{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "udmabuf: fix a buf size overflow issue during udmabuf creation {CVE-2025-37803}\n- bpf: Prevent tail call between progs attached to different hooks {CVE-2024-50063}\n- nfsd: fix possible badness in FREE_STATEID {CVE-2024-50043}\n- nfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open {CVE-2024-46682}\n- nfsd: fix race between laundromat and free_stateid {CVE-2024-50106}\n- nfsd: split sc_status out of sc_type {CVE-2024-46682}\n- net: gso: fix ownership in __udp_gso_segment {CVE-2025-21926}\n- net: fix geneve_opt length integer overflow {CVE-2025-22055}\n- net: usb: lan78xx: Fix double free issue with interrupt buffer allocation {CVE-2024-53213}\n- mm/khugepaged: invoke MMU notifiers in shmem/file collapse paths {CVE-2022-48991}\n- xfrm: state: fix out-of-bounds read during lookup {CVE-2024-57982}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1751916475.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "tracking": { "current_release_date": "2026-02-16T09:29:04Z", "generator": { "date": "2026-02-16T09:29:04Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1751916475", "initial_release_date": "2025-07-07T19:27:57Z", "revision_history": [ { "date": "2025-07-07T19:27:57Z", "number": "1", "summary": "Initial version" }, { "date": "2025-07-09T15:24:23Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-02-16T09:29:04Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "kernel: Fix of 10 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els15?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els15?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els15?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els15?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els15?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els15?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product_id": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=noarch" } } }, { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.1101.el9_2.tuxcare.7.els15?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-48991", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/khugepaged: invoke MMU notifiers in shmem/file collapse paths\n\nAny codepath that zaps page table entries must invoke MMU notifiers to\nensure that secondary MMUs (like KVM) don't keep accessing pages which\naren't mapped anymore. Secondary MMUs don't hold their own references to\npages that are mirrored over, so failing to notify them can lead to page\nuse-after-free.\n\nI'm marking this as addressing an issue introduced in commit f3f0e1d2150b\n(\"khugepaged: add support of collapse for tmpfs/shmem pages\"), but most of\nthe security impact of this only came in commit 27e1f8273113 (\"khugepaged:\nenable collapse pmd for pte-mapped THP\"), which actually omitted flushes\nfor the removal of present PTEs, not just for the removal of empty page\ntables.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-48991" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a3f8c6cd29d9078cc81b29d39d0e9ae1d6a03c3", "url": "https://git.kernel.org/stable/c/1a3f8c6cd29d9078cc81b29d39d0e9ae1d6a03c3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/275c626c131cfe141beeb6c575e31fa53d32da19", "url": "https://git.kernel.org/stable/c/275c626c131cfe141beeb6c575e31fa53d32da19" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5450535901d89a5dcca5fbbc59a24fe89caeb465", "url": "https://git.kernel.org/stable/c/5450535901d89a5dcca5fbbc59a24fe89caeb465" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5ffc2a75534d9d74d49760f983f8eb675fa63d69", "url": "https://git.kernel.org/stable/c/5ffc2a75534d9d74d49760f983f8eb675fa63d69" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7f445ca2e0e59c7971d0b7b853465e50844ab596", "url": "https://git.kernel.org/stable/c/7f445ca2e0e59c7971d0b7b853465e50844ab596" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c23105673228c349739e958fa33955ed8faddcaf", "url": "https://git.kernel.org/stable/c/c23105673228c349739e958fa33955ed8faddcaf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f268f6cf875f3220afc77bdd0bf1bb136eb54db9", "url": "https://git.kernel.org/stable/c/f268f6cf875f3220afc77bdd0bf1bb136eb54db9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ff2a1a6f869650aec99e9d070b5ab625bfbc5bc3", "url": "https://git.kernel.org/stable/c/ff2a1a6f869650aec99e9d070b5ab625bfbc5bc3" } ], "release_date": "2024-10-21T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-50043", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix possible badness in FREE_STATEID\n\nWhen multiple FREE_STATEIDs are sent for the same delegation stateid,\nit can lead to a possible either use-after-free or counter refcount\nunderflow errors.\n\nIn nfsd4_free_stateid() under the client lock we find a delegation\nstateid, however the code drops the lock before calling nfs4_put_stid(),\nthat allows another FREE_STATE to find the stateid again. The first one\nwill proceed to then free the stateid which leads to either\nuse-after-free or decrementing already zeroed counter.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50043" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7ca9e472ce5c67daa3188a348ece8c02a0765039", "url": "https://git.kernel.org/stable/c/7ca9e472ce5c67daa3188a348ece8c02a0765039" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c88c150a467fcb670a1608e2272beeee3e86df6e", "url": "https://git.kernel.org/stable/c/c88c150a467fcb670a1608e2272beeee3e86df6e" } ], "release_date": "2024-10-21T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21979", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: cancel wiphy_work before freeing wiphy\n\nA wiphy_work can be queued from the moment the wiphy is allocated and\ninitialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the\nrdev::wiphy_work is getting queued.\n\nIf wiphy_free is called before the rdev::wiphy_work had a chance to run,\nthe wiphy memory will be freed, and then when it eventally gets to run\nit'll use invalid memory.\n\nFix this by canceling the work before freeing the wiphy.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21979" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0272d4af7f92997541d8bbf4c51918b93ded6ee2", "url": "https://git.kernel.org/stable/c/0272d4af7f92997541d8bbf4c51918b93ded6ee2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/72d520476a2fab6f3489e8388ab524985d6c4b90", "url": "https://git.kernel.org/stable/c/72d520476a2fab6f3489e8388ab524985d6c4b90" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/75d262ad3c36d52852d764588fcd887f0fcd9138", "url": "https://git.kernel.org/stable/c/75d262ad3c36d52852d764588fcd887f0fcd9138" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8930a3e1568cf534f86c8ed2def817c6d0528fc1", "url": "https://git.kernel.org/stable/c/8930a3e1568cf534f86c8ed2def817c6d0528fc1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a5158d67bff06cb6fea31be39aeb319fd908ed8e", "url": "https://git.kernel.org/stable/c/a5158d67bff06cb6fea31be39aeb319fd908ed8e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dea22de162058216a90f2706f0d0b36f0ff309fd", "url": "https://git.kernel.org/stable/c/dea22de162058216a90f2706f0d0b36f0ff309fd" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-53213", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: usb: lan78xx: Fix double free issue with interrupt buffer allocation\n\nIn lan78xx_probe(), the buffer `buf` was being freed twice: once\nimplicitly through `usb_free_urb(dev->urb_intr)` with the\n`URB_FREE_BUFFER` flag and again explicitly by `kfree(buf)`. This caused\na double free issue.\n\nTo resolve this, reordered `kmalloc()` and `usb_alloc_urb()` calls to\nsimplify the initialization sequence and removed the redundant\n`kfree(buf)`. Now, `buf` is allocated after `usb_alloc_urb()`, ensuring\nit is correctly managed by `usb_fill_int_urb()` and freed by\n`usb_free_urb()` as intended.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53213" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/03819abbeb11117dcbba40bfe322b88c0c88a6b6", "url": "https://git.kernel.org/stable/c/03819abbeb11117dcbba40bfe322b88c0c88a6b6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7ac9f3c981eeceee2ec4d30d850f4a6f50a1ec40", "url": "https://git.kernel.org/stable/c/7ac9f3c981eeceee2ec4d30d850f4a6f50a1ec40" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/977128343fc2a30737399b58df8ea77e94f164bd", "url": "https://git.kernel.org/stable/c/977128343fc2a30737399b58df8ea77e94f164bd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a422ebec863d99d5607fb41bb7af3347fcb436d3", "url": "https://git.kernel.org/stable/c/a422ebec863d99d5607fb41bb7af3347fcb436d3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b09512aea6223eec756f52aa584fc29eeab57480", "url": "https://git.kernel.org/stable/c/b09512aea6223eec756f52aa584fc29eeab57480" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html" } ], "release_date": "2024-12-27T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-57982", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfrm: state: fix out-of-bounds read during lookup\n\nlookup and resize can run in parallel.\n\nThe xfrm_state_hash_generation seqlock ensures a retry, but the hash\nfunctions can observe a hmask value that is too large for the new hlist\narray.\n\nrehash does:\n rcu_assign_pointer(net->xfrm.state_bydst, ndst) [..]\n net->xfrm.state_hmask = nhashmask;\n\nWhile state lookup does:\n h = xfrm_dst_hash(net, daddr, saddr, tmpl->reqid, encap_family);\n hlist_for_each_entry_rcu(x, net->xfrm.state_bydst + h, bydst) {\n\nThis is only safe in case the update to state_bydst is larger than\nnet->xfrm.xfrm_state_hmask (or if the lookup function gets\nserialized via state spinlock again).\n\nFix this by prefetching state_hmask and the associated pointers.\nThe xfrm_state_hash_generation seqlock retry will ensure that the pointer\nand the hmask will be consistent.\n\nThe existing helpers, like xfrm_dst_hash(), are now unsafe for RCU side,\nadd lockdep assertions to document that they are only safe for insert\nside.\n\nxfrm_state_lookup_byaddr() uses the spinlock rather than RCU.\nAFAICS this is an oversight from back when state lookup was converted to\nRCU, this lock should be replaced with RCU in a future patch.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-57982" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a16871c7832ea6435abb6e0b58289ae7dcb7e4fc", "url": "https://git.kernel.org/stable/c/a16871c7832ea6435abb6e0b58289ae7dcb7e4fc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b86dc510308d7a8955f3f47a4fea4bef887653e4", "url": "https://git.kernel.org/stable/c/b86dc510308d7a8955f3f47a4fea4bef887653e4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dd4c2a174994238d55ab54da2545543d36f4e0d0", "url": "https://git.kernel.org/stable/c/dd4c2a174994238d55ab54da2545543d36f4e0d0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e952837f3ddb0ff726d5b582aa1aad9aa38d024d", "url": "https://git.kernel.org/stable/c/e952837f3ddb0ff726d5b582aa1aad9aa38d024d" } ], "release_date": "2025-02-27T02:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-22055", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix geneve_opt length integer overflow\n\nstruct geneve_opt uses 5 bit length for each single option, which\nmeans every vary size option should be smaller than 128 bytes.\n\nHowever, all current related Netlink policies cannot promise this\nlength condition and the attacker can exploit a exact 128-byte size\noption to *fake* a zero length option and confuse the parsing logic,\nfurther achieve heap out-of-bounds read.\n\nOne example crash log is like below:\n\n[ 3.905425] ==================================================================\n[ 3.905925] BUG: KASAN: slab-out-of-bounds in nla_put+0xa9/0xe0\n[ 3.906255] Read of size 124 at addr ffff888005f291cc by task poc/177\n[ 3.906646]\n[ 3.906775] CPU: 0 PID: 177 Comm: poc-oob-read Not tainted 6.1.132 #1\n[ 3.907131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\n[ 3.907784] Call Trace:\n[ 3.907925] \n[ 3.908048] dump_stack_lvl+0x44/0x5c\n[ 3.908258] print_report+0x184/0x4be\n[ 3.909151] kasan_report+0xc5/0x100\n[ 3.909539] kasan_check_range+0xf3/0x1a0\n[ 3.909794] memcpy+0x1f/0x60\n[ 3.909968] nla_put+0xa9/0xe0\n[ 3.910147] tunnel_key_dump+0x945/0xba0\n[ 3.911536] tcf_action_dump_1+0x1c1/0x340\n[ 3.912436] tcf_action_dump+0x101/0x180\n[ 3.912689] tcf_exts_dump+0x164/0x1e0\n[ 3.912905] fw_dump+0x18b/0x2d0\n[ 3.913483] tcf_fill_node+0x2ee/0x460\n[ 3.914778] tfilter_notify+0xf4/0x180\n[ 3.915208] tc_new_tfilter+0xd51/0x10d0\n[ 3.918615] rtnetlink_rcv_msg+0x4a2/0x560\n[ 3.919118] netlink_rcv_skb+0xcd/0x200\n[ 3.919787] netlink_unicast+0x395/0x530\n[ 3.921032] netlink_sendmsg+0x3d0/0x6d0\n[ 3.921987] __sock_sendmsg+0x99/0xa0\n[ 3.922220] __sys_sendto+0x1b7/0x240\n[ 3.922682] __x64_sys_sendto+0x72/0x90\n[ 3.922906] do_syscall_64+0x5e/0x90\n[ 3.923814] entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n[ 3.924122] RIP: 0033:0x7e83eab84407\n[ 3.924331] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 faf\n[ 3.925330] RSP: 002b:00007ffff505e370 EFLAGS: 00000202 ORIG_RAX: 000000000000002c\n[ 3.925752] RAX: ffffffffffffffda RBX: 00007e83eaafa740 RCX: 00007e83eab84407\n[ 3.926173] RDX: 00000000000001a8 RSI: 00007ffff505e3c0 RDI: 0000000000000003\n[ 3.926587] RBP: 00007ffff505f460 R08: 00007e83eace1000 R09: 000000000000000c\n[ 3.926977] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffff505f3c0\n[ 3.927367] R13: 00007ffff505f5c8 R14: 00007e83ead1b000 R15: 00005d4fbbe6dcb8\n\nFix these issues by enforing correct length condition in related\npolicies.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-22055" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21748669c5825761cbbf47cbeeb01387ddccc8cb", "url": "https://git.kernel.org/stable/c/21748669c5825761cbbf47cbeeb01387ddccc8cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2952776c69a1a551649ed770bf22e3f691f6ec65", "url": "https://git.kernel.org/stable/c/2952776c69a1a551649ed770bf22e3f691f6ec65" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4d606069bdd3c76f8ab1f06796c97ef7f4746807", "url": "https://git.kernel.org/stable/c/4d606069bdd3c76f8ab1f06796c97ef7f4746807" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a2976cc4d9c36ff58a0f10e35ce4283cbaa9c0e", "url": "https://git.kernel.org/stable/c/5a2976cc4d9c36ff58a0f10e35ce4283cbaa9c0e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/738ae5712215fe9181587d582b23333f02c62ca6", "url": "https://git.kernel.org/stable/c/738ae5712215fe9181587d582b23333f02c62ca6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a2cb85f989e2074e2f392e00188c438cab3de088", "url": "https://git.kernel.org/stable/c/a2cb85f989e2074e2f392e00188c438cab3de088" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b27055a08ad4b415dcf15b63034f9cb236f7fb40", "url": "https://git.kernel.org/stable/c/b27055a08ad4b415dcf15b63034f9cb236f7fb40" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b4513ad0f391871d3feee8ddf535609a3aabeeac", "url": "https://git.kernel.org/stable/c/b4513ad0f391871d3feee8ddf535609a3aabeeac" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-16T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-37803", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudmabuf: fix a buf size overflow issue during udmabuf creation\n\nby casting size_limit_mb to u64 when calculate pglimit.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37803" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0f", "url": "https://git.kernel.org/stable/c/021ba7f1babd029e714d13a6bf2571b08af96d0f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9", "url": "https://git.kernel.org/stable/c/13fe12c037b470321436deec393030c6153cfeb9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/29b65a3171a49c9b69f31035146be966cec40b7a", "url": "https://git.kernel.org/stable/c/29b65a3171a49c9b69f31035146be966cec40b7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55a", "url": "https://git.kernel.org/stable/c/2b8419c6ecf69007dcff54ea0b9f0b215282c55a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33", "url": "https://git.kernel.org/stable/c/373512760e13fdaa726faa9502d0f5be2abb3d33" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbe", "url": "https://git.kernel.org/stable/c/3f6c9d66e0f8eb9679b57913aa64b4d2266f6fbe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2ff4e9c599b000833d16a917f519aa2e4a75de2", "url": "https://git.kernel.org/stable/c/b2ff4e9c599b000833d16a917f519aa2e4a75de2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e84a08fc7e25cdad5d9a3def42cc770ff711193f", "url": "https://git.kernel.org/stable/c/e84a08fc7e25cdad5d9a3def42cc770ff711193f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-05-08T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-46682", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: prevent panic for nfsv4.0 closed files in nfs4_show_open\n\nPrior to commit 3f29cc82a84c (\"nfsd: split sc_status out of\nsc_type\") states_show() relied on sc_type field to be of valid\ntype before calling into a subfunction to show content of a\nparticular stateid. From that commit, we split the validity of\nthe stateid into sc_status and no longer changed sc_type to 0\nwhile unhashing the stateid. This resulted in kernel oopsing\nfor nfsv4.0 opens that stay around and in nfs4_show_open()\nwould derefence sc_file which was NULL.\n\nInstead, for closed open stateids forgo displaying information\nthat relies of having a valid sc_file.\n\nTo reproduce: mount the server with 4.0, read and close\na file and then on the server cat /proc/fs/nfsd/clients/2/states\n\n[ 513.590804] Call trace:\n[ 513.590925] _raw_spin_lock+0xcc/0x160\n[ 513.591119] nfs4_show_open+0x78/0x2c0 [nfsd]\n[ 513.591412] states_show+0x44c/0x488 [nfsd]\n[ 513.591681] seq_read_iter+0x5d8/0x760\n[ 513.591896] seq_read+0x188/0x208\n[ 513.592075] vfs_read+0x148/0x470\n[ 513.592241] ksys_read+0xcc/0x178", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-46682" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a204501e1743d695ca2930ed25a2be9f8ced96d3", "url": "https://git.kernel.org/stable/c/a204501e1743d695ca2930ed25a2be9f8ced96d3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ba0b697de298285301c71c258598226e06494236", "url": "https://git.kernel.org/stable/c/ba0b697de298285301c71c258598226e06494236" } ], "release_date": "2024-09-13T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21926", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: gso: fix ownership in __udp_gso_segment\n\nIn __udp_gso_segment the skb destructor is removed before segmenting the\nskb but the socket reference is kept as-is. This is an issue if the\noriginal skb is later orphaned as we can hit the following bug:\n\n kernel BUG at ./include/linux/skbuff.h:3312! (skb_orphan)\n RIP: 0010:ip_rcv_core+0x8b2/0xca0\n Call Trace:\n ip_rcv+0xab/0x6e0\n __netif_receive_skb_one_core+0x168/0x1b0\n process_backlog+0x384/0x1100\n __napi_poll.constprop.0+0xa1/0x370\n net_rx_action+0x925/0xe50\n\nThe above can happen following a sequence of events when using\nOpenVSwitch, when an OVS_ACTION_ATTR_USERSPACE action precedes an\nOVS_ACTION_ATTR_OUTPUT action:\n\n1. OVS_ACTION_ATTR_USERSPACE is handled (in do_execute_actions): the skb\n goes through queue_gso_packets and then __udp_gso_segment, where its\n destructor is removed.\n2. The segments' data are copied and sent to userspace.\n3. OVS_ACTION_ATTR_OUTPUT is handled (in do_execute_actions) and the\n same original skb is sent to its path.\n4. If it later hits skb_orphan, we hit the bug.\n\nFix this by also removing the reference to the socket in\n__udp_gso_segment.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21926" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/01a83237644d6822bc7df2c5564fc81b0df84358", "url": "https://git.kernel.org/stable/c/01a83237644d6822bc7df2c5564fc81b0df84358" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/084819b0d8b1bd433b90142371eb9450d657f8ca", "url": "https://git.kernel.org/stable/c/084819b0d8b1bd433b90142371eb9450d657f8ca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/455217ac9db0cf9349b3933664355e907bb1a569", "url": "https://git.kernel.org/stable/c/455217ac9db0cf9349b3933664355e907bb1a569" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9f28205ddb76e86cac418332e952241d85fed0dc", "url": "https://git.kernel.org/stable/c/9f28205ddb76e86cac418332e952241d85fed0dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a2d1cca955ed34873e524cc2e6e885450d262f05", "url": "https://git.kernel.org/stable/c/a2d1cca955ed34873e524cc2e6e885450d262f05" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c32da44cc9298eaa6109e3fc2c2b4e07cc4bf11b", "url": "https://git.kernel.org/stable/c/c32da44cc9298eaa6109e3fc2c2b4e07cc4bf11b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e8db70537878e1bb3fd83e5abcc6feefc0587828", "url": "https://git.kernel.org/stable/c/e8db70537878e1bb3fd83e5abcc6feefc0587828" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ee01b2f2d7d0010787c2343463965bbc283a497f", "url": "https://git.kernel.org/stable/c/ee01b2f2d7d0010787c2343463965bbc283a497f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-01T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-50063", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Prevent tail call between progs attached to different hooks\n\nbpf progs can be attached to kernel functions, and the attached functions\ncan take different parameters or return different return values. If\nprog attached to one kernel function tail calls prog attached to another\nkernel function, the ctx access or return value verification could be\nbypassed.\n\nFor example, if prog1 is attached to func1 which takes only 1 parameter\nand prog2 is attached to func2 which takes two parameters. Since verifier\nassumes the bpf ctx passed to prog2 is constructed based on func2's\nprototype, verifier allows prog2 to access the second parameter from\nthe bpf ctx passed to it. The problem is that verifier does not prevent\nprog1 from passing its bpf ctx to prog2 via tail call. In this case,\nthe bpf ctx passed to prog2 is constructed from func1 instead of func2,\nthat is, the assumption for ctx access verification is bypassed.\n\nAnother example, if BPF LSM prog1 is attached to hook file_alloc_security,\nand BPF LSM prog2 is attached to hook bpf_lsm_audit_rule_known. Verifier\nknows the return value rules for these two hooks, e.g. it is legal for\nbpf_lsm_audit_rule_known to return positive number 1, and it is illegal\nfor file_alloc_security to return positive number. So verifier allows\nprog2 to return positive number 1, but does not allow prog1 to return\npositive number. The problem is that verifier does not prevent prog1\nfrom calling prog2 via tail call. In this case, prog2's return value 1\nwill be used as the return value for prog1's hook file_alloc_security.\nThat is, the return value rule is bypassed.\n\nThis patch adds restriction for tail call to prevent such bypasses.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50063" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/28ead3eaabc16ecc907cfb71876da028080f6356", "url": "https://git.kernel.org/stable/c/28ead3eaabc16ecc907cfb71876da028080f6356" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1", "url": "https://git.kernel.org/stable/c/5d5e3b4cbe8ee16b7bf96fd73a421c92a9da3ca1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1", "url": "https://git.kernel.org/stable/c/88c2a10e6c176c2860cd0659f4c0e9d20b3f64d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d9a807fb7cbfad4328824186e2e4bee28f72169b", "url": "https://git.kernel.org/stable/c/d9a807fb7cbfad4328824186e2e4bee28f72169b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2024-10-21T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-50106", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix race between laundromat and free_stateid\n\nThere is a race between laundromat handling of revoked delegations\nand a client sending free_stateid operation. Laundromat thread\nfinds that delegation has expired and needs to be revoked so it\nmarks the delegation stid revoked and it puts it on a reaper list\nbut then it unlock the state lock and the actual delegation revocation\nhappens without the lock. Once the stid is marked revoked a racing\nfree_stateid processing thread does the following (1) it calls\nlist_del_init() which removes it from the reaper list and (2) frees\nthe delegation stid structure. The laundromat thread ends up not\ncalling the revoke_delegation() function for this particular delegation\nbut that means it will no release the lock lease that exists on\nthe file.\n\nNow, a new open for this file comes in and ends up finding that\nlease list isn't empty and calls nfsd_breaker_owns_lease() which ends\nup trying to derefence a freed delegation stateid. Leading to the\nfollowint use-after-free KASAN warning:\n\nkernel: ==================================================================\nkernel: BUG: KASAN: slab-use-after-free in nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: Read of size 8 at addr ffff0000e73cd0c8 by task nfsd/6205\nkernel:\nkernel: CPU: 2 UID: 0 PID: 6205 Comm: nfsd Kdump: loaded Not tainted 6.11.0-rc7+ #9\nkernel: Hardware name: Apple Inc. Apple Virtualization Generic Platform, BIOS 2069.0.0.0.0 08/03/2024\nkernel: Call trace:\nkernel: dump_backtrace+0x98/0x120\nkernel: show_stack+0x1c/0x30\nkernel: dump_stack_lvl+0x80/0xe8\nkernel: print_address_description.constprop.0+0x84/0x390\nkernel: print_report+0xa4/0x268\nkernel: kasan_report+0xb4/0xf8\nkernel: __asan_report_load8_noabort+0x1c/0x28\nkernel: nfsd_breaker_owns_lease+0x140/0x160 [nfsd]\nkernel: nfsd_file_do_acquire+0xb3c/0x11d0 [nfsd]\nkernel: nfsd_file_acquire_opened+0x84/0x110 [nfsd]\nkernel: nfs4_get_vfs_file+0x634/0x958 [nfsd]\nkernel: nfsd4_process_open2+0xa40/0x1a40 [nfsd]\nkernel: nfsd4_open+0xa08/0xe80 [nfsd]\nkernel: nfsd4_proc_compound+0xb8c/0x2130 [nfsd]\nkernel: nfsd_dispatch+0x22c/0x718 [nfsd]\nkernel: svc_process_common+0x8e8/0x1960 [sunrpc]\nkernel: svc_process+0x3d4/0x7e0 [sunrpc]\nkernel: svc_handle_xprt+0x828/0xe10 [sunrpc]\nkernel: svc_recv+0x2cc/0x6a8 [sunrpc]\nkernel: nfsd+0x270/0x400 [nfsd]\nkernel: kthread+0x288/0x310\nkernel: ret_from_fork+0x10/0x20\n\nThis patch proposes a fixed that's based on adding 2 new additional\nstid's sc_status values that help coordinate between the laundromat\nand other operations (nfsd4_free_stateid() and nfsd4_delegreturn()).\n\nFirst to make sure, that once the stid is marked revoked, it is not\nremoved by the nfsd4_free_stateid(), the laundromat take a reference\non the stateid. Then, coordinating whether the stid has been put\non the cl_revoked list or we are processing FREE_STATEID and need to\nmake sure to remove it from the list, each check that state and act\naccordingly. If laundromat has added to the cl_revoke list before\nthe arrival of FREE_STATEID, then nfsd4_free_stateid() knows to remove\nit from the list. If nfsd4_free_stateid() finds that operations arrived\nbefore laundromat has placed it on cl_revoke list, it marks the state\nfreed and then laundromat will no longer add it to the list.\n\nAlso, for nfsd4_delegreturn() when looking for the specified stid,\nwe need to access stid that are marked removed or freeable, it means\nthe laundromat has started processing it but hasn't finished and this\ndelegreturn needs to return nfserr_deleg_revoked and not\nnfserr_bad_stateid. The latter will not trigger a FREE_STATEID and the\nlack of it will leave this stid on the cl_revoked list indefinitely.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50106" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a", "url": "https://git.kernel.org/stable/c/8dd91e8d31febf4d9cca3ae1bb4771d33ae7ee5a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/967faa26f313a62e7bebc55d5b8122eaee43b929", "url": "https://git.kernel.org/stable/c/967faa26f313a62e7bebc55d5b8122eaee43b929" } ], "release_date": "2024-11-05T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-07-07T19:27:57Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1751916475" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els15.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }