{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "mm/hugetlb: unshare page tables during VMA split, not before {CVE-2025-38084}\n- hugetlb: unshare some PMDs when splitting VMAs {CVE-2025-38084}\n- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() {CVE-2025-38352}\n- tipc: Fix use-after-free in tipc_conn_close(). {CVE-2025-38464}\n- vsock: Fix transport_* TOCTOU {CVE-2025-38461}\n- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction {CVE-2025-38211}\n- i40e: fix MMIO write access to an invalid page in i40e_clear_hw {CVE-2025-38200}\n- net_sched: ets: Fix double list add in class with netem as child qdisc {CVE-2025-37914}\n- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too {CVE-2025-37823}\n- udp: Fix memory accounting leak. {CVE-2025-22058}\n- net/sched: Always pass notifications when child class becomes empty {CVE-2025-38350}\n- codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() {CVE-2025-38177}\n- sch_htb: make htb_deactivate() idempotent {CVE-2025-38177}\n- sch_drr: make drr_qlen_notify() idempotent {CVE-2025-38177}\n- sch_htb: make htb_qlen_notify() idempotent {CVE-2025-38177}\n- sch_qfq: make qfq_qlen_notify() idempotent {CVE-2025-38177}\n- sch_ets: make est_qlen_notify() idempotent {CVE-2025-38177}\n- sch_hfsc: make hfsc_qlen_notify() idempotent {CVE-2025-38177}\n- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() {CVE-2025-38000}\n- net: fix udp gso skb_segment after pull from frag_list {CVE-2025-38124}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1757699471.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "tracking": { "current_release_date": "2026-02-16T09:38:10Z", "generator": { "date": "2026-02-16T09:38:10Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1757699471", "initial_release_date": "2025-09-12T17:53:57Z", "revision_history": [ { "date": "2025-09-12T17:53:57Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-16T09:38:10Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "kernel: Fix of 13 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els19?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els19?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els19?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_id": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els19?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els19?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els19?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product_id": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.1101.el9_2.tuxcare.7.els19?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-38084", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: unshare page tables during VMA split, not before\n\nCurrently, __split_vma() triggers hugetlb page table unsharing through\nvm_ops->may_split(). This happens before the VMA lock and rmap locks are\ntaken - which is too early, it allows racing VMA-locked page faults in our\nprocess and racing rmap walks from other processes to cause page tables to\nbe shared again before we actually perform the split.\n\nFix it by explicitly calling into the hugetlb unshare logic from\n__split_vma() in the same place where THP splitting also happens. At that\npoint, both the VMA and the rmap(s) are write-locked.\n\nAn annoying detail is that we can now call into the helper\nhugetlb_unshare_pmds() from two different locking contexts:\n\n1. from hugetlb_split(), holding:\n - mmap lock (exclusively)\n - VMA lock\n - file rmap lock (exclusively)\n2. hugetlb_unshare_all_pmds(), which I think is designed to be able to\n call us with only the mmap lock held (in shared mode), but currently\n only runs while holding mmap lock (exclusively) and VMA lock\n\nBackporting note:\nThis commit fixes a racy protection that was introduced in commit\nb30c14cd6102 (\"hugetlb: unshare some PMDs when splitting VMAs\"); that\ncommit claimed to fix an issue introduced in 5.13, but it should actually\nalso go all the way back.\n\n[jannh@google.com: v2]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38084" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0", "url": "https://git.kernel.org/stable/c/081056dc00a27bccb55ccc3c6f230a3d5fd3f7e0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2511ac64bc1617ca716d3ba8464e481a647c1902", "url": "https://git.kernel.org/stable/c/2511ac64bc1617ca716d3ba8464e481a647c1902" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0", "url": "https://git.kernel.org/stable/c/366298f2b04d2bf1f2f2b7078405bdf9df9bd5d0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8a21d5584826f4880f45bbf8f72375f4e6c0ff2a", "url": "https://git.kernel.org/stable/c/8a21d5584826f4880f45bbf8f72375f4e6c0ff2a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b", "url": "https://git.kernel.org/stable/c/9cf5b2a3b72c23fb7b84736d5d19ee6ea718762b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/af6cfcd0efb7f051af221c418ec8b37a10211947", "url": "https://git.kernel.org/stable/c/af6cfcd0efb7f051af221c418ec8b37a10211947" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e8847d18cd9fff1edbb45e963d9141273c3b539c", "url": "https://git.kernel.org/stable/c/e8847d18cd9fff1edbb45e963d9141273c3b539c" }, { "category": "external", "summary": "https://project-zero.issues.chromium.org/issues/420715744", "url": "https://project-zero.issues.chromium.org/issues/420715744" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-28T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38200", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix MMIO write access to an invalid page in i40e_clear_hw\n\nWhen the device sends a specific input, an integer underflow can occur, leading\nto MMIO write access to an invalid page.\n\nPrevent the integer underflow by changing the type of related variables.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38200" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/015bac5daca978448f2671478c553ce1f300c21e", "url": "https://git.kernel.org/stable/c/015bac5daca978448f2671478c553ce1f300c21e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca", "url": "https://git.kernel.org/stable/c/2a1f4f2e36442a9bdf771acf6ee86f3cf876e5ca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3502dd42f178dae9d54696013386bb52b4f2e655", "url": "https://git.kernel.org/stable/c/3502dd42f178dae9d54696013386bb52b4f2e655" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5e75c9082987479e647c75ec8fdf18fa68263c42", "url": "https://git.kernel.org/stable/c/5e75c9082987479e647c75ec8fdf18fa68263c42" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/872607632c658d3739e4e7889e4f3c419ae2c193", "url": "https://git.kernel.org/stable/c/872607632c658d3739e4e7889e4f3c419ae2c193" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8cde755f56163281ec2c46b4ae8b61f532758a6f", "url": "https://git.kernel.org/stable/c/8cde755f56163281ec2c46b4ae8b61f532758a6f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d88a1e8f024ba26e19350958fecbf771a9960352", "url": "https://git.kernel.org/stable/c/d88a1e8f024ba26e19350958fecbf771a9960352" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2", "url": "https://git.kernel.org/stable/c/fecb2fc3fc10c95724407cc45ea35af4a65cdde2" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-37914", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: ets: Fix double list add in class with netem as child qdisc\n\nAs described in Gerrard's report [1], there are use cases where a netem\nchild qdisc will make the parent qdisc's enqueue callback reentrant.\nIn the case of ets, there won't be a UAF, but the code will add the same\nclassifier to the list twice, which will cause memory corruption.\n\nIn addition to checking for qlen being zero, this patch checks whether\nthe class was already added to the active_list (cl_is_active) before\ndoing the addition to cater for the reentrant case.\n\n[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37914" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a6d0c00fa07972384b0c308c72db091d49988b6", "url": "https://git.kernel.org/stable/c/1a6d0c00fa07972384b0c308c72db091d49988b6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1f01e9f961605eb397c6ecd1d7b0233dfbf9077c", "url": "https://git.kernel.org/stable/c/1f01e9f961605eb397c6ecd1d7b0233dfbf9077c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/24388ba0a1b1b6d4af1b205927ac7f7b119ee4ea", "url": "https://git.kernel.org/stable/c/24388ba0a1b1b6d4af1b205927ac7f7b119ee4ea" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/554acc5a2ea9703e08023eb9a003f9e5a830a502", "url": "https://git.kernel.org/stable/c/554acc5a2ea9703e08023eb9a003f9e5a830a502" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/72c3da7e6ceb74e74ddbb5a305a35c9fdfcac6e3", "url": "https://git.kernel.org/stable/c/72c3da7e6ceb74e74ddbb5a305a35c9fdfcac6e3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9efb6a0fa88e0910d079fdfeb4f7ce4d4ac6c990", "url": "https://git.kernel.org/stable/c/9efb6a0fa88e0910d079fdfeb4f7ce4d4ac6c990" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bc321f714de693aae06e3786f88df2975376d996", "url": "https://git.kernel.org/stable/c/bc321f714de693aae06e3786f88df2975376d996" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" } ], "release_date": "2025-05-20T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38350", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Always pass notifications when child class becomes empty\n\nCertain classful qdiscs may invoke their classes' dequeue handler on an\nenqueue operation. This may unexpectedly empty the child qdisc and thus\nmake an in-flight class passive via qlen_notify(). Most qdiscs do not\nexpect such behaviour at this point in time and may re-activate the\nclass eventually anyways which will lead to a use-after-free.\n\nThe referenced fix commit attempted to fix this behavior for the HFSC\ncase by moving the backlog accounting around, though this turned out to\nbe incomplete since the parent's parent may run into the issue too.\nThe following reproducer demonstrates this use-after-free:\n\n tc qdisc add dev lo root handle 1: drr\n tc filter add dev lo parent 1: basic classid 1:1\n tc class add dev lo parent 1: classid 1:1 drr\n tc qdisc add dev lo parent 1:1 handle 2: hfsc def 1\n tc class add dev lo parent 2: classid 2:1 hfsc rt m1 8 d 1 m2 0\n tc qdisc add dev lo parent 2:1 handle 3: netem\n tc qdisc add dev lo parent 3:1 handle 4: blackhole\n\n echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888\n tc class delete dev lo classid 1:1\n echo 1 | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888\n\nSince backlog accounting issues leading to a use-after-frees on stale\nclass pointers is a recurring pattern at this point, this patch takes\na different approach. Instead of trying to fix the accounting, the patch\nensures that qdisc_tree_reduce_backlog always calls qlen_notify when\nthe child qdisc is empty. This solves the problem because deletion of\nqdiscs always involves a call to qdisc_reset() and / or\nqdisc_purge_queue() which ultimately resets its qlen to 0 thus causing\nthe following qdisc_tree_reduce_backlog() to report to the parent. Note\nthat this may call qlen_notify on passive classes multiple times. This\nis not a problem after the recent patch series that made all the\nclassful qdiscs qlen_notify() handlers idempotent.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38350" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/103406b38c600fec1fe375a77b27d87e314aea09", "url": "https://git.kernel.org/stable/c/103406b38c600fec1fe375a77b27d87e314aea09" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3b290923ad2b23596208c1e29520badef4356a43", "url": "https://git.kernel.org/stable/c/3b290923ad2b23596208c1e29520badef4356a43" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7874c9c132e906a52a187d045995b115973c93fb", "url": "https://git.kernel.org/stable/c/7874c9c132e906a52a187d045995b115973c93fb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a44acdd9e84a211989ff4b9b92bf3545d8456ad5", "url": "https://git.kernel.org/stable/c/a44acdd9e84a211989ff4b9b92bf3545d8456ad5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a553afd91f55ff39b1e8a1c4989a29394c9e0472", "url": "https://git.kernel.org/stable/c/a553afd91f55ff39b1e8a1c4989a29394c9e0472" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e269f29e9395527bc00c213c6b15da04ebb35070", "url": "https://git.kernel.org/stable/c/e269f29e9395527bc00c213c6b15da04ebb35070" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e9921b57dca05ac5f4fa1fa8e993d4f0ee52e2b7", "url": "https://git.kernel.org/stable/c/e9921b57dca05ac5f4fa1fa8e993d4f0ee52e2b7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f680a4643c6f71e758d8fe0431a958e9a6a4f59d", "url": "https://git.kernel.org/stable/c/f680a4643c6f71e758d8fe0431a958e9a6a4f59d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-19T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-22058", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nudp: Fix memory accounting leak.\n\nMatt Dowling reported a weird UDP memory usage issue.\n\nUnder normal operation, the UDP memory usage reported in /proc/net/sockstat\nremains close to zero. However, it occasionally spiked to 524,288 pages\nand never dropped. Moreover, the value doubled when the application was\nterminated. Finally, it caused intermittent packet drops.\n\nWe can reproduce the issue with the script below [0]:\n\n 1. /proc/net/sockstat reports 0 pages\n\n # cat /proc/net/sockstat | grep UDP:\n UDP: inuse 1 mem 0\n\n 2. Run the script till the report reaches 524,288\n\n # python3 test.py & sleep 5\n # cat /proc/net/sockstat | grep UDP:\n UDP: inuse 3 mem 524288 <-- (INT_MAX + 1) >> PAGE_SHIFT\n\n 3. Kill the socket and confirm the number never drops\n\n # pkill python3 && sleep 5\n # cat /proc/net/sockstat | grep UDP:\n UDP: inuse 1 mem 524288\n\n 4. (necessary since v6.0) Trigger proto_memory_pcpu_drain()\n\n # python3 test.py & sleep 1 && pkill python3\n\n 5. The number doubles\n\n # cat /proc/net/sockstat | grep UDP:\n UDP: inuse 1 mem 1048577\n\nThe application set INT_MAX to SO_RCVBUF, which triggered an integer\noverflow in udp_rmem_release().\n\nWhen a socket is close()d, udp_destruct_common() purges its receive\nqueue and sums up skb->truesize in the queue. This total is calculated\nand stored in a local unsigned integer variable.\n\nThe total size is then passed to udp_rmem_release() to adjust memory\naccounting. However, because the function takes a signed integer\nargument, the total size can wrap around, causing an overflow.\n\nThen, the released amount is calculated as follows:\n\n 1) Add size to sk->sk_forward_alloc.\n 2) Round down sk->sk_forward_alloc to the nearest lower multiple of\n PAGE_SIZE and assign it to amount.\n 3) Subtract amount from sk->sk_forward_alloc.\n 4) Pass amount >> PAGE_SHIFT to __sk_mem_reduce_allocated().\n\nWhen the issue occurred, the total in udp_destruct_common() was 2147484480\n(INT_MAX + 833), which was cast to -2147482816 in udp_rmem_release().\n\nAt 1) sk->sk_forward_alloc is changed from 3264 to -2147479552, and\n2) sets -2147479552 to amount. 3) reverts the wraparound, so we don't\nsee a warning in inet_sock_destruct(). However, udp_memory_allocated\nends up doubling at 4).\n\nSince commit 3cd3399dd7a8 (\"net: implement per-cpu reserves for\nmemory_allocated\"), memory usage no longer doubles immediately after\na socket is close()d because __sk_mem_reduce_allocated() caches the\namount in udp_memory_per_cpu_fw_alloc. However, the next time a UDP\nsocket receives a packet, the subtraction takes effect, causing UDP\nmemory usage to double.\n\nThis issue makes further memory allocation fail once the socket's\nsk->sk_rmem_alloc exceeds net.ipv4.udp_rmem_min, resulting in packet\ndrops.\n\nTo prevent this issue, let's use unsigned int for the calculation and\ncall sk_forward_alloc_add() only once for the small delta.\n\nNote that first_packet_length() also potentially has the same problem.\n\n[0]:\nfrom socket import *\n\nSO_RCVBUFFORCE = 33\nINT_MAX = (2 ** 31) - 1\n\ns = socket(AF_INET, SOCK_DGRAM)\ns.bind(('', 0))\ns.setsockopt(SOL_SOCKET, SO_RCVBUFFORCE, INT_MAX)\n\nc = socket(AF_INET, SOCK_DGRAM)\nc.connect(s.getsockname())\n\ndata = b'a' * 100\n\nwhile True:\n c.send(data)", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-22058" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/13550273171f5108b1ac572d8f72f4256ab92854", "url": "https://git.kernel.org/stable/c/13550273171f5108b1ac572d8f72f4256ab92854" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3836029448e76c1e6f77cc5fe0adc09b018b5fa8", "url": "https://git.kernel.org/stable/c/3836029448e76c1e6f77cc5fe0adc09b018b5fa8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9122fec396950cc866137af7154b1d0d989be52e", "url": "https://git.kernel.org/stable/c/9122fec396950cc866137af7154b1d0d989be52e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a116b271bf3cb72c8155b6b7f39083c1b80dcd00", "url": "https://git.kernel.org/stable/c/a116b271bf3cb72c8155b6b7f39083c1b80dcd00" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/aeef6456692c6f11ae53d278df64f1316a2a405a", "url": "https://git.kernel.org/stable/c/aeef6456692c6f11ae53d278df64f1316a2a405a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c3ad8c30b6b109283d2643e925f8e65f2e7ab34e", "url": "https://git.kernel.org/stable/c/c3ad8c30b6b109283d2643e925f8e65f2e7ab34e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c4bac6c398118fba79e32b1cd01db22dbfe29fbf", "url": "https://git.kernel.org/stable/c/c4bac6c398118fba79e32b1cd01db22dbfe29fbf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d9c8266ce536e8314d84370e983afcaa36fb19cf", "url": "https://git.kernel.org/stable/c/d9c8266ce536e8314d84370e983afcaa36fb19cf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/df207de9d9e7a4d92f8567e2c539d9c8c12fd99d", "url": "https://git.kernel.org/stable/c/df207de9d9e7a4d92f8567e2c539d9c8c12fd99d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-04-16T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-37823", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too\n\nSimilarly to the previous patch, we need to safe guard hfsc_dequeue()\ntoo. But for this one, we don't have a reliable reproducer.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37823" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/11bccb054c1462fb069219f8e98e97a5a730758e", "url": "https://git.kernel.org/stable/c/11bccb054c1462fb069219f8e98e97a5a730758e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f46d14919c39528c6e540ebc43f90055993eedc", "url": "https://git.kernel.org/stable/c/2f46d14919c39528c6e540ebc43f90055993eedc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/68f256305ceb426d545a0dc31f83c2ab1d211a1e", "url": "https://git.kernel.org/stable/c/68f256305ceb426d545a0dc31f83c2ab1d211a1e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6ccbda44e2cc3d26fd22af54c650d6d5d801addf", "url": "https://git.kernel.org/stable/c/6ccbda44e2cc3d26fd22af54c650d6d5d801addf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/76c4c22c2437d3d3880efc0f62eca06ef078d290", "url": "https://git.kernel.org/stable/c/76c4c22c2437d3d3880efc0f62eca06ef078d290" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6936266f8bf98a53f28ef9a820e6a501e946d09", "url": "https://git.kernel.org/stable/c/c6936266f8bf98a53f28ef9a820e6a501e946d09" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6f035044104c6ff656f4565cd22938dc892528c", "url": "https://git.kernel.org/stable/c/c6f035044104c6ff656f4565cd22938dc892528c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/da7936518996d290e2fcfcaf6cd7e15bfd87804a", "url": "https://git.kernel.org/stable/c/da7936518996d290e2fcfcaf6cd7e15bfd87804a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2025-05-08T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38464", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Fix use-after-free in tipc_conn_close().\n\nsyzbot reported a null-ptr-deref in tipc_conn_close() during netns\ndismantle. [0]\n\ntipc_topsrv_stop() iterates tipc_net(net)->topsrv->conn_idr and calls\ntipc_conn_close() for each tipc_conn.\n\nThe problem is that tipc_conn_close() is called after releasing the\nIDR lock.\n\nAt the same time, there might be tipc_conn_recv_work() running and it\ncould call tipc_conn_close() for the same tipc_conn and release its\nlast ->kref.\n\nOnce we release the IDR lock in tipc_topsrv_stop(), there is no\nguarantee that the tipc_conn is alive.\n\nLet's hold the ref before releasing the lock and put the ref after\ntipc_conn_close() in tipc_topsrv_stop().\n\n[0]:\nBUG: KASAN: use-after-free in tipc_conn_close+0x122/0x140 net/tipc/topsrv.c:165\nRead of size 8 at addr ffff888099305a08 by task kworker/u4:3/435\n\nCPU: 0 PID: 435 Comm: kworker/u4:3 Not tainted 4.19.204-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nWorkqueue: netns cleanup_net\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x1fc/0x2ef lib/dump_stack.c:118\n print_address_description.cold+0x54/0x219 mm/kasan/report.c:256\n kasan_report_error.cold+0x8a/0x1b9 mm/kasan/report.c:354\n kasan_report mm/kasan/report.c:412 [inline]\n __asan_report_load8_noabort+0x88/0x90 mm/kasan/report.c:433\n tipc_conn_close+0x122/0x140 net/tipc/topsrv.c:165\n tipc_topsrv_stop net/tipc/topsrv.c:701 [inline]\n tipc_topsrv_exit_net+0x27b/0x5c0 net/tipc/topsrv.c:722\n ops_exit_list+0xa5/0x150 net/core/net_namespace.c:153\n cleanup_net+0x3b4/0x8b0 net/core/net_namespace.c:553\n process_one_work+0x864/0x1570 kernel/workqueue.c:2153\n worker_thread+0x64c/0x1130 kernel/workqueue.c:2296\n kthread+0x33f/0x460 kernel/kthread.c:259\n ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415\n\nAllocated by task 23:\n kmem_cache_alloc_trace+0x12f/0x380 mm/slab.c:3625\n kmalloc include/linux/slab.h:515 [inline]\n kzalloc include/linux/slab.h:709 [inline]\n tipc_conn_alloc+0x43/0x4f0 net/tipc/topsrv.c:192\n tipc_topsrv_accept+0x1b5/0x280 net/tipc/topsrv.c:470\n process_one_work+0x864/0x1570 kernel/workqueue.c:2153\n worker_thread+0x64c/0x1130 kernel/workqueue.c:2296\n kthread+0x33f/0x460 kernel/kthread.c:259\n ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415\n\nFreed by task 23:\n __cache_free mm/slab.c:3503 [inline]\n kfree+0xcc/0x210 mm/slab.c:3822\n tipc_conn_kref_release net/tipc/topsrv.c:150 [inline]\n kref_put include/linux/kref.h:70 [inline]\n conn_put+0x2cd/0x3a0 net/tipc/topsrv.c:155\n process_one_work+0x864/0x1570 kernel/workqueue.c:2153\n worker_thread+0x64c/0x1130 kernel/workqueue.c:2296\n kthread+0x33f/0x460 kernel/kthread.c:259\n ret_from_fork+0x24/0x30 arch/x86/entry/entry_64.S:415\n\nThe buggy address belongs to the object at ffff888099305a00\n which belongs to the cache kmalloc-512 of size 512\nThe buggy address is located 8 bytes inside of\n 512-byte region [ffff888099305a00, ffff888099305c00)\nThe buggy address belongs to the page:\npage:ffffea000264c140 count:1 mapcount:0 mapping:ffff88813bff0940 index:0x0\nflags: 0xfff00000000100(slab)\nraw: 00fff00000000100 ffffea00028b6b88 ffffea0002cd2b08 ffff88813bff0940\nraw: 0000000000000000 ffff888099305000 0000000100000006 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888099305900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff888099305980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc\n>ffff888099305a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff888099305a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff888099305b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38464" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/03dcdd2558e1e55bf843822fe4363dcb48743f2b", "url": "https://git.kernel.org/stable/c/03dcdd2558e1e55bf843822fe4363dcb48743f2b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/15a6f4971e2f157d57e09ea748d1fbc714277aa4", "url": "https://git.kernel.org/stable/c/15a6f4971e2f157d57e09ea748d1fbc714277aa4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1dbf7cd2454a28b1da700085b99346b5445aeabb", "url": "https://git.kernel.org/stable/c/1dbf7cd2454a28b1da700085b99346b5445aeabb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3b89e17b2fd64012682bed158d9eb3d2e96dec42", "url": "https://git.kernel.org/stable/c/3b89e17b2fd64012682bed158d9eb3d2e96dec42" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50aa2d121bc2cfe2d825f8a331ea75dfaaab6a50", "url": "https://git.kernel.org/stable/c/50aa2d121bc2cfe2d825f8a331ea75dfaaab6a50" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/667eeab4999e981c96b447a4df5f20bdf5c26f13", "url": "https://git.kernel.org/stable/c/667eeab4999e981c96b447a4df5f20bdf5c26f13" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/be4b8392da7978294f2f368799d29dd509fb6c4d", "url": "https://git.kernel.org/stable/c/be4b8392da7978294f2f368799d29dd509fb6c4d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dab8ded2e5ff41012a6ff400b44dbe76ccf3592a", "url": "https://git.kernel.org/stable/c/dab8ded2e5ff41012a6ff400b44dbe76ccf3592a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38461", "cwe": { "id": "CWE-367", "name": "Time-of-check Time-of-use (TOCTOU) Race Condition" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: Fix transport_* TOCTOU\n\nTransport assignment may race with module unload. Protect new_transport\nfrom becoming a stale pointer.\n\nThis also takes care of an insecure call in vsock_use_local_transport();\nadd a lockdep assert.\n\nBUG: unable to handle page fault for address: fffffbfff8056000\nOops: Oops: 0000 [#1] SMP KASAN\nRIP: 0010:vsock_assign_transport+0x366/0x600\nCall Trace:\n vsock_connect+0x59c/0xc40\n __sys_connect+0xe8/0x100\n __x64_sys_connect+0x6e/0xc0\n do_syscall_64+0x92/0x1c0\n entry_SYSCALL_64_after_hwframe+0x4b/0x53", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38461" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/36a439049b34cca0b3661276049b84a1f76cc21a", "url": "https://git.kernel.org/stable/c/36a439049b34cca0b3661276049b84a1f76cc21a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/687aa0c5581b8d4aa87fd92973e4ee576b550cdf", "url": "https://git.kernel.org/stable/c/687aa0c5581b8d4aa87fd92973e4ee576b550cdf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7b73bddf54777fb62d4d8c7729d0affe6df04477", "url": "https://git.kernel.org/stable/c/7b73bddf54777fb62d4d8c7729d0affe6df04477" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8667e8d0eb46bc54fdae30ba2f4786407d3d88eb", "url": "https://git.kernel.org/stable/c/8667e8d0eb46bc54fdae30ba2f4786407d3d88eb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9ce53e744f18e73059d3124070e960f3aa9902bf", "url": "https://git.kernel.org/stable/c/9ce53e744f18e73059d3124070e960f3aa9902bf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9d24bb6780282b0255b9929abe5e8f98007e2c6e", "url": "https://git.kernel.org/stable/c/9d24bb6780282b0255b9929abe5e8f98007e2c6e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ae2c712ba39c7007de63cb0c75b51ce1caaf1da5", "url": "https://git.kernel.org/stable/c/ae2c712ba39c7007de63cb0c75b51ce1caaf1da5" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38177", "cwe": { "id": "CWE-459", "name": "Incomplete Cleanup" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsch_hfsc: make hfsc_qlen_notify() idempotent\n\nhfsc_qlen_notify() is not idempotent either and not friendly\nto its callers, like fq_codel_dequeue(). Let's make it idempotent\nto ease qdisc_tree_reduce_backlog() callers' life:\n\n1. update_vf() decreases cl->cl_nactive, so we can check whether it is\nnon-zero before calling it.\n\n2. eltree_remove() always removes RB node cl->el_node, but we can use\n RB_EMPTY_NODE() + RB_CLEAR_NODE() to make it safe.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38177" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87", "url": "https://git.kernel.org/stable/c/0475c85426b18eccdcb7f9fb58d8f8e9c6c58c87" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/51eb3b65544c9efd6a1026889ee5fb5aa62da3bb", "url": "https://git.kernel.org/stable/c/51eb3b65544c9efd6a1026889ee5fb5aa62da3bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7", "url": "https://git.kernel.org/stable/c/72c61ffbeeb8c50f6d4d70c65d3283aa1bac57a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9030a91235ae4845ec71902c3e0cecfc9ed1f2df", "url": "https://git.kernel.org/stable/c/9030a91235ae4845ec71902c3e0cecfc9ed1f2df" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9a5fd5c2f4d4afdd5e405083ee53e0789ce76956", "url": "https://git.kernel.org/stable/c/9a5fd5c2f4d4afdd5e405083ee53e0789ce76956" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a5efc95a33bd4fcb879250852828cc58c7862970", "url": "https://git.kernel.org/stable/c/a5efc95a33bd4fcb879250852828cc58c7862970" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1175c4ad01dbc9c979d099861fa90a754f72059", "url": "https://git.kernel.org/stable/c/c1175c4ad01dbc9c979d099861fa90a754f72059" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d06476714d2819b550e0cc39222347e2c8941c9d", "url": "https://git.kernel.org/stable/c/d06476714d2819b550e0cc39222347e2c8941c9d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" } ], "release_date": "2025-07-04T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38352", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nposix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()\nIf an exiting non-autoreaping task has already passed exit_notify() and\ncalls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent\nor debugger right after unlock_task_sighand().\nIf a concurrent posix_cpu_timer_del() runs at that moment, it won't be\nable to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or\nlock_task_sighand() will fail.\nAdd the tsk->exit_state check into run_posix_cpu_timers() to fix this.\nThis fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because\nexit_task_work() is called before exit_notify(). But the check still\nmakes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail\nanyway in this case.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38352" } ], "release_date": "2025-07-22T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38211", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/iwcm: Fix use-after-free of work objects after cm_id destruction\n\nThe commit 59c68ac31e15 (\"iw_cm: free cm_id resources on the last\nderef\") simplified cm_id resource management by freeing cm_id once all\nreferences to the cm_id were removed. The references are removed either\nupon completion of iw_cm event handlers or when the application destroys\nthe cm_id. This commit introduced the use-after-free condition where\ncm_id_private object could still be in use by event handler works during\nthe destruction of cm_id. The commit aee2424246f9 (\"RDMA/iwcm: Fix a\nuse-after-free related to destroying CM IDs\") addressed this use-after-\nfree by flushing all pending works at the cm_id destruction.\n\nHowever, still another use-after-free possibility remained. It happens\nwith the work objects allocated for each cm_id_priv within\nalloc_work_entries() during cm_id creation, and subsequently freed in\ndealloc_work_entries() once all references to the cm_id are removed.\nIf the cm_id's last reference is decremented in the event handler work,\nthe work object for the work itself gets removed, and causes the use-\nafter-free BUG below:\n\n BUG: KASAN: slab-use-after-free in __pwq_activate_work+0x1ff/0x250\n Read of size 8 at addr ffff88811f9cf800 by task kworker/u16:1/147091\n\n CPU: 2 UID: 0 PID: 147091 Comm: kworker/u16:1 Not tainted 6.15.0-rc2+ #27 PREEMPT(voluntary)\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014\n Workqueue: 0x0 (iw_cm_wq)\n Call Trace:\n \n dump_stack_lvl+0x6a/0x90\n print_report+0x174/0x554\n ? __virt_addr_valid+0x208/0x430\n ? __pwq_activate_work+0x1ff/0x250\n kasan_report+0xae/0x170\n ? __pwq_activate_work+0x1ff/0x250\n __pwq_activate_work+0x1ff/0x250\n pwq_dec_nr_in_flight+0x8c5/0xfb0\n process_one_work+0xc11/0x1460\n ? __pfx_process_one_work+0x10/0x10\n ? assign_work+0x16c/0x240\n worker_thread+0x5ef/0xfd0\n ? __pfx_worker_thread+0x10/0x10\n kthread+0x3b0/0x770\n ? __pfx_kthread+0x10/0x10\n ? rcu_is_watching+0x11/0xb0\n ? _raw_spin_unlock_irq+0x24/0x50\n ? rcu_is_watching+0x11/0xb0\n ? __pfx_kthread+0x10/0x10\n ret_from_fork+0x30/0x70\n ? __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1a/0x30\n \n\n Allocated by task 147416:\n kasan_save_stack+0x2c/0x50\n kasan_save_track+0x10/0x30\n __kasan_kmalloc+0xa6/0xb0\n alloc_work_entries+0xa9/0x260 [iw_cm]\n iw_cm_connect+0x23/0x4a0 [iw_cm]\n rdma_connect_locked+0xbfd/0x1920 [rdma_cm]\n nvme_rdma_cm_handler+0x8e5/0x1b60 [nvme_rdma]\n cma_cm_event_handler+0xae/0x320 [rdma_cm]\n cma_work_handler+0x106/0x1b0 [rdma_cm]\n process_one_work+0x84f/0x1460\n worker_thread+0x5ef/0xfd0\n kthread+0x3b0/0x770\n ret_from_fork+0x30/0x70\n ret_from_fork_asm+0x1a/0x30\n\n Freed by task 147091:\n kasan_save_stack+0x2c/0x50\n kasan_save_track+0x10/0x30\n kasan_save_free_info+0x37/0x60\n __kasan_slab_free+0x4b/0x70\n kfree+0x13a/0x4b0\n dealloc_work_entries+0x125/0x1f0 [iw_cm]\n iwcm_deref_id+0x6f/0xa0 [iw_cm]\n cm_work_handler+0x136/0x1ba0 [iw_cm]\n process_one_work+0x84f/0x1460\n worker_thread+0x5ef/0xfd0\n kthread+0x3b0/0x770\n ret_from_fork+0x30/0x70\n ret_from_fork_asm+0x1a/0x30\n\n Last potentially related work creation:\n kasan_save_stack+0x2c/0x50\n kasan_record_aux_stack+0xa3/0xb0\n __queue_work+0x2ff/0x1390\n queue_work_on+0x67/0xc0\n cm_event_handler+0x46a/0x820 [iw_cm]\n siw_cm_upcall+0x330/0x650 [siw]\n siw_cm_work_handler+0x6b9/0x2b20 [siw]\n process_one_work+0x84f/0x1460\n worker_thread+0x5ef/0xfd0\n kthread+0x3b0/0x770\n ret_from_fork+0x30/0x70\n ret_from_fork_asm+0x1a/0x30\n\nThis BUG is reproducible by repeating the blktests test case nvme/061\nfor the rdma transport and the siw driver.\n\nTo avoid the use-after-free of cm_id_private work objects, ensure that\nthe last reference to the cm_id is decremented not in the event handler\nworks, but in the cm_id destruction context. For that purpose, mo\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38211" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/013dcdf6f03bcedbaf1669e3db71c34a197715b2", "url": "https://git.kernel.org/stable/c/013dcdf6f03bcedbaf1669e3db71c34a197715b2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/23a707bbcbea468eedb398832eeb7e8e0ceafd21", "url": "https://git.kernel.org/stable/c/23a707bbcbea468eedb398832eeb7e8e0ceafd21" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3b4a50d733acad6831f6bd9288a76a80f70650ac", "url": "https://git.kernel.org/stable/c/3b4a50d733acad6831f6bd9288a76a80f70650ac" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6883b680e703c6b2efddb4e7a8d891ce1803d06b", "url": "https://git.kernel.org/stable/c/6883b680e703c6b2efddb4e7a8d891ce1803d06b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/764c9f69beabef8bdc651a7746c59f7a340d104f", "url": "https://git.kernel.org/stable/c/764c9f69beabef8bdc651a7746c59f7a340d104f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/78381dc8a6b61c9bb9987d37b4d671b99767c4a1", "url": "https://git.kernel.org/stable/c/78381dc8a6b61c9bb9987d37b4d671b99767c4a1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bf7eff5e3a36c54bbe8aff7fd6dd7c07490b81c5", "url": "https://git.kernel.org/stable/c/bf7eff5e3a36c54bbe8aff7fd6dd7c07490b81c5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fd960b5ddf4faf00da43babdd3acda68842e1f6a", "url": "https://git.kernel.org/stable/c/fd960b5ddf4faf00da43babdd3acda68842e1f6a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38124", "cwe": { "id": "CWE-401", "name": "Missing Release of Memory after Effective Lifetime" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: fix udp gso skb_segment after pull from frag_list\n\nCommit a1e40ac5b5e9 (\"net: gso: fix udp gso fraglist segmentation after\npull from frag_list\") detected invalid geometry in frag_list skbs and\nredirects them from skb_segment_list to more robust skb_segment. But some\npackets with modified geometry can also hit bugs in that code. We don't\nknow how many such cases exist. Addressing each one by one also requires\ntouching the complex skb_segment code, which risks introducing bugs for\nother types of skbs. Instead, linearize all these packets that fail the\nbasic invariants on gso fraglist skbs. That is more robust.\n\nIf only part of the fraglist payload is pulled into head_skb, it will\nalways cause exception when splitting skbs by skb_segment. For detailed\ncall stack information, see below.\n\nValid SKB_GSO_FRAGLIST skbs\n- consist of two or more segments\n- the head_skb holds the protocol headers plus first gso_size\n- one or more frag_list skbs hold exactly one segment\n- all but the last must be gso_size\n\nOptional datapath hooks such as NAT and BPF (bpf_skb_pull_data) can\nmodify fraglist skbs, breaking these invariants.\n\nIn extreme cases they pull one part of data into skb linear. For UDP,\nthis causes three payloads with lengths of (11,11,10) bytes were\npulled tail to become (12,10,10) bytes.\n\nThe skbs no longer meets the above SKB_GSO_FRAGLIST conditions because\npayload was pulled into head_skb, it needs to be linearized before pass\nto regular skb_segment.\n\n skb_segment+0xcd0/0xd14\n __udp_gso_segment+0x334/0x5f4\n udp4_ufo_fragment+0x118/0x15c\n inet_gso_segment+0x164/0x338\n skb_mac_gso_segment+0xc4/0x13c\n __skb_gso_segment+0xc4/0x124\n validate_xmit_skb+0x9c/0x2c0\n validate_xmit_skb_list+0x4c/0x80\n sch_direct_xmit+0x70/0x404\n __dev_queue_xmit+0x64c/0xe5c\n neigh_resolve_output+0x178/0x1c4\n ip_finish_output2+0x37c/0x47c\n __ip_finish_output+0x194/0x240\n ip_finish_output+0x20/0xf4\n ip_output+0x100/0x1a0\n NF_HOOK+0xc4/0x16c\n ip_forward+0x314/0x32c\n ip_rcv+0x90/0x118\n __netif_receive_skb+0x74/0x124\n process_backlog+0xe8/0x1a4\n __napi_poll+0x5c/0x1f8\n net_rx_action+0x154/0x314\n handle_softirqs+0x154/0x4b8\n\n [118.376811] [C201134] rxq0_pus: [name:bug&]kernel BUG at net/core/skbuff.c:4278!\n [118.376829] [C201134] rxq0_pus: [name:traps&]Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP\n [118.470774] [C201134] rxq0_pus: [name:mrdump&]Kernel Offset: 0x178cc00000 from 0xffffffc008000000\n [118.470810] [C201134] rxq0_pus: [name:mrdump&]PHYS_OFFSET: 0x40000000\n [118.470827] [C201134] rxq0_pus: [name:mrdump&]pstate: 60400005 (nZCv daif +PAN -UAO)\n [118.470848] [C201134] rxq0_pus: [name:mrdump&]pc : [0xffffffd79598aefc] skb_segment+0xcd0/0xd14\n [118.470900] [C201134] rxq0_pus: [name:mrdump&]lr : [0xffffffd79598a5e8] skb_segment+0x3bc/0xd14\n [118.470928] [C201134] rxq0_pus: [name:mrdump&]sp : ffffffc008013770", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38124" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0e65f38bd1aa14ea86e221b7bb814d38278d86c3", "url": "https://git.kernel.org/stable/c/0e65f38bd1aa14ea86e221b7bb814d38278d86c3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3382a1ed7f778db841063f5d7e317ac55f9e7f72", "url": "https://git.kernel.org/stable/c/3382a1ed7f778db841063f5d7e317ac55f9e7f72" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4399f59a9467a324ed46657555f0e1f209a14acb", "url": "https://git.kernel.org/stable/c/4399f59a9467a324ed46657555f0e1f209a14acb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/85eef1748c024da1a191aed56b30a3a65958c50c", "url": "https://git.kernel.org/stable/c/85eef1748c024da1a191aed56b30a3a65958c50c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a04302867094bdc6efac1b598370fc47cf3f2388", "url": "https://git.kernel.org/stable/c/a04302867094bdc6efac1b598370fc47cf3f2388" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38000", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()\n\nWhen enqueuing the first packet to an HFSC class, hfsc_enqueue() calls the\nchild qdisc's peek() operation before incrementing sch->q.qlen and\nsch->qstats.backlog. If the child qdisc uses qdisc_peek_dequeued(), this may\ntrigger an immediate dequeue and potential packet drop. In such cases,\nqdisc_tree_reduce_backlog() is called, but the HFSC qdisc's qlen and backlog\nhave not yet been updated, leading to inconsistent queue accounting. This\ncan leave an empty HFSC class in the active list, causing further\nconsequences like use-after-free.\n\nThis patch fixes the bug by moving the increment of sch->q.qlen and\nsch->qstats.backlog before the call to the child qdisc's peek() operation.\nThis ensures that queue length and backlog are always accurate when packet\ndrops or dequeues are triggered during the peek.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38000" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1034e3310752e8675e313f7271b348914008719a", "url": "https://git.kernel.org/stable/c/1034e3310752e8675e313f7271b348914008719a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f3a22eebbc32b4fa8ce9c1d5f9db214b45b9335", "url": "https://git.kernel.org/stable/c/3f3a22eebbc32b4fa8ce9c1d5f9db214b45b9335" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f981138109f63232a5fb7165938d4c945cc1b9d", "url": "https://git.kernel.org/stable/c/3f981138109f63232a5fb7165938d4c945cc1b9d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/49b21795b8e5654a7df3d910a12e1060da4c04cf", "url": "https://git.kernel.org/stable/c/49b21795b8e5654a7df3d910a12e1060da4c04cf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/89c301e929a0db14ebd94b4d97764ce1d6981653", "url": "https://git.kernel.org/stable/c/89c301e929a0db14ebd94b4d97764ce1d6981653" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/93c276942e75de0e5bc91576300d292e968f5a02", "url": "https://git.kernel.org/stable/c/93c276942e75de0e5bc91576300d292e968f5a02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f1dde3eb17dc1b8bd07aed00004b1e05fc87a3d4", "url": "https://git.kernel.org/stable/c/f1dde3eb17dc1b8bd07aed00004b1e05fc87a3d4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f9f593e34d2fb67644372c8f7b033bdc622ad228", "url": "https://git.kernel.org/stable/c/f9f593e34d2fb67644372c8f7b033bdc622ad228" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-06T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-12T17:51:13.475285Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1757699471" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els19.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }