checking name_len for non-zero).\n\nNote: This is reported by KASAN as use-after-free in case another\nstructure was recently freed from the slot past the bound, but it is\nreally an OOB read.\n\nThis issue was found by syzkaller tool.\n\nCall Trace:\n[ 38.594108] BUG: KASAN: slab-use-after-free in __ext4_check_dir_entry+0x67e/0x710\n[ 38.594649] Read of size 2 at addr ffff88802b41a004 by task syz-executor/5375\n[ 38.595158]\n[ 38.595288] CPU: 0 UID: 0 PID: 5375 Comm: syz-executor Not tainted 6.14.0-rc7 #1\n[ 38.595298] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\n[ 38.595304] Call Trace:\n[ 38.595308] \n[ 38.595311] dump_stack_lvl+0xa7/0xd0\n[ 38.595325] print_address_description.constprop.0+0x2c/0x3f0\n[ 38.595339] ? __ext4_check_dir_entry+0x67e/0x710\n[ 38.595349] print_report+0xaa/0x250\n[ 38.595359] ? __ext4_check_dir_entry+0x67e/0x710\n[ 38.595368] ? kasan_addr_to_slab+0x9/0x90\n[ 38.595378] kasan_report+0xab/0xe0\n[ 38.595389] ? __ext4_check_dir_entry+0x67e/0x710\n[ 38.595400] __ext4_check_dir_entry+0x67e/0x710\n[ 38.595410] ext4_empty_dir+0x465/0x990\n[ 38.595421] ? __pfx_ext4_empty_dir+0x10/0x10\n[ 38.595432] ext4_rmdir.part.0+0x29a/0xd10\n[ 38.595441] ? __dquot_initialize+0x2a7/0xbf0\n[ 38.595455] ? __pfx_ext4_rmdir.part.0+0x10/0x10\n[ 38.595464] ? __pfx___dquot_initialize+0x10/0x10\n[ 38.595478] ? down_write+0xdb/0x140\n[ 38.595487] ? __pfx_down_write+0x10/0x10\n[ 38.595497] ext4_rmdir+0xee/0x140\n[ 38.595506] vfs_rmdir+0x209/0x670\n[ 38.595517] ? lookup_one_qstr_excl+0x3b/0x190\n[ 38.595529] do_rmdir+0x363/0x3c0\n[ 38.595537] ? __pfx_do_rmdir+0x10/0x10\n[ 38.595544] ? strncpy_from_user+0x1ff/0x2e0\n[ 38.595561] __x64_sys_unlinkat+0xf0/0x130\n[ 38.595570] do_syscall_64+0x5b/0x180\n[ 38.595583] entry_SYSCALL_64_after_hwframe+0x76/0x7e", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37785" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/14da7dbecb430e35b5889da8dae7bef33173b351", "url": "https://git.kernel.org/stable/c/14da7dbecb430e35b5889da8dae7bef33173b351" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/52a5509ab19a5d3afe301165d9b5787bba34d842", "url": "https://git.kernel.org/stable/c/52a5509ab19a5d3afe301165d9b5787bba34d842" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/53bc45da8d8da92ec07877f5922b130562eb4b00", "url": "https://git.kernel.org/stable/c/53bc45da8d8da92ec07877f5922b130562eb4b00" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/89503e5eae64637d0fa2218912b54660effe7d93", "url": "https://git.kernel.org/stable/c/89503e5eae64637d0fa2218912b54660effe7d93" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ac28c5684c1cdab650a7e5065b19e91577d37a4b", "url": "https://git.kernel.org/stable/c/ac28c5684c1cdab650a7e5065b19e91577d37a4b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b47584c556444cf7acb66b26a62cbc348eb92b78", "url": "https://git.kernel.org/stable/c/b47584c556444cf7acb66b26a62cbc348eb92b78" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b7531a4f99c3887439d778afaf418d1a01a5f01b", "url": "https://git.kernel.org/stable/c/b7531a4f99c3887439d778afaf418d1a01a5f01b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d5e206778e96e8667d3bde695ad372c296dc9353", "url": "https://git.kernel.org/stable/c/d5e206778e96e8667d3bde695ad372c296dc9353" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e47f472a664d70a3d104a6c2a035cdff55a719b4", "url": "https://git.kernel.org/stable/c/e47f472a664d70a3d104a6c2a035cdff55a719b4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-18T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52922", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\ncan: bcm: Fix UAF in bcm_proc_show()\nBUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80\nRead of size 8 at addr ffff888155846230 by task cat/7862\nCPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 #230\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\nCall Trace:\n\ndump_stack_lvl+0xd5/0x150\nprint_report+0xc1/0x5e0\nkasan_report+0xba/0xf0\nbcm_proc_show+0x969/0xa80\nseq_read_iter+0x4f6/0x1260\nseq_read+0x165/0x210\nproc_reg_read+0x227/0x300\nvfs_read+0x1d5/0x8d0\nksys_read+0x11e/0x240\ndo_syscall_64+0x35/0xb0\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\nAllocated by task 7846:\nkasan_save_stack+0x1e/0x40\nkasan_set_track+0x21/0x30\n__kasan_kmalloc+0x9e/0xa0\nbcm_sendmsg+0x264b/0x44e0\nsock_sendmsg+0xda/0x180\n____sys_sendmsg+0x735/0x920\n___sys_sendmsg+0x11d/0x1b0\n__sys_sendmsg+0xfa/0x1d0\ndo_syscall_64+0x35/0xb0\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\nFreed by task 7846:\nkasan_save_stack+0x1e/0x40\nkasan_set_track+0x21/0x30\nkasan_save_free_info+0x27/0x40\n____kasan_slab_free+0x161/0x1c0\nslab_free_freelist_hook+0x119/0x220\n__kmem_cache_free+0xb4/0x2e0\nrcu_core+0x809/0x1bd0\nbcm_op is freed before procfs entry be removed in bcm_release(),\nthis lead to bcm_proc_show() may read the freed bcm_op.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52922" } ], "release_date": "2024-11-28T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2021-47098", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (lm90) Prevent integer overflow/underflow in hysteresis calculations\n\nCommit b50aa49638c7 (\"hwmon: (lm90) Prevent integer underflows of\ntemperature calculations\") addressed a number of underflow situations\nwhen writing temperature limits. However, it missed one situation, seen\nwhen an attempt is made to set the hysteresis value to MAX_LONG and the\ncritical temperature limit is negative.\n\nUse clamp_val() when setting the hysteresis temperature to ensure that\nthe provided value can never overflow or underflow.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2021-47098" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/55840b9eae5367b5d5b29619dc2fb7e4596dba46", "url": "https://git.kernel.org/stable/c/55840b9eae5367b5d5b29619dc2fb7e4596dba46" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d105f30bea9104c590a9e5b495cb8a49bdfe405f", "url": "https://git.kernel.org/stable/c/d105f30bea9104c590a9e5b495cb8a49bdfe405f" } ], "release_date": "2024-03-04T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-05-20T07:17:29Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1747725447" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els13.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }