{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "tls: always refresh the queue when reading sock {CVE-2025-38471}\n- Bluetooth: hci_core: Fix use-after-free in vhci_flush() {CVE-2025-38250}\n- i2c/designware: Fix an initialization issue {CVE-2025-38380}\n- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds {CVE-2025-38159}\n- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race {CVE-2025-38085}\n- mm/khugepaged: fix GUP-fast interaction by sending IPI\n- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() {CVE-2025-21867}\n- crypto: algif_hash - fix double free in hash_accept {CVE-2025-38079}\n- ext4: avoid journaling sb update on error if journal is destroying {CVE-2025-22113}\n- ext4: define ext4_journal_destroy wrapper\n- Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() {CVE-2024-36013}\n- Bluetooth: Remove BT_HS {CVE-2024-38620}\n- block, bfq: fix bfqq uaf in bfq_limit_depth() {CVE-2024-53166}\n- dm-crypt: don't modify the data when using authenticated encryption {CVE-2024-26763}\n- bpf: Fix helper writes to read-only maps (alt version) {CVE-2024-49861}\n- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers {CVE-2023-52621}\n- netfilter: xtables: avoid NFPROTO_UNSPEC where needed {CVE-2024-50038}\n- xfs: add bounds checking to xlog_recover_process_data {CVE-2024-41014}\n- scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901}\n- net/mlx5: Add a timeout to acquire the command queue semaphore {CVE-2024-38556}\n- net: tipc: fix refcount warning in tipc_aead_encrypt {CVE-2025-38273}\n- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc {CVE-2025-37890}\n- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done {CVE-2025-38052}\n- misc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram() {CVE-2022-49788}\n- padata: fix UAF in padata_reorder {CVE-2025-21727}\n- RDMA/mlx5: Fix page_size variable overflow {CVE-2025-22091}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2025/clsa-2025_1758034087.json" }, { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "tracking": { "current_release_date": "2026-02-16T09:39:08Z", "generator": { "date": "2026-02-16T09:39:08Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2025:1758034087", "initial_release_date": "2025-09-16T14:52:48Z", "revision_history": [ { "date": "2025-09-16T14:52:48Z", "number": "1", "summary": "Initial version" }, { "date": "2026-02-16T09:39:08Z", "number": "2", "summary": "Update document" } ], "status": "final", "version": "2" }, "title": "kernel: Fix of 24 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els18?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els18?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els18?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els18?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els18?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els18?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product_id": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=noarch" } } }, { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.1101.el9_2.tuxcare.7.els18?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2022-49788", "cwe": { "id": "CWE-908", "name": "Use of Uninitialized Resource" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/vmw_vmci: fix an infoleak in vmci_host_do_receive_datagram()\n\n`struct vmci_event_qp` allocated by qp_notify_peer() contains padding,\nwhich may carry uninitialized data to the userspace, as observed by\nKMSAN:\n\n BUG: KMSAN: kernel-infoleak in instrument_copy_to_user ./include/linux/instrumented.h:121\n instrument_copy_to_user ./include/linux/instrumented.h:121\n _copy_to_user+0x5f/0xb0 lib/usercopy.c:33\n copy_to_user ./include/linux/uaccess.h:169\n vmci_host_do_receive_datagram drivers/misc/vmw_vmci/vmci_host.c:431\n vmci_host_unlocked_ioctl+0x33d/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:925\n vfs_ioctl fs/ioctl.c:51\n ...\n\n Uninit was stored to memory at:\n kmemdup+0x74/0xb0 mm/util.c:131\n dg_dispatch_as_host drivers/misc/vmw_vmci/vmci_datagram.c:271\n vmci_datagram_dispatch+0x4f8/0xfc0 drivers/misc/vmw_vmci/vmci_datagram.c:339\n qp_notify_peer+0x19a/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1479\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n vmci_qp_broker_alloc+0x96/0xd0 drivers/misc/vmw_vmci/vmci_queue_pair.c:1940\n vmci_host_do_alloc_queuepair drivers/misc/vmw_vmci/vmci_host.c:488\n vmci_host_unlocked_ioctl+0x24fd/0x43d0 drivers/misc/vmw_vmci/vmci_host.c:927\n ...\n\n Local variable ev created at:\n qp_notify_peer+0x54/0x290 drivers/misc/vmw_vmci/vmci_queue_pair.c:1456\n qp_broker_attach drivers/misc/vmw_vmci/vmci_queue_pair.c:1662\n qp_broker_alloc+0x2977/0x2f30 drivers/misc/vmw_vmci/vmci_queue_pair.c:1750\n\n Bytes 28-31 of 48 are uninitialized\n Memory access of size 48 starts at ffff888035155e00\n Data copied to user address 0000000020000100\n\nUse memset() to prevent the infoleaks.\n\nAlso speculatively fix qp_notify_peer_local(), which may suffer from the\nsame problem.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-49788" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad", "url": "https://git.kernel.org/stable/c/5a275528025ae4bc7e2232866856dfebf84b2fad" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a", "url": "https://git.kernel.org/stable/c/62634b43d3c4e1bf62fd540196f7081bf0885c0a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7", "url": "https://git.kernel.org/stable/c/76c50d77b928a33e5290aaa9fdc10e88254ff8c7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609", "url": "https://git.kernel.org/stable/c/7ccf7229b96fadc3a185d1391f814a604c7ef609" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d", "url": "https://git.kernel.org/stable/c/8e2f33c598370bcf828bab4d667d1d38bcd3c57d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e5b0d06d9b10f5f43101bd6598b076c347f9295f", "url": "https://git.kernel.org/stable/c/e5b0d06d9b10f5f43101bd6598b076c347f9295f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31", "url": "https://git.kernel.org/stable/c/e7061dd1fef2dfb6458cd521aef27aa66f510d31" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a", "url": "https://git.kernel.org/stable/c/f04586c2315cfd03d72ad0395705435e7ed07b1a" } ], "release_date": "2025-05-01T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-22091", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/mlx5: Fix page_size variable overflow\n\nChange all variables storing mlx5_umem_mkc_find_best_pgsz() result to\nunsigned long to support values larger than 31 and avoid overflow.\n\nFor example: If we try to register 4GB of memory that is contiguous in\nphysical memory, the driver will optimize the page_size and try to use\nan mkey with 4GB entity size. The 'unsigned int' page_size variable will\noverflow to '0' and we'll hit the WARN_ON() in alloc_cacheable_mr().\n\nWARNING: CPU: 2 PID: 1203 at drivers/infiniband/hw/mlx5/mr.c:1124 alloc_cacheable_mr+0x22/0x580 [mlx5_ib]\nModules linked in: mlx5_ib mlx5_core bonding ip6_gre ip6_tunnel tunnel6 ip_gre gre rdma_rxe rdma_ucm ib_uverbs ib_ipoib ib_umad rpcrdma ib_iser libiscsi scsi_transport_iscsi rdma_cm iw_cm ib_cm fuse ib_core [last unloaded: mlx5_core]\nCPU: 2 UID: 70878 PID: 1203 Comm: rdma_resource_l Tainted: G W 6.14.0-rc4-dirty #43\nTainted: [W]=WARN\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\nRIP: 0010:alloc_cacheable_mr+0x22/0x580 [mlx5_ib]\nCode: 90 90 90 90 90 90 90 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 41 55 41 54 41 52 53 48 83 ec 30 f6 46 28 04 4c 8b 77 08 75 21 <0f> 0b 49 c7 c2 ea ff ff ff 48 8d 65 d0 4c 89 d0 5b 41 5a 41 5c 41\nRSP: 0018:ffffc900006ffac8 EFLAGS: 00010246\nRAX: 0000000004c0d0d0 RBX: ffff888217a22000 RCX: 0000000000100001\nRDX: 00007fb7ac480000 RSI: ffff8882037b1240 RDI: ffff8882046f0600\nRBP: ffffc900006ffb28 R08: 0000000000000001 R09: 0000000000000000\nR10: 00000000000007e0 R11: ffffea0008011d40 R12: ffff8882037b1240\nR13: ffff8882046f0600 R14: ffff888217a22000 R15: ffffc900006ffe00\nFS: 00007fb7ed013340(0000) GS:ffff88885fd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fb7ed1d8000 CR3: 00000001fd8f6006 CR4: 0000000000772eb0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \n ? __warn+0x81/0x130\n ? alloc_cacheable_mr+0x22/0x580 [mlx5_ib]\n ? report_bug+0xfc/0x1e0\n ? handle_bug+0x55/0x90\n ? exc_invalid_op+0x17/0x70\n ? asm_exc_invalid_op+0x1a/0x20\n ? alloc_cacheable_mr+0x22/0x580 [mlx5_ib]\n create_real_mr+0x54/0x150 [mlx5_ib]\n ib_uverbs_reg_mr+0x17f/0x2a0 [ib_uverbs]\n ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0xca/0x140 [ib_uverbs]\n ib_uverbs_run_method+0x6d0/0x780 [ib_uverbs]\n ? __pfx_ib_uverbs_handler_UVERBS_METHOD_INVOKE_WRITE+0x10/0x10 [ib_uverbs]\n ib_uverbs_cmd_verbs+0x19b/0x360 [ib_uverbs]\n ? walk_system_ram_range+0x79/0xd0\n ? ___pte_offset_map+0x1b/0x110\n ? __pte_offset_map_lock+0x80/0x100\n ib_uverbs_ioctl+0xac/0x110 [ib_uverbs]\n __x64_sys_ioctl+0x94/0xb0\n do_syscall_64+0x50/0x110\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\nRIP: 0033:0x7fb7ecf0737b\nCode: ff ff ff 85 c0 79 9b 49 c7 c4 ff ff ff ff 5b 5d 4c 89 e0 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 7d 2a 0f 00 f7 d8 64 89 01 48\nRSP: 002b:00007ffdbe03ecc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007ffdbe03edb8 RCX: 00007fb7ecf0737b\nRDX: 00007ffdbe03eda0 RSI: 00000000c0181b01 RDI: 0000000000000003\nRBP: 00007ffdbe03ed80 R08: 00007fb7ecc84010 R09: 00007ffdbe03eed4\nR10: 0000000000000009 R11: 0000000000000246 R12: 00007ffdbe03eed4\nR13: 000000000000000c R14: 000000000000000c R15: 00007fb7ecc84150\n ", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-22091" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/01fd737776ca0f17a96d83cd7f0840ce130b9a02", "url": "https://git.kernel.org/stable/c/01fd737776ca0f17a96d83cd7f0840ce130b9a02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/05b215d5e219c0228b9c7082ba9bcf176c576646", "url": "https://git.kernel.org/stable/c/05b215d5e219c0228b9c7082ba9bcf176c576646" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e0c09f639ca0e102f250df8787740c2013e9d1b3", "url": "https://git.kernel.org/stable/c/e0c09f639ca0e102f250df8787740c2013e9d1b3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f0c2427412b43cdf1b7b0944749ea17ddb97d5a5", "url": "https://git.kernel.org/stable/c/f0c2427412b43cdf1b7b0944749ea17ddb97d5a5" } ], "release_date": "2025-04-16T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38085", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race\n\nhuge_pmd_unshare() drops a reference on a page table that may have\npreviously been shared across processes, potentially turning it into a\nnormal page table used in another process in which unrelated VMAs can\nafterwards be installed.\n\nIf this happens in the middle of a concurrent gup_fast(), gup_fast() could\nend up walking the page tables of another process. While I don't see any\nway in which that immediately leads to kernel memory corruption, it is\nreally weird and unexpected.\n\nFix it with an explicit broadcast IPI through tlb_remove_table_sync_one(),\njust like we do in khugepaged when removing page tables for a THP\ncollapse.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38085" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/034a52b5ef57c9c8225d94e9067f3390bb33922f", "url": "https://git.kernel.org/stable/c/034a52b5ef57c9c8225d94e9067f3390bb33922f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1013af4f585fccc4d3e5c5824d174de2257f7d6d", "url": "https://git.kernel.org/stable/c/1013af4f585fccc4d3e5c5824d174de2257f7d6d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/952596b08c74e8fe9e2883d1dc8a8f54a37384ec", "url": "https://git.kernel.org/stable/c/952596b08c74e8fe9e2883d1dc8a8f54a37384ec" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3d864c901a300c295692d129159fc3001a56185", "url": "https://git.kernel.org/stable/c/a3d864c901a300c295692d129159fc3001a56185" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a6bfeb97941a9187833b526bc6cc4ff5706d0ce9", "url": "https://git.kernel.org/stable/c/a6bfeb97941a9187833b526bc6cc4ff5706d0ce9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b7754d3aa7bf9f62218d096c0c8f6c13698fac8b", "url": "https://git.kernel.org/stable/c/b7754d3aa7bf9f62218d096c0c8f6c13698fac8b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fe684290418ef9ef76630072086ee530b92f02b8", "url": "https://git.kernel.org/stable/c/fe684290418ef9ef76630072086ee530b92f02b8" }, { "category": "external", "summary": "https://project-zero.issues.chromium.org/issues/420715744", "url": "https://project-zero.issues.chromium.org/issues/420715744" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-28T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-21727", "cwe": { "id": "CWE-820", "name": "Missing Synchronization" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\npadata: fix UAF in padata_reorder\nA bug was found when run ltp test:\nBUG: KASAN: slab-use-after-free in padata_find_next+0x29/0x1a0\nRead of size 4 at addr ffff88bbfe003524 by task kworker/u113:2/3039206\nCPU: 0 PID: 3039206 Comm: kworker/u113:2 Kdump: loaded Not tainted 6.6.0+\nWorkqueue: pdecrypt_parallel padata_parallel_worker\nCall Trace:\n\ndump_stack_lvl+0x32/0x50\nprint_address_description.constprop.0+0x6b/0x3d0\nprint_report+0xdd/0x2c0\nkasan_report+0xa5/0xd0\npadata_find_next+0x29/0x1a0\npadata_reorder+0x131/0x220\npadata_parallel_worker+0x3d/0xc0\nprocess_one_work+0x2ec/0x5a0\nIf 'mdelay(10)' is added before calling 'padata_find_next' in the\n'padata_reorder' function, this issue could be reproduced easily with\nltp test (pcrypt_aead01).\nThis can be explained as bellow:\npcrypt_aead_encrypt\n...\npadata_do_parallel\nrefcount_inc(&pd->refcnt); // add refcnt\n...\npadata_do_serial\npadata_reorder // pd\nwhile (1) {\npadata_find_next(pd, true); // using pd\nqueue_work_on\n...\npadata_serial_workercrypto_del_alg\npadata_put_pd_cnt // sub refcnt\npadata_free_shell\npadata_put_pd(ps->pd);\n// pd is freed\n// loop again, but pd is freed\n// call padata_find_next, UAF\n}\nIn the padata_reorder function, when it loops in 'while', if the alg is\ndeleted, the refcnt may be decreased to 0 before entering\n'padata_find_next', which leads to UAF.\nAs mentioned in [1], do_serial is supposed to be called with BHs disabled\nand always happen under RCU protection, to address this issue, add\nsynchronize_rcu() in 'padata_free_shell' wait for all _do_serial calls\nto finish.\n[1] https://lore.kernel.org/all/20221028160401.cccypv4euxikusiq@parnassus.localdomain/\n[2] https://lore.kernel.org/linux-kernel/jfjz5d7zwbytztackem7ibzalm5lnxldi2eofeiczqmqs2m7o6@fq426cwnjtkm/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21727" } ], "release_date": "2025-02-27T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-40901", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory\n\nThere is a potential out-of-bounds access when using test_bit() on a single\nword. The test_bit() and set_bit() functions operate on long values, and\nwhen testing or setting a single word, they can exceed the word\nboundary. KASAN detects this issue and produces a dump:\n\n\t BUG: KASAN: slab-out-of-bounds in _scsih_add_device.constprop.0 (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 drivers/scsi/mpt3sas/mpt3sas_scsih.c:7331) mpt3sas\n\n\t Write of size 8 at addr ffff8881d26e3c60 by task kworker/u1536:2/2965\n\nFor full log, please look at [1].\n\nMake the allocation at least the size of sizeof(unsigned long) so that\nset_bit() and test_bit() have sufficient room for read/write operations\nwithout overwriting unallocated memory.\n\n[1] Link: https://lore.kernel.org/all/ZkNcALr3W3KGYYJG@gmail.com/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-40901" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0081d2b3ae0a17a86b8cc0fa3c8bdc54e233ba16", "url": "https://git.kernel.org/stable/c/0081d2b3ae0a17a86b8cc0fa3c8bdc54e233ba16" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/18abb5db0aa9b2d48f7037a88b41af2eef821674", "url": "https://git.kernel.org/stable/c/18abb5db0aa9b2d48f7037a88b41af2eef821674" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/19649e49a6df07cd2e03e0a11396fd3a99485ec2", "url": "https://git.kernel.org/stable/c/19649e49a6df07cd2e03e0a11396fd3a99485ec2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4254dfeda82f20844299dca6c38cbffcfd499f41", "url": "https://git.kernel.org/stable/c/4254dfeda82f20844299dca6c38cbffcfd499f41" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/46bab2bcd771e725ff5ca3a68ba68cfeac45676c", "url": "https://git.kernel.org/stable/c/46bab2bcd771e725ff5ca3a68ba68cfeac45676c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/521f333e644c4246ca04a4fc4772edc53dd2a801", "url": "https://git.kernel.org/stable/c/521f333e644c4246ca04a4fc4772edc53dd2a801" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9079338c5a0d1f1fee34fb1c9e99b754efe414c5", "url": "https://git.kernel.org/stable/c/9079338c5a0d1f1fee34fb1c9e99b754efe414c5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e9bce7c751f6d6c7be88c0bc081a66aaf61a23ee", "url": "https://git.kernel.org/stable/c/e9bce7c751f6d6c7be88c0bc081a66aaf61a23ee" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" } ], "release_date": "2024-07-12T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-37890", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc\n\nAs described in Gerrard's report [1], we have a UAF case when an hfsc class\nhas a netem child qdisc. The crux of the issue is that hfsc is assuming\nthat checking for cl->qdisc->q.qlen == 0 guarantees that it hasn't inserted\nthe class in the vttree or eltree (which is not true for the netem\nduplicate case).\n\nThis patch checks the n_active class variable to make sure that the code\nwon't insert the class in the vttree or eltree twice, catering for the\nreentrant case.\n\n[1] https://lore.kernel.org/netdev/CAHcdcOm+03OD2j6R0=YHKqmy=VgJ8xEOKuP6c7mSgnp-TEJJbw@mail.gmail.com/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37890" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/141d34391abbb315d68556b7c67ad97885407547", "url": "https://git.kernel.org/stable/c/141d34391abbb315d68556b7c67ad97885407547" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/273bbcfa53541cde38b2003ad88a59b770306421", "url": "https://git.kernel.org/stable/c/273bbcfa53541cde38b2003ad88a59b770306421" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2e7093c7a8aba5d4f8809f271488e5babe75e202", "url": "https://git.kernel.org/stable/c/2e7093c7a8aba5d4f8809f271488e5babe75e202" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6082a87af4c52f58150d40dec1716011d871ac21", "url": "https://git.kernel.org/stable/c/6082a87af4c52f58150d40dec1716011d871ac21" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8df7d37d626430035b413b97cee18396b3450bef", "url": "https://git.kernel.org/stable/c/8df7d37d626430035b413b97cee18396b3450bef" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ac39fd4a757584d78ed062d4f6fd913f83bd98b5", "url": "https://git.kernel.org/stable/c/ac39fd4a757584d78ed062d4f6fd913f83bd98b5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e0cf8ee23e1915431f262a7b2dee0c7a7d699af0", "url": "https://git.kernel.org/stable/c/e0cf8ee23e1915431f262a7b2dee0c7a7d699af0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3e949a39a91d1f829a4890e7dfe9417ac72e4d0", "url": "https://git.kernel.org/stable/c/e3e949a39a91d1f829a4890e7dfe9417ac72e4d0" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html", "url": "https://lists.debian.org/debian-lts-announce/2025/08/msg00010.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" } ], "release_date": "2025-05-16T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38159", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds\n\nSet the size to 6 instead of 2, since 'para' array is passed to\n'rtw_fw_bt_wifi_control(rtwdev, para[0], ¶[1])', which reads\n5 bytes:\n\nvoid rtw_fw_bt_wifi_control(struct rtw_dev *rtwdev, u8 op_code, u8 *data)\n{\n ...\n SET_BT_WIFI_CONTROL_DATA1(h2c_pkt, *data);\n SET_BT_WIFI_CONTROL_DATA2(h2c_pkt, *(data + 1));\n ...\n SET_BT_WIFI_CONTROL_DATA5(h2c_pkt, *(data + 4));\n\nDetected using the static analysis tool - Svace.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38159" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1ee8ea6937d13b20f90ff35d71ccc03ba448182d", "url": "https://git.kernel.org/stable/c/1ee8ea6937d13b20f90ff35d71ccc03ba448182d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4c2c372de2e108319236203cce6de44d70ae15cd", "url": "https://git.kernel.org/stable/c/4c2c372de2e108319236203cce6de44d70ae15cd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/68a1037f0bac4de9a585aa9c879ef886109f3647", "url": "https://git.kernel.org/stable/c/68a1037f0bac4de9a585aa9c879ef886109f3647" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/74e18211c2c89ab66c9546baa7408288db61aa0d", "url": "https://git.kernel.org/stable/c/74e18211c2c89ab66c9546baa7408288db61aa0d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9febcc8bded8be0d7efd8237fcef599b6d93b788", "url": "https://git.kernel.org/stable/c/9febcc8bded8be0d7efd8237fcef599b6d93b788" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c13255389499275bc5489a0b5b7940ccea3aef04", "url": "https://git.kernel.org/stable/c/c13255389499275bc5489a0b5b7940ccea3aef04" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38079", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_hash - fix double free in hash_accept\n\nIf accept(2) is called on socket type algif_hash with\nMSG_MORE flag set and crypto_ahash_import fails,\nsk2 is freed. However, it is also freed in af_alg_release,\nleading to slab-use-after-free error.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38079" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0346f4b742345d1c733c977f3a7aef5a6419a967", "url": "https://git.kernel.org/stable/c/0346f4b742345d1c733c977f3a7aef5a6419a967" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/134daaba93193df9e988524b5cd2f52d15eb1993", "url": "https://git.kernel.org/stable/c/134daaba93193df9e988524b5cd2f52d15eb1993" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f45a8d64fb4ed4830a4b3273834ecd6ca504896", "url": "https://git.kernel.org/stable/c/2f45a8d64fb4ed4830a4b3273834ecd6ca504896" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5bff312b59b3f2a54ff504e4f4e47272b64f3633", "url": "https://git.kernel.org/stable/c/5bff312b59b3f2a54ff504e4f4e47272b64f3633" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2df03ed4052e97126267e8c13ad4204ea6ba9b6", "url": "https://git.kernel.org/stable/c/b2df03ed4052e97126267e8c13ad4204ea6ba9b6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bf7bba75b91539e93615f560893a599c1e1c98bf", "url": "https://git.kernel.org/stable/c/bf7bba75b91539e93615f560893a599c1e1c98bf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c3059d58f79fdfb2201249c2741514e34562b547", "url": "https://git.kernel.org/stable/c/c3059d58f79fdfb2201249c2741514e34562b547" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f0f3d09f53534ea385d55ced408f2b67059b16e4", "url": "https://git.kernel.org/stable/c/f0f3d09f53534ea385d55ced408f2b67059b16e4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-18T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-41014", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: add bounds checking to xlog_recover_process_data\n\nThere is a lack of verification of the space occupied by fixed members\nof xlog_op_header in the xlog_recover_process_data.\n\nWe can create a crafted image to trigger an out of bounds read by\nfollowing these steps:\n 1) Mount an image of xfs, and do some file operations to leave records\n 2) Before umounting, copy the image for subsequent steps to simulate\n abnormal exit. Because umount will ensure that tail_blk and\n head_blk are the same, which will result in the inability to enter\n xlog_recover_process_data\n 3) Write a tool to parse and modify the copied image in step 2\n 4) Make the end of the xlog_op_header entries only 1 byte away from\n xlog_rec_header->h_size\n 5) xlog_rec_header->h_num_logops++\n 6) Modify xlog_rec_header->h_crc\n\nFix:\nAdd a check to make sure there is sufficient space to access fixed members\nof xlog_op_header.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-41014" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7cd9f0a33e738cd58876f1bc8d6c1aa5bc4fc8c1", "url": "https://git.kernel.org/stable/c/7cd9f0a33e738cd58876f1bc8d6c1aa5bc4fc8c1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d1e3efe783365db59da88f08a2e0bfe1cc95b143", "url": "https://git.kernel.org/stable/c/d1e3efe783365db59da88f08a2e0bfe1cc95b143" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fb63435b7c7dc112b1ae1baea5486e0a6e27b196", "url": "https://git.kernel.org/stable/c/fb63435b7c7dc112b1ae1baea5486e0a6e27b196" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html" } ], "release_date": "2024-07-29T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38052", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done\n\nSyzbot reported a slab-use-after-free with the following call trace:\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n Read of size 8 at addr ffff88807a733000 by task kworker/1:0/25\n\n Call Trace:\n kasan_report+0xd9/0x110 mm/kasan/report.c:601\n tipc_aead_encrypt_done+0x4bd/0x510 net/tipc/crypto.c:840\n crypto_request_complete include/crypto/algapi.h:266\n aead_request_complete include/crypto/internal/aead.h:85\n cryptd_aead_crypt+0x3b8/0x750 crypto/cryptd.c:772\n crypto_request_complete include/crypto/algapi.h:266\n cryptd_queue_worker+0x131/0x200 crypto/cryptd.c:181\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\n Allocated by task 8355:\n kzalloc_noprof include/linux/slab.h:778\n tipc_crypto_start+0xcc/0x9e0 net/tipc/crypto.c:1466\n tipc_init_net+0x2dd/0x430 net/tipc/core.c:72\n ops_init+0xb9/0x650 net/core/net_namespace.c:139\n setup_net+0x435/0xb40 net/core/net_namespace.c:343\n copy_net_ns+0x2f0/0x670 net/core/net_namespace.c:508\n create_new_namespaces+0x3ea/0xb10 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0xc0/0x1f0 kernel/nsproxy.c:228\n ksys_unshare+0x419/0x970 kernel/fork.c:3323\n __do_sys_unshare kernel/fork.c:3394\n\n Freed by task 63:\n kfree+0x12a/0x3b0 mm/slub.c:4557\n tipc_crypto_stop+0x23c/0x500 net/tipc/crypto.c:1539\n tipc_exit_net+0x8c/0x110 net/tipc/core.c:119\n ops_exit_list+0xb0/0x180 net/core/net_namespace.c:173\n cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n\nAfter freed the tipc_crypto tx by delete namespace, tipc_aead_encrypt_done\nmay still visit it in cryptd_queue_worker workqueue.\n\nI reproduce this issue by:\n ip netns add ns1\n ip link add veth1 type veth peer name veth2\n ip link set veth1 netns ns1\n ip netns exec ns1 tipc bearer enable media eth dev veth1\n ip netns exec ns1 tipc node set key this_is_a_master_key master\n ip netns exec ns1 tipc bearer disable media eth dev veth1\n ip netns del ns1\n\nThe key of reproduction is that, simd_aead_encrypt is interrupted, leading\nto crypto_simd_usable() return false. Thus, the cryptd_queue_worker is\ntriggered, and the tipc_crypto tx will be visited.\n\n tipc_disc_timeout\n tipc_bearer_xmit_skb\n tipc_crypto_xmit\n tipc_aead_encrypt\n crypto_aead_encrypt\n // encrypt()\n simd_aead_encrypt\n // crypto_simd_usable() is false\n child = &ctx->cryptd_tfm->base;\n\n simd_aead_encrypt\n crypto_aead_encrypt\n // encrypt()\n cryptd_aead_encrypt_enqueue\n cryptd_aead_enqueue\n cryptd_enqueue_request\n // trigger cryptd_queue_worker\n queue_work_on(smp_processor_id(), cryptd_wq, &cpu_queue->work)\n\nFix this by holding net reference count before encrypt.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38052" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4a0fddc2c0d5c28aec8c262ad4603be0bef1938c", "url": "https://git.kernel.org/stable/c/4a0fddc2c0d5c28aec8c262ad4603be0bef1938c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/689a205cd968a1572ab561b0c4c2d50a10e9d3b0", "url": "https://git.kernel.org/stable/c/689a205cd968a1572ab561b0c4c2d50a10e9d3b0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b19fc1d0be3c3397e5968fe2627f22e7f84673b1", "url": "https://git.kernel.org/stable/c/b19fc1d0be3c3397e5968fe2627f22e7f84673b1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b8fcae6d2e93c54cacb8f579a77d827c1c643eb5", "url": "https://git.kernel.org/stable/c/b8fcae6d2e93c54cacb8f579a77d827c1c643eb5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d42ed4de6aba232d946d20653a70f79158a6535b", "url": "https://git.kernel.org/stable/c/d42ed4de6aba232d946d20653a70f79158a6535b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e279024617134c94fd3e37470156534d5f2b3472", "url": "https://git.kernel.org/stable/c/e279024617134c94fd3e37470156534d5f2b3472" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f5c2c4eaaa5a8e7e0685ec031d480e588e263e59", "url": "https://git.kernel.org/stable/c/f5c2c4eaaa5a8e7e0685ec031d480e588e263e59" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-18T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-50038", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xtables: avoid NFPROTO_UNSPEC where needed\n\nsyzbot managed to call xt_cluster match via ebtables:\n\n WARNING: CPU: 0 PID: 11 at net/netfilter/xt_cluster.c:72 xt_cluster_mt+0x196/0x780\n [..]\n ebt_do_table+0x174b/0x2a40\n\nModule registers to NFPROTO_UNSPEC, but it assumes ipv4/ipv6 packet\nprocessing. As this is only useful to restrict locally terminating\nTCP/UDP traffic, register this for ipv4 and ipv6 family only.\n\nPablo points out that this is a general issue, direct users of the\nset/getsockopt interface can call into targets/matches that were only\nintended for use with ip(6)tables.\n\nCheck all UNSPEC matches and targets for similar issues:\n\n- matches and targets are fine except if they assume skb_network_header()\n is valid -- this is only true when called from inet layer: ip(6) stack\n pulls the ip/ipv6 header into linear data area.\n- targets that return XT_CONTINUE or other xtables verdicts must be\n restricted too, they are incompatbile with the ebtables traverser, e.g.\n EBT_CONTINUE is a completely different value than XT_CONTINUE.\n\nMost matches/targets are changed to register for NFPROTO_IPV4/IPV6, as\nthey are provided for use by ip(6)tables.\n\nThe MARK target is also used by arptables, so register for NFPROTO_ARP too.\n\nWhile at it, bail out if connbytes fails to enable the corresponding\nconntrack family.\n\nThis change passes the selftests in iptables.git.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-50038" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0bfcb7b71e735560077a42847f69597ec7dcc326", "url": "https://git.kernel.org/stable/c/0bfcb7b71e735560077a42847f69597ec7dcc326" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4cdc55ec6222bb195995cc58f7cb46e4d8907056", "url": "https://git.kernel.org/stable/c/4cdc55ec6222bb195995cc58f7cb46e4d8907056" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/85ff9a0f793ca52c527e75cd40a69c948627ebde", "url": "https://git.kernel.org/stable/c/85ff9a0f793ca52c527e75cd40a69c948627ebde" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f482bb7e27b37f1f734bb9a8eeb28b23d59d189", "url": "https://git.kernel.org/stable/c/8f482bb7e27b37f1f734bb9a8eeb28b23d59d189" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/997f67d813ce0cf5eb3cdb8f124da68141e91b6c", "url": "https://git.kernel.org/stable/c/997f67d813ce0cf5eb3cdb8f124da68141e91b6c" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html" } ], "release_date": "2024-10-21T20:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-26763", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm-crypt: don't modify the data when using authenticated encryption\n\nIt was said that authenticated encryption could produce invalid tag when\nthe data that is being encrypted is modified [1]. So, fix this problem by\ncopying the data into the clone bio first and then encrypt them inside the\nclone bio.\n\nThis may reduce performance, but it is needed to prevent the user from\ncorrupting the device by writing data with O_DIRECT and modifying them at\nthe same time.\n\n[1] https://lore.kernel.org/all/20240207004723.GA35324@sol.localdomain/T/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-26763" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa", "url": "https://git.kernel.org/stable/c/0dccbb93538fe89a86c6de31d4b1c8c560848eaa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529", "url": "https://git.kernel.org/stable/c/1a4371db68a31076afbe56ecce34fbbe6c80c529" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90", "url": "https://git.kernel.org/stable/c/3c652f6fa1e1f9f02c3fbf359d260ad153ec5f90" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e", "url": "https://git.kernel.org/stable/c/43a202bd552976497474ae144942e32cc5f34d7e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7", "url": "https://git.kernel.org/stable/c/50c70240097ce41fe6bce6478b80478281e4d0f7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75", "url": "https://git.kernel.org/stable/c/64ba01a365980755732972523600a961c4266b75" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857", "url": "https://git.kernel.org/stable/c/d9e3763a505e50ba3bd22846f2a8db99429fb857" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6", "url": "https://git.kernel.org/stable/c/e08c2a8d27e989f0f5b0888792643027d7e691e6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html", "url": "https://lists.debian.org/debian-lts-announce/2024/06/msg00020.html" } ], "release_date": "2024-04-03T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-36013", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect()\nExtend a critical section to prevent chan from early freeing.\nAlso make the l2cap_connect() return type void. Nothing is using the\nreturned value but it is ugly to return a potentially freed pointer.\nMaking it void will help with backports because earlier kernels did use\nthe return value. Now the compile will break for kernels where this\npatch is not a complete fix.\nCall stack summary:\n[use]\nl2cap_bredr_sig_cmd\nl2cap_connect\n┌ mutex_lock(&conn->chan_lock);\n│ chan = pchan->ops->new_connection(pchan); <- alloc chan\n│ __l2cap_chan_add(conn, chan);\n│ l2cap_chan_hold(chan);\n│ list_add(&chan->list, &conn->chan_l); ... (1)\nâ”” mutex_unlock(&conn->chan_lock);\nchan->conf_state ... (4) <- use after free\n[free]\nl2cap_conn_del\n┌ mutex_lock(&conn->chan_lock);\n│ foreach chan in conn->chan_l: ... (2)\n│ l2cap_chan_put(chan);\n│ l2cap_chan_destroy\n│ kfree(chan) ... (3) <- chan freed\nâ”” mutex_unlock(&conn->chan_lock);\n==================================================================\nBUG: KASAN: slab-use-after-free in instrument_atomic_read\ninclude/linux/instrumented.h:68 [inline]\nBUG: KASAN: slab-use-after-free in _test_bit\ninclude/asm-generic/bitops/instrumented-non-atomic.h:141 [inline]\nBUG: KASAN: slab-use-after-free in l2cap_connect+0xa67/0x11a0\nnet/bluetooth/l2cap_core.c:4260\nRead of size 8 at addr ffff88810bf040a0 by task kworker/u3:1/311", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-36013" } ], "release_date": "2024-05-23T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-21867", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nbpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()\nKMSAN reported a use-after-free issue in eth_skb_pkt_type()[1]. The\ncause of the issue was that eth_skb_pkt_type() accessed skb's data\nthat didn't contain an Ethernet header. This occurs when\nbpf_prog_test_run_xdp() passes an invalid value as the user_data\nargument to bpf_test_init().\nFix this by returning an error when user_data is less than ETH_HLEN in\nbpf_test_init(). Additionally, remove the check for \"if (user_size >\nsize)\" as it is unnecessary.\n[1]\nBUG: KMSAN: use-after-free in eth_skb_pkt_type include/linux/etherdevice.h:627 [inline]\nBUG: KMSAN: use-after-free in eth_type_trans+0x4ee/0x980 net/ethernet/eth.c:165\neth_skb_pkt_type include/linux/etherdevice.h:627 [inline]\neth_type_trans+0x4ee/0x980 net/ethernet/eth.c:165\n__xdp_build_skb_from_frame+0x5a8/0xa50 net/core/xdp.c:635\nxdp_recv_frames net/bpf/test_run.c:272 [inline]\nxdp_test_run_batch net/bpf/test_run.c:361 [inline]\nbpf_test_run_xdp_live+0x2954/0x3330 net/bpf/test_run.c:390\nbpf_prog_test_run_xdp+0x148e/0x1b10 net/bpf/test_run.c:1318\nbpf_prog_test_run+0x5b7/0xa30 kernel/bpf/syscall.c:4371\n__sys_bpf+0x6a6/0xe20 kernel/bpf/syscall.c:5777\n__do_sys_bpf kernel/bpf/syscall.c:5866 [inline]\n__se_sys_bpf kernel/bpf/syscall.c:5864 [inline]\n__x64_sys_bpf+0xa4/0xf0 kernel/bpf/syscall.c:5864\nx64_sys_call+0x2ea0/0x3d90 arch/x86/include/generated/asm/syscalls_64.h:322\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xd9/0x1d0 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\nUninit was created at:\nfree_pages_prepare mm/page_alloc.c:1056 [inline]\nfree_unref_page+0x156/0x1320 mm/page_alloc.c:2657\n__free_pages+0xa3/0x1b0 mm/page_alloc.c:4838\nbpf_ringbuf_free kernel/bpf/ringbuf.c:226 [inline]\nringbuf_map_free+0xff/0x1e0 kernel/bpf/ringbuf.c:235\nbpf_map_free kernel/bpf/syscall.c:838 [inline]\nbpf_map_free_deferred+0x17c/0x310 kernel/bpf/syscall.c:862\nprocess_one_work kernel/workqueue.c:3229 [inline]\nprocess_scheduled_works+0xa2b/0x1b60 kernel/workqueue.c:3310\nworker_thread+0xedf/0x1550 kernel/workqueue.c:3391\nkthread+0x535/0x6b0 kernel/kthread.c:389\nret_from_fork+0x6e/0x90 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\nCPU: 1 UID: 0 PID: 17276 Comm: syz.1.16450 Not tainted 6.12.0-05490-g9bb88c659673 #8\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-21867" } ], "release_date": "2025-03-27T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38273", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tipc: fix refcount warning in tipc_aead_encrypt\n\nsyzbot reported a refcount warning [1] caused by calling get_net() on\na network namespace that is being destroyed (refcount=0). This happens\nwhen a TIPC discovery timer fires during network namespace cleanup.\n\nThe recently added get_net() call in commit e279024617134 (\"net/tipc:\nfix slab-use-after-free Read in tipc_aead_encrypt_done\") attempts to\nhold a reference to the network namespace. However, if the namespace\nis already being destroyed, its refcount might be zero, leading to the\nuse-after-free warning.\n\nReplace get_net() with maybe_get_net(), which safely checks if the\nrefcount is non-zero before incrementing it. If the namespace is being\ndestroyed, return -ENODEV early, after releasing the bearer reference.\n\n[1]: https://lore.kernel.org/all/68342b55.a70a0220.253bc2.0091.GAE@google.com/T/#m12019cf9ae77e1954f666914640efa36d52704a2", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38273" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/307391e8fe70401a6d39ecc9978e13c2c0cdf81f", "url": "https://git.kernel.org/stable/c/307391e8fe70401a6d39ecc9978e13c2c0cdf81f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/445d59025d76d0638b03110f8791d5b89ed5162d", "url": "https://git.kernel.org/stable/c/445d59025d76d0638b03110f8791d5b89ed5162d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9ff60e0d9974dccf24e89bcd3ee7933e538d929f", "url": "https://git.kernel.org/stable/c/9ff60e0d9974dccf24e89bcd3ee7933e538d929f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/acab7ca5ff19889b80a8ee7dec220ee1a96dede9", "url": "https://git.kernel.org/stable/c/acab7ca5ff19889b80a8ee7dec220ee1a96dede9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c762fc79d710d676b793f9d98b1414efe6eb51e6", "url": "https://git.kernel.org/stable/c/c762fc79d710d676b793f9d98b1414efe6eb51e6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e0b11227c4e8eb4bdf1b86aa8f0f3abb24e0f029", "url": "https://git.kernel.org/stable/c/e0b11227c4e8eb4bdf1b86aa8f0f3abb24e0f029" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f29ccaa07cf3d35990f4d25028cc55470d29372b", "url": "https://git.kernel.org/stable/c/f29ccaa07cf3d35990f4d25028cc55470d29372b" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-10T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-53166", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix bfqq uaf in bfq_limit_depth()\n\nSet new allocated bfqq to bic or remove freed bfqq from bic are both\nprotected by bfqd->lock, however bfq_limit_depth() is deferencing bfqq\nfrom bic without the lock, this can lead to UAF if the io_context is\nshared by multiple tasks.\n\nFor example, test bfq with io_uring can trigger following UAF in v6.6:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in bfqq_group+0x15/0x50\n\nCall Trace:\n \n dump_stack_lvl+0x47/0x80\n print_address_description.constprop.0+0x66/0x300\n print_report+0x3e/0x70\n kasan_report+0xb4/0xf0\n bfqq_group+0x15/0x50\n bfqq_request_over_limit+0x130/0x9a0\n bfq_limit_depth+0x1b5/0x480\n __blk_mq_alloc_requests+0x2b5/0xa00\n blk_mq_get_new_requests+0x11d/0x1d0\n blk_mq_submit_bio+0x286/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __block_write_full_folio+0x3d0/0x640\n writepage_cb+0x3b/0xc0\n write_cache_pages+0x254/0x6c0\n write_cache_pages+0x254/0x6c0\n do_writepages+0x192/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork_asm+0x1b/0x30\n \n\nAllocated by task 808602:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n __kasan_slab_alloc+0x83/0x90\n kmem_cache_alloc_node+0x1b1/0x6d0\n bfq_get_queue+0x138/0xfa0\n bfq_get_bfqq_handle_split+0xe3/0x2c0\n bfq_init_rq+0x196/0xbb0\n bfq_insert_request.isra.0+0xb5/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_insert_request+0x15d/0x440\n blk_mq_submit_bio+0x8a4/0xb00\n submit_bio_noacct_nocheck+0x331/0x400\n __blkdev_direct_IO_async+0x2dd/0x330\n blkdev_write_iter+0x39a/0x450\n io_write+0x22a/0x840\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFreed by task 808589:\n kasan_save_stack+0x1e/0x40\n kasan_set_track+0x21/0x30\n kasan_save_free_info+0x27/0x40\n __kasan_slab_free+0x126/0x1b0\n kmem_cache_free+0x10c/0x750\n bfq_put_queue+0x2dd/0x770\n __bfq_insert_request.isra.0+0x155/0x7a0\n bfq_insert_request.isra.0+0x122/0x480\n bfq_insert_requests+0x156/0x180\n blk_mq_dispatch_plug_list+0x528/0x7e0\n blk_mq_flush_plug_list.part.0+0xe5/0x590\n __blk_flush_plug+0x3b/0x90\n blk_finish_plug+0x40/0x60\n do_writepages+0x19d/0x310\n filemap_fdatawrite_wbc+0x95/0xc0\n __filemap_fdatawrite_range+0x99/0xd0\n filemap_write_and_wait_range.part.0+0x4d/0xa0\n blkdev_read_iter+0xef/0x1e0\n io_read+0x1b6/0x8a0\n io_issue_sqe+0x87/0x300\n io_wq_submit_work+0xeb/0x390\n io_worker_handle_work+0x24d/0x550\n io_wq_worker+0x27f/0x6c0\n ret_from_fork+0x2d/0x50\n ret_from_fork_asm+0x1b/0x30\n\nFix the problem by protecting bic_to_bfqq() with bfqd->lock.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-53166" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/01a853faaeaf3379ccf358ade582b1d28752126e", "url": "https://git.kernel.org/stable/c/01a853faaeaf3379ccf358ade582b1d28752126e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/906cdbdd3b018ff69cc830173bce277a847d4fdc", "url": "https://git.kernel.org/stable/c/906cdbdd3b018ff69cc830173bce277a847d4fdc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ada4ca5fd5a9d5212f28164d49a4885951c979c9", "url": "https://git.kernel.org/stable/c/ada4ca5fd5a9d5212f28164d49a4885951c979c9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dcaa738afde55085ac6056252e319479cf23cde2", "url": "https://git.kernel.org/stable/c/dcaa738afde55085ac6056252e319479cf23cde2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e8b8344de3980709080d86c157d24e7de07d70ad", "url": "https://git.kernel.org/stable/c/e8b8344de3980709080d86c157d24e7de07d70ad" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html" } ], "release_date": "2024-12-27T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-38620", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Remove HCI_AMP support\n\nSince BT_HS has been remove HCI_AMP controllers no longer has any use so\nremove it along with the capability of creating AMP controllers.\n\nSince we no longer need to differentiate between AMP and Primary\ncontrollers, as only HCI_PRIMARY is left, this also remove\nhdev->dev_type altogether.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-38620" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156", "url": "https://git.kernel.org/stable/c/5af2e235b0d5b797e9531a00c50058319130e156" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7", "url": "https://git.kernel.org/stable/c/84a4bb6548a29326564f0e659fb8064503ecc1c7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03", "url": "https://git.kernel.org/stable/c/af1d425b6dc67cd67809f835dd7afb6be4d43e03" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec", "url": "https://git.kernel.org/stable/c/d3c7b012d912b31ad23b9349c0e499d6dddd48ec" } ], "release_date": "2024-06-20T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-22113", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: avoid journaling sb update on error if journal is destroying\n\nPresently we always BUG_ON if trying to start a transaction on a journal marked\nwith JBD2_UNMOUNT, since this should never happen. However, while ltp running\nstress tests, it was observed that in case of some error handling paths, it is\npossible for update_super_work to start a transaction after the journal is\ndestroyed eg:\n\n(umount)\next4_kill_sb\n kill_block_super\n generic_shutdown_super\n sync_filesystem /* commits all txns */\n evict_inodes\n /* might start a new txn */\n ext4_put_super\n\tflush_work(&sbi->s_sb_upd_work) /* flush the workqueue */\n jbd2_journal_destroy\n journal_kill_thread\n journal->j_flags |= JBD2_UNMOUNT;\n jbd2_journal_commit_transaction\n jbd2_journal_get_descriptor_buffer\n jbd2_journal_bmap\n ext4_journal_bmap\n ext4_map_blocks\n ...\n ext4_inode_error\n ext4_handle_error\n schedule_work(&sbi->s_sb_upd_work)\n\n /* work queue kicks in */\n update_super_work\n jbd2_journal_start\n start_this_handle\n BUG_ON(journal->j_flags &\n JBD2_UNMOUNT)\n\nHence, introduce a new mount flag to indicate journal is destroying and only do\na journaled (and deferred) update of sb if this flag is not set. Otherwise, just\nfallback to an un-journaled commit.\n\nFurther, in the journal destroy path, we have the following sequence:\n\n 1. Set mount flag indicating journal is destroying\n 2. force a commit and wait for it\n 3. flush pending sb updates\n\nThis sequence is important as it ensures that, after this point, there is no sb\nupdate that might be journaled so it is safe to update the sb outside the\njournal. (To avoid race discussed in 2d01ddc86606)\n\nAlso, we don't need a similar check in ext4_grp_locked_error since it is only\ncalled from mballoc and AFAICT it would be always valid to schedule work here.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-22113" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ce2f26e73783b4a7c46a86e3af5b5c8de0971790", "url": "https://git.kernel.org/stable/c/ce2f26e73783b4a7c46a86e3af5b5c8de0971790" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/db05767b5bc307143d99fe2afd8c43af58d2ebef", "url": "https://git.kernel.org/stable/c/db05767b5bc307143d99fe2afd8c43af58d2ebef" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/eddca44ddf810e27f0c96913aa3cc92ebd679ddb", "url": "https://git.kernel.org/stable/c/eddca44ddf810e27f0c96913aa3cc92ebd679ddb" } ], "release_date": "2025-04-16T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38471", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ntls: always refresh the queue when reading sock\n\nAfter recent changes in net-next TCP compacts skbs much more\naggressively. This unearthed a bug in TLS where we may try\nto operate on an old skb when checking if all skbs in the\nqueue have matching decrypt state and geometry.\n\n BUG: KASAN: slab-use-after-free in tls_strp_check_rcv+0x898/0x9a0 [tls]\n (net/tls/tls_strp.c:436 net/tls/tls_strp.c:530 net/tls/tls_strp.c:544)\n Read of size 4 at addr ffff888013085750 by task tls/13529\n\n CPU: 2 UID: 0 PID: 13529 Comm: tls Not tainted 6.16.0-rc5-virtme\n Call Trace:\n kasan_report+0xca/0x100\n tls_strp_check_rcv+0x898/0x9a0 [tls]\n tls_rx_rec_wait+0x2c9/0x8d0 [tls]\n tls_sw_recvmsg+0x40f/0x1aa0 [tls]\n inet_recvmsg+0x1c3/0x1f0\n\nAlways reload the queue, fast path is to have the record in the queue\nwhen we wake, anyway (IOW the path going down \"if !strp->stm.full_len\").", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38471" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1f3a429c21e0e43e8b8c55d30701e91411a4df02", "url": "https://git.kernel.org/stable/c/1f3a429c21e0e43e8b8c55d30701e91411a4df02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4ab26bce3969f8fd925fe6f6f551e4d1a508c68b", "url": "https://git.kernel.org/stable/c/4ab26bce3969f8fd925fe6f6f551e4d1a508c68b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/730fed2ff5e259495712518e18d9f521f61972bb", "url": "https://git.kernel.org/stable/c/730fed2ff5e259495712518e18d9f521f61972bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c76f6f437c46b2390888e0e1dc7aafafa9f4e0c6", "url": "https://git.kernel.org/stable/c/c76f6f437c46b2390888e0e1dc7aafafa9f4e0c6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cdb767915fc9a15d88d19d52a1455f1dc3e5ddc8", "url": "https://git.kernel.org/stable/c/cdb767915fc9a15d88d19d52a1455f1dc3e5ddc8" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-28T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-38556", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5: Add a timeout to acquire the command queue semaphore\n\nPrevent forced completion handling on an entry that has not yet been\nassigned an index, causing an out of bounds access on idx = -22.\nInstead of waiting indefinitely for the sem, blocking flow now waits for\nindex to be allocated or a sem acquisition timeout before beginning the\ntimer for FW completion.\n\nKernel log example:\nmlx5_core 0000:06:00.0: wait_func_handle_exec_timeout:1128:(pid 185911): cmd[-22]: CREATE_UCTX(0xa04) No done completion", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-38556" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2d0962d05c93de391ce85f6e764df895f47c8918", "url": "https://git.kernel.org/stable/c/2d0962d05c93de391ce85f6e764df895f47c8918" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/485d65e1357123a697c591a5aeb773994b247ad7", "url": "https://git.kernel.org/stable/c/485d65e1357123a697c591a5aeb773994b247ad7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4baae687a20ef2b82fde12de3c04461e6f2521d6", "url": "https://git.kernel.org/stable/c/4baae687a20ef2b82fde12de3c04461e6f2521d6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94024332a129c6e4275569d85c0c1bfb2ae2d71b", "url": "https://git.kernel.org/stable/c/94024332a129c6e4275569d85c0c1bfb2ae2d71b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f9caccdd42e999b74303c9b0643300073ed5d319", "url": "https://git.kernel.org/stable/c/f9caccdd42e999b74303c9b0643300073ed5d319" } ], "release_date": "2024-06-19T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38250", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix use-after-free in vhci_flush()\n\nsyzbot reported use-after-free in vhci_flush() without repro. [0]\n\nFrom the splat, a thread close()d a vhci file descriptor while\nits device was being used by iotcl() on another thread.\n\nOnce the last fd refcnt is released, vhci_release() calls\nhci_unregister_dev(), hci_free_dev(), and kfree() for struct\nvhci_data, which is set to hci_dev->dev->driver_data.\n\nThe problem is that there is no synchronisation after unlinking\nhdev from hci_dev_list in hci_unregister_dev(). There might be\nanother thread still accessing the hdev which was fetched before\nthe unlink operation.\n\nWe can use SRCU for such synchronisation.\n\nLet's run hci_dev_reset() under SRCU and wait for its completion\nin hci_unregister_dev().\n\nAnother option would be to restore hci_dev->destruct(), which was\nremoved in commit 587ae086f6e4 (\"Bluetooth: Remove unused\nhci-destruct cb\"). However, this would not be a good solution, as\nwe should not run hci_unregister_dev() while there are in-flight\nioctl() requests, which could lead to another data-race KCSAN splat.\n\nNote that other drivers seem to have the same problem, for exmaple,\nvirtbt_remove().\n\n[0]:\nBUG: KASAN: slab-use-after-free in skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\nBUG: KASAN: slab-use-after-free in skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\nRead of size 8 at addr ffff88807cb8d858 by task syz.1.219/6718\n\nCPU: 1 UID: 0 PID: 6718 Comm: syz.1.219 Not tainted 6.16.0-rc1-syzkaller-00196-g08207f42d3ff #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n \n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xd2/0x2b0 mm/kasan/report.c:521\n kasan_report+0x118/0x150 mm/kasan/report.c:634\n skb_queue_empty_lockless include/linux/skbuff.h:1891 [inline]\n skb_queue_purge_reason+0x99/0x360 net/core/skbuff.c:3937\n skb_queue_purge include/linux/skbuff.h:3368 [inline]\n vhci_flush+0x44/0x50 drivers/bluetooth/hci_vhci.c:69\n hci_dev_do_reset net/bluetooth/hci_core.c:552 [inline]\n hci_dev_reset+0x420/0x5c0 net/bluetooth/hci_core.c:592\n sock_do_ioctl+0xd9/0x300 net/socket.c:1190\n sock_ioctl+0x576/0x790 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xf9/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7fcf5b98e929\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fcf5c7b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007fcf5bbb6160 RCX: 00007fcf5b98e929\nRDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000009\nRBP: 00007fcf5ba10b39 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000\nR13: 0000000000000000 R14: 00007fcf5bbb6160 R15: 00007ffd6353d528\n \n\nAllocated by task 6535:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4359\n kmalloc_noprof include/linux/slab.h:905 [inline]\n kzalloc_noprof include/linux/slab.h:1039 [inline]\n vhci_open+0x57/0x360 drivers/bluetooth/hci_vhci.c:635\n misc_open+0x2bc/0x330 drivers/char/misc.c:161\n chrdev_open+0x4c9/0x5e0 fs/char_dev.c:414\n do_dentry_open+0xdf0/0x1970 fs/open.c:964\n vfs_open+0x3b/0x340 fs/open.c:1094\n do_open fs/namei.c:3887 [inline]\n path_openat+0x2ee5/0x3830 fs/name\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38250" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0e5c144c557df910ab64d9c25d06399a9a735e65", "url": "https://git.kernel.org/stable/c/0e5c144c557df910ab64d9c25d06399a9a735e65" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1d6123102e9fbedc8d25bf4731da6d513173e49e", "url": "https://git.kernel.org/stable/c/1d6123102e9fbedc8d25bf4731da6d513173e49e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bc0819a25e04cd68ef3568cfa51b63118fea39a7", "url": "https://git.kernel.org/stable/c/bc0819a25e04cd68ef3568cfa51b63118fea39a7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ce23b73f0f27e2dbeb81734a79db710f05aa33c6", "url": "https://git.kernel.org/stable/c/ce23b73f0f27e2dbeb81734a79db710f05aa33c6" } ], "release_date": "2025-07-09T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2024-49861", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix helper writes to read-only maps\n\nLonial found an issue that despite user- and BPF-side frozen BPF map\n(like in case of .rodata), it was still possible to write into it from\na BPF program side through specific helpers having ARG_PTR_TO_{LONG,INT}\nas arguments.\n\nIn check_func_arg() when the argument is as mentioned, the meta->raw_mode\nis never set. Later, check_helper_mem_access(), under the case of\nPTR_TO_MAP_VALUE as register base type, it assumes BPF_READ for the\nsubsequent call to check_map_access_type() and given the BPF map is\nread-only it succeeds.\n\nThe helpers really need to be annotated as ARG_PTR_TO_{LONG,INT} | MEM_UNINIT\nwhen results are written into them as opposed to read out of them. The\nlatter indicates that it's okay to pass a pointer to uninitialized memory\nas the memory is written to anyway.\n\nHowever, ARG_PTR_TO_{LONG,INT} is a special case of ARG_PTR_TO_FIXED_SIZE_MEM\njust with additional alignment requirement. So it is better to just get\nrid of the ARG_PTR_TO_{LONG,INT} special cases altogether and reuse the\nfixed size memory types. For this, add MEM_ALIGNED to additionally ensure\nalignment given these helpers write directly into the args via * = val.\nThe .arg*_size has been initialized reflecting the actual sizeof(*).\n\nMEM_ALIGNED can only be used in combination with MEM_FIXED_SIZE annotated\nargument types, since in !MEM_FIXED_SIZE cases the verifier does not know\nthe buffer size a priori and therefore cannot blindly write * = val.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-49861" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e75d25133158b525e0456876e9bcfd6b2993fd5", "url": "https://git.kernel.org/stable/c/1e75d25133158b525e0456876e9bcfd6b2993fd5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2ed98ee02d1e08afee88f54baec39ea78dc8a23c", "url": "https://git.kernel.org/stable/c/2ed98ee02d1e08afee88f54baec39ea78dc8a23c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/32556ce93bc45c730829083cb60f95a2728ea48b", "url": "https://git.kernel.org/stable/c/32556ce93bc45c730829083cb60f95a2728ea48b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/988e55abcf7fdb8fc9a76a7cf3f4e939a4d4fb3a", "url": "https://git.kernel.org/stable/c/988e55abcf7fdb8fc9a76a7cf3f4e939a4d4fb3a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a2c8dc7e21803257e762b0bf067fd13e9c995da0", "url": "https://git.kernel.org/stable/c/a2c8dc7e21803257e762b0bf067fd13e9c995da0" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html", "url": "https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html" } ], "release_date": "2024-10-21T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52621", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check rcu_read_lock_trace_held() before calling bpf map helpers\n\nThese three bpf_map_{lookup,update,delete}_elem() helpers are also\navailable for sleepable bpf program, so add the corresponding lock\nassertion for sleepable bpf program, otherwise the following warning\nwill be reported when a sleepable bpf program manipulates bpf map under\ninterpreter mode (aka bpf_jit_enable=0):\n\n WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ......\n CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ......\n RIP: 0010:bpf_map_lookup_elem+0x54/0x60\n ......\n Call Trace:\n \n ? __warn+0xa5/0x240\n ? bpf_map_lookup_elem+0x54/0x60\n ? report_bug+0x1ba/0x1f0\n ? handle_bug+0x40/0x80\n ? exc_invalid_op+0x18/0x50\n ? asm_exc_invalid_op+0x1b/0x20\n ? __pfx_bpf_map_lookup_elem+0x10/0x10\n ? rcu_lockdep_current_cpu_online+0x65/0xb0\n ? rcu_is_watching+0x23/0x50\n ? bpf_map_lookup_elem+0x54/0x60\n ? __pfx_bpf_map_lookup_elem+0x10/0x10\n ___bpf_prog_run+0x513/0x3b70\n __bpf_prog_run32+0x9d/0xd0\n ? __bpf_prog_enter_sleepable_recur+0xad/0x120\n ? __bpf_prog_enter_sleepable_recur+0x3e/0x120\n bpf_trampoline_6442580665+0x4d/0x1000\n __x64_sys_getpgid+0x5/0x30\n ? do_syscall_64+0x36/0xb0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n ", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52621" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/169410eba271afc9f0fb476d996795aa26770c6d", "url": "https://git.kernel.org/stable/c/169410eba271afc9f0fb476d996795aa26770c6d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3516f93cc63d956e1b290ae4b7bf2586074535a0", "url": "https://git.kernel.org/stable/c/3516f93cc63d956e1b290ae4b7bf2586074535a0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/483cb92334cd7f1d5387dccc0ab5d595d27a669d", "url": "https://git.kernel.org/stable/c/483cb92334cd7f1d5387dccc0ab5d595d27a669d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/82f2df94dac1aa9b879e74d1f82ba1b631bdc612", "url": "https://git.kernel.org/stable/c/82f2df94dac1aa9b879e74d1f82ba1b631bdc612" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c7f1b6146f4a46d727c0d046284c28b6882c6304", "url": "https://git.kernel.org/stable/c/c7f1b6146f4a46d727c0d046284c28b6882c6304" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d6d6fe4bb105595118f12abeed4a7bdd450853f3", "url": "https://git.kernel.org/stable/c/d6d6fe4bb105595118f12abeed4a7bdd450853f3" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html" } ], "release_date": "2024-03-26T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38380", "notes": [ { "category": "description", "text": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38380" } ], "release_date": "2025-07-25T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2025-09-16T14:48:09.583950Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els18.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2025:1758034087" } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }