{ "document": { "aggregate_severity": { "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" }, { "category": "details", "text": "net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit {CVE-2025-39766}\n- NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL {CVE-2023-53680}\n- scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() {CVE-2023-53676}\n- KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823}\n- ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689}\n- ext4: improve error handling from ext4_dirhash() {CVE-2023-53473}\n- rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749}\n- ring-buffer: Fix deadloop issue on reading trace_pipe {CVE-2023-53668}\n- fs/proc: fix uaf in proc_readdir_de() {CVE-2025-40271}\n- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer {CVE-2025-40269}\n- Bluetooth: ISO: Fix possible UAF on iso_conn_free {CVE-2025-40141}\n- pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574}\n- lib: cpu_rmap: Avoid use after free on rmap->obj array entries {CVE-2023-53484}\n- ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572}\n- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685}\n- fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702}\n- i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911}\n- libceph: fix invalid accesses to ceph_connection_v1_info {CVE-2025-39880}\n- bus: mhi: host: Detect events pointing to unexpected TREs {CVE-2025-39790}\n- nvmet: fix out-of-bounds access in nvmet_enable_port {CVE-2025-37825}\n- net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() {CVE-2023-54155}\n- wifi: mwifiex: Initialize the chan_stats array to zero {CVE-2025-39891}\n- i40e: Fix potential invalid access when MAC list is empty {CVE-2025-39853}\n- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() {CVE-2025-38680}\n- fs/buffer: fix use-after-free when call bh_read() helper {CVE-2025-39691}\n- net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device {CVE-2023-54015}\n- x86/sev: Make enc_dec_hypercall() accept a size instead of npages {CVE-2023-53996}\n- page_pool: Fix use-after-free in page_pool_recycle_in_ring {CVE-2025-38129}\n- page_pool: fix inconsistency for page_pool_ring_[un]lock()\n- net: page_pool: use in_softirq() instead {CVE-2025-38129}\n- vsock: Ignore signal/timeout on connect() if already established {CVE-2025-40248}\n- vsock: avoid to close connected socket after the timeout {CVE-2025-40248}\n- sctp: avoid NULL dereference when chunk data buffer is missing {CVE-2025-40240}\n- smb: client: let recv_done verify data_offset, data_length and remaining_data_length {CVE-2025-39933}\n- net: phylink: add lock for serializing concurrent pl->phydev writes with resolver {CVE-2025-39905}\n- i40e: validate ring_len parameter against hardware-specific values\n- i40e: add validation for ring_len param {CVE-2025-39973}\n- i40e: increase max descriptors for XL710\n- i40e: remove read access to debugfs files {CVE-2025-39901}\n- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory {CVE-2025-39883}\n- wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work {CVE-2025-39863}\n- i2c: tegra: check msg length in SMBUS block read {CVE-2025-38425}\n- regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods {CVE-2025-38395}\n- virtio-net: ensure the received length does not exceed allocated size {CVE-2025-38375}\n- VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify {CVE-2025-38102}\n- vsock/vmci: Clear the vmci transport packet properly when initializing it {CVE-2025-38403}\n- can: bcm: add locking for bcm_op runtime updates {CVE-2025-38004}\n- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow {CVE-2023-54102}\n- tcp: fix a signed-integer-overflow bug in tcp_add_backlog() {CVE-2022-50865}\n- tcp: minor optimization in tcp_add_backlog() {CVE-2022-50865}\n- block, bfq: fix uaf for bfqq in bic_set_bfqq() {CVE-2023-52983}\n- block, bfq: replace 0/1 with false/true in bic apis\n- block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq {CVE-2022-50329}\n- block, bfq: fix possible uaf for 'bfqq->bic' {CVE-2022-50488}\n- ALSA: usb-audio: Validate UAC3 power domain descriptors, too {CVE-2025-38729}\n- Squashfs: check return result of sb_min_blocksize {CVE-2025-38415}\n- ftrace: Fix UAF when lookup kallsym after ftrace disabled {CVE-2025-38346}\n- arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth() {CVE-2025-38320}\n- ipc: fix to protect IPCS lookups using RCU {CVE-2025-38212}\n- net/mdiobus: Fix potential out-of-bounds read/write access {CVE-2025-38111}\n- net: mdio: C22 is now optional, EOPNOTSUPP if not provided\n- net: atm: fix /proc/net/atm/lec handling {CVE-2025-38180}\n- net: atm: add lec_mutex {CVE-2025-38323}\n- Bluetooth: hci_sync: always check if connection is alive before deleting\n- Bluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync {CVE-2023-53762}\n- Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync\n- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete {CVE-2025-38118}\n- Bluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync {CVE-2024-58013}\n- net_sched: remove qdisc_tree_flush_backlog()\n- net_sched: ets: fix a race in ets_qdisc_change() {CVE-2025-38107}\n- net_sched: tbf: fix a race in tbf_change()\n- net_sched: prio: fix a race in prio_tune() {CVE-2025-38083}\n- net_sched: red: fix a race in __red_change() {CVE-2025-38108}\n- HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse() {CVE-2025-38103}\n- smb: client: Fix use-after-free in cifs_fill_dirent {CVE-2025-38051}\n- wifi: ath9k_htc: Abort software beacon handling if disabled {CVE-2025-38157}\n- wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request {CVE-2025-38013}\n- libceph: fix potential use-after-free in have_mon_and_osd_map() {CVE-2025-68285}\n- VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF {CVE-2023-53259}\n- mptcp: fix race condition in mptcp_schedule_work() {CVE-2025-40258}\n- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154}\n- wifi: ath10k: Delay the unmapping of the buffer {CVE-2022-50700}\n- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind {CVE-2025-68305}\n- ALSA: pcm: Fix potential data race at PCM memory allocation helpers {CVE-2023-54072}\n- drm/amd/display: fix FCLK pstate change underflow {CVE-2023-53780}\n- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE {CVE-2025-40277}\n- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister(). {CVE-2025-38245}", "title": "Details" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/almalinux9.2esu/advisories/2026/clsa-2026_1771239384.json" } ], "tracking": { "current_release_date": "2026-02-16T11:06:55Z", "generator": { "date": "2026-02-16T11:06:55Z", "engine": { "name": "pyCSAF" } }, "id": "CLSA-2026:1771239384", "initial_release_date": "2026-02-16T11:06:55Z", "revision_history": [ { "date": "2026-02-16T11:06:55Z", "number": "1", "summary": "Initial version" } ], "status": "final", "version": "1" }, "title": "kernel: Fix of 75 CVEs" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "AlmaLinux 9.2", "product": { "name": "AlmaLinux 9.2", "product_id": "AlmaLinux-9.2", "product_identification_helper": { "cpe": "cpe:2.3:o:almalinux:almalinux:9.2:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "AlmaLinux" } ], "category": "vendor", "name": "AlmaLinux OS Foundation" }, { "branches": [ { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els28?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els28?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/perf@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-headers@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-tools-libs@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/bpftool@7.0.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els28?arch=x86_64&epoch=2" } } }, { "category": "product_version", "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-selftests-internal@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/rtla@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-core@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-cross-headers@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-extra@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-ipaclones-internal@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-uki-virt@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-partner@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel-matched@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/python3-perf@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-devel@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-core@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-debug-modules-internal@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } }, { "category": "product_version", "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_id": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-modules-core@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_id": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf@1.0.0-2.el9_2.tuxcare.7.els28?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_id": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-devel@1.0.0-2.el9_2.tuxcare.7.els28?arch=i686&epoch=2" } } }, { "category": "product_version", "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_id": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/libbpf-static@1.0.0-2.el9_2.tuxcare.7.els28?arch=i686&epoch=2" } } } ], "category": "architecture", "name": "i686" }, { "branches": [ { "category": "product_version", "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product_id": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-abi-stablelists@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=noarch" } } }, { "category": "product_version", "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product_id": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/kernel-doc@5.14.0-284.1101.el9_2.tuxcare.7.els28?arch=noarch" } } } ], "category": "architecture", "name": "noarch" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686" }, "product_reference": "libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686" }, "product_reference": "libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686" }, "product_reference": "libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch" }, "product_reference": "kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch" }, "product_reference": "kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" }, { "category": "default_component_of", "full_product_name": { "name": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64 as a component of AlmaLinux 9.2", "product_id": "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" }, "product_reference": "kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "relates_to_product_reference": "AlmaLinux-9.2" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-38572", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: reject malicious packets in ipv6_gso_segment()\n\nsyzbot was able to craft a packet with very long IPv6 extension headers\nleading to an overflow of skb->transport_header.\n\nThis 16bit field has a limited range.\n\nAdd skb_reset_transport_header_careful() helper and use it\nfrom ipv6_gso_segment()\n\nWARNING: CPU: 0 PID: 5871 at ./include/linux/skbuff.h:3032 skb_reset_transport_header include/linux/skbuff.h:3032 [inline]\nWARNING: CPU: 0 PID: 5871 at ./include/linux/skbuff.h:3032 ipv6_gso_segment+0x15e2/0x21e0 net/ipv6/ip6_offload.c:151\nModules linked in:\nCPU: 0 UID: 0 PID: 5871 Comm: syz-executor211 Not tainted 6.16.0-rc6-syzkaller-g7abc678e3084 #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025\n RIP: 0010:skb_reset_transport_header include/linux/skbuff.h:3032 [inline]\n RIP: 0010:ipv6_gso_segment+0x15e2/0x21e0 net/ipv6/ip6_offload.c:151\nCall Trace:\n \n skb_mac_gso_segment+0x31c/0x640 net/core/gso.c:53\n nsh_gso_segment+0x54a/0xe10 net/nsh/nsh.c:110\n skb_mac_gso_segment+0x31c/0x640 net/core/gso.c:53\n __skb_gso_segment+0x342/0x510 net/core/gso.c:124\n skb_gso_segment include/net/gso.h:83 [inline]\n validate_xmit_skb+0x857/0x11b0 net/core/dev.c:3950\n validate_xmit_skb_list+0x84/0x120 net/core/dev.c:4000\n sch_direct_xmit+0xd3/0x4b0 net/sched/sch_generic.c:329\n __dev_xmit_skb net/core/dev.c:4102 [inline]\n __dev_queue_xmit+0x17b6/0x3a70 net/core/dev.c:4679", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38572" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/09ff062b89d8e48165247d677d1ca23d6d607e9b", "url": "https://git.kernel.org/stable/c/09ff062b89d8e48165247d677d1ca23d6d607e9b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f638e0b28bde7c3354a0df938ab3a96739455d1", "url": "https://git.kernel.org/stable/c/3f638e0b28bde7c3354a0df938ab3a96739455d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5489e7fc6f8be3062f8cb7e49406de4bfd94db67", "url": "https://git.kernel.org/stable/c/5489e7fc6f8be3062f8cb7e49406de4bfd94db67" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/573b8250fc2554761db3bc2bbdbab23789d52d4e", "url": "https://git.kernel.org/stable/c/573b8250fc2554761db3bc2bbdbab23789d52d4e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5dc60b2a00ed7629214ac0c48e43f40af2078703", "url": "https://git.kernel.org/stable/c/5dc60b2a00ed7629214ac0c48e43f40af2078703" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d45cf1e7d7180256e17c9ce88e32e8061a7887fe", "url": "https://git.kernel.org/stable/c/d45cf1e7d7180256e17c9ce88e32e8061a7887fe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de322cdf600fc9433845a9e944d1ca6b31cfb67e", "url": "https://git.kernel.org/stable/c/de322cdf600fc9433845a9e944d1ca6b31cfb67e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ee851768e4b8371ce151fd446d24bf3ae2d18789", "url": "https://git.kernel.org/stable/c/ee851768e4b8371ce151fd446d24bf3ae2d18789" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ef05007b403dcc21e701cb1f30d4572ac0a9da20", "url": "https://git.kernel.org/stable/c/ef05007b403dcc21e701cb1f30d4572ac0a9da20" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-08-19T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38180", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atm: fix /proc/net/atm/lec handling\n\n/proc/net/atm/lec must ensure safety against dev_lec[] changes.\n\nIt appears it had dev_put() calls without prior dev_hold(),\nleading to imbalance and UAF.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38180" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc", "url": "https://git.kernel.org/stable/c/5fe1b23a2f87f43aeeac51e08819cbc6fd808cbc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9b9aeb3ada44d8abea1e31e4446113f460848ae4", "url": "https://git.kernel.org/stable/c/9b9aeb3ada44d8abea1e31e4446113f460848ae4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a5e3a144268899f1a8c445c8a3bfa15873ba85e8", "url": "https://git.kernel.org/stable/c/a5e3a144268899f1a8c445c8a3bfa15873ba85e8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ca3829c18c8d0ceb656605d3bff6bb3dfb078589", "url": "https://git.kernel.org/stable/c/ca3829c18c8d0ceb656605d3bff6bb3dfb078589" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d03b79f459c7935cff830d98373474f440bd03ae", "url": "https://git.kernel.org/stable/c/d03b79f459c7935cff830d98373474f440bd03ae" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e612c4b014f5808fbc6beae21f5ccaca5e76a2f8", "url": "https://git.kernel.org/stable/c/e612c4b014f5808fbc6beae21f5ccaca5e76a2f8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f2d1443b18806640abdb530e88009af7be2588e7", "url": "https://git.kernel.org/stable/c/f2d1443b18806640abdb530e88009af7be2588e7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fcfccf56f4eba7d00aa2d33c7bb1b33083237742", "url": "https://git.kernel.org/stable/c/fcfccf56f4eba7d00aa2d33c7bb1b33083237742" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39689", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Also allocate and copy hash for reading of filter files\n\nCurrently the reader of set_ftrace_filter and set_ftrace_notrace just adds\nthe pointer to the global tracer hash to its iterator. Unlike the writer\nthat allocates a copy of the hash, the reader keeps the pointer to the\nfilter hashes. This is problematic because this pointer is static across\nfunction calls that release the locks that can update the global tracer\nhashes. This can cause UAF and similar bugs.\n\nAllocate and copy the hash for reading the filter files like it is done\nfor the writers. This not only fixes UAF bugs, but also makes the code a\nbit simpler as it doesn't have to differentiate when to free the\niterator's hash between writers and readers.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39689" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/12064e1880fc9202be75ff668205b1703d92f74f", "url": "https://git.kernel.org/stable/c/12064e1880fc9202be75ff668205b1703d92f74f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3b114a3282ab1a12cb4618a8f45db5d7185e784a", "url": "https://git.kernel.org/stable/c/3b114a3282ab1a12cb4618a8f45db5d7185e784a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64db338140d2bad99a0a8c6a118dd60b3e1fb8cb", "url": "https://git.kernel.org/stable/c/64db338140d2bad99a0a8c6a118dd60b3e1fb8cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a40c69f4f1ed96acbcd62e9b5ff3a596f0a91309", "url": "https://git.kernel.org/stable/c/a40c69f4f1ed96acbcd62e9b5ff3a596f0a91309" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bfb336cf97df7b37b2b2edec0f69773e06d11955", "url": "https://git.kernel.org/stable/c/bfb336cf97df7b37b2b2edec0f69773e06d11955" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c4cd93811e038d19f961985735ef7bb128078dfb", "url": "https://git.kernel.org/stable/c/c4cd93811e038d19f961985735ef7bb128078dfb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c591ba1acd081d4980713e47869dd1cc3d963d19", "url": "https://git.kernel.org/stable/c/c591ba1acd081d4980713e47869dd1cc3d963d19" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e0b6b223167e1edde5c82edf38e393c06eda1f13", "url": "https://git.kernel.org/stable/c/e0b6b223167e1edde5c82edf38e393c06eda1f13" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-05T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39749", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nrcu: Protect ->defer_qs_iw_pending from data race\n\nOn kernels built with CONFIG_IRQ_WORK=y, when rcu_read_unlock() is\ninvoked within an interrupts-disabled region of code [1], it will invoke\nrcu_read_unlock_special(), which uses an irq-work handler to force the\nsystem to notice when the RCU read-side critical section actually ends.\nThat end won't happen until interrupts are enabled at the soonest.\n\nIn some kernels, such as those booted with rcutree.use_softirq=y, the\nirq-work handler is used unconditionally.\n\nThe per-CPU rcu_data structure's ->defer_qs_iw_pending field is\nupdated by the irq-work handler and is both read and updated by\nrcu_read_unlock_special(). This resulted in the following KCSAN splat:\n\n------------------------------------------------------------------------\n\nBUG: KCSAN: data-race in rcu_preempt_deferred_qs_handler / rcu_read_unlock_special\n\nread to 0xffff96b95f42d8d8 of 1 bytes by task 90 on cpu 8:\n rcu_read_unlock_special+0x175/0x260\n __rcu_read_unlock+0x92/0xa0\n rt_spin_unlock+0x9b/0xc0\n __local_bh_enable+0x10d/0x170\n __local_bh_enable_ip+0xfb/0x150\n rcu_do_batch+0x595/0xc40\n rcu_cpu_kthread+0x4e9/0x830\n smpboot_thread_fn+0x24d/0x3b0\n kthread+0x3bd/0x410\n ret_from_fork+0x35/0x40\n ret_from_fork_asm+0x1a/0x30\n\nwrite to 0xffff96b95f42d8d8 of 1 bytes by task 88 on cpu 8:\n rcu_preempt_deferred_qs_handler+0x1e/0x30\n irq_work_single+0xaf/0x160\n run_irq_workd+0x91/0xc0\n smpboot_thread_fn+0x24d/0x3b0\n kthread+0x3bd/0x410\n ret_from_fork+0x35/0x40\n ret_from_fork_asm+0x1a/0x30\n\nno locks held by irq_work/8/88.\nirq event stamp: 200272\nhardirqs last enabled at (200272): [] finish_task_switch+0x131/0x320\nhardirqs last disabled at (200271): [] __schedule+0x129/0xd70\nsoftirqs last enabled at (0): [] copy_process+0x4df/0x1cc0\nsoftirqs last disabled at (0): [<0000000000000000>] 0x0\n\n------------------------------------------------------------------------\n\nThe problem is that irq-work handlers run with interrupts enabled, which\nmeans that rcu_preempt_deferred_qs_handler() could be interrupted,\nand that interrupt handler might contain an RCU read-side critical\nsection, which might invoke rcu_read_unlock_special(). In the strict\nKCSAN mode of operation used by RCU, this constitutes a data race on\nthe ->defer_qs_iw_pending field.\n\nThis commit therefore disables interrupts across the portion of the\nrcu_preempt_deferred_qs_handler() that updates the ->defer_qs_iw_pending\nfield. This suffices because this handler is not a fast path.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39749" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ad84d62217488e679ecc90e8628980dcc003de3", "url": "https://git.kernel.org/stable/c/0ad84d62217488e679ecc90e8628980dcc003de3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/55e11f6776798b27cf09a7aa0d718415d4fc9cf5", "url": "https://git.kernel.org/stable/c/55e11f6776798b27cf09a7aa0d718415d4fc9cf5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/74f58f382a7c8333f8d09701aefaa25913bdbe0e", "url": "https://git.kernel.org/stable/c/74f58f382a7c8333f8d09701aefaa25913bdbe0e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/90c09d57caeca94e6f3f87c49e96a91edd40cbfd", "url": "https://git.kernel.org/stable/c/90c09d57caeca94e6f3f87c49e96a91edd40cbfd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/90de9c94ea72327cfa9c2c9f6113c23a513af60b", "url": "https://git.kernel.org/stable/c/90de9c94ea72327cfa9c2c9f6113c23a513af60b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b55947b725f190396f475d5d0c59aa855a4d8895", "url": "https://git.kernel.org/stable/c/b55947b725f190396f475d5d0c59aa855a4d8895" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b5de8d80b5d049f051b95d9b1ee50ae4ab656124", "url": "https://git.kernel.org/stable/c/b5de8d80b5d049f051b95d9b1ee50ae4ab656124" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e35e711c78c8a4c43330c0dcb1c4d507a19c20f4", "url": "https://git.kernel.org/stable/c/e35e711c78c8a4c43330c0dcb1c4d507a19c20f4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f937759c7432d6151b73e1393b6517661813d506", "url": "https://git.kernel.org/stable/c/f937759c7432d6151b73e1393b6517661813d506" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-11T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39823", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: use array_index_nospec with indices that come from guest\n\nmin and dest_id are guest-controlled indices. Using array_index_nospec()\nafter the bounds checks clamps these values to mitigate speculative execution\nside-channels.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39823" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/31a0ad2f60cb4816e06218b63e695eb72ce74974", "url": "https://git.kernel.org/stable/c/31a0ad2f60cb4816e06218b63e695eb72ce74974" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f", "url": "https://git.kernel.org/stable/c/33e974c2d5a82b2f9d9ba0ad9cbaabc1c8e3985f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/67a05679621b7f721bdba37a5d18665d3aceb695", "url": "https://git.kernel.org/stable/c/67a05679621b7f721bdba37a5d18665d3aceb695" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48", "url": "https://git.kernel.org/stable/c/72777fc31aa7ab2ce00f44bfa3929c6eabbeaf48" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c87bd4dd43a624109c3cc42d843138378a7f4548", "url": "https://git.kernel.org/stable/c/c87bd4dd43a624109c3cc42d843138378a7f4548" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d51e381beed5e2f50f85f49f6c90e023754efa12", "url": "https://git.kernel.org/stable/c/d51e381beed5e2f50f85f49f6c90e023754efa12" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f49161646e03d107ce81a99c6ca5da682fe5fb69", "url": "https://git.kernel.org/stable/c/f49161646e03d107ce81a99c6ca5da682fe5fb69" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f57a4bd8d6cb5af05b8ac1be9098e249034639fb", "url": "https://git.kernel.org/stable/c/f57a4bd8d6cb5af05b8ac1be9098e249034639fb" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-16T13:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39911", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path\n\nIf request_irq() in i40e_vsi_request_irq_msix() fails in an iteration\nlater than the first, the error path wants to free the IRQs requested\nso far. However, it uses the wrong dev_id argument for free_irq(), so\nit does not free the IRQs correctly and instead triggers the warning:\n\n Trying to free already-free IRQ 173\n WARNING: CPU: 25 PID: 1091 at kernel/irq/manage.c:1829 __free_irq+0x192/0x2c0\n Modules linked in: i40e(+) [...]\n CPU: 25 UID: 0 PID: 1091 Comm: NetworkManager Not tainted 6.17.0-rc1+ #1 PREEMPT(lazy)\n Hardware name: [...]\n RIP: 0010:__free_irq+0x192/0x2c0\n [...]\n Call Trace:\n \n free_irq+0x32/0x70\n i40e_vsi_request_irq_msix.cold+0x63/0x8b [i40e]\n i40e_vsi_request_irq+0x79/0x80 [i40e]\n i40e_vsi_open+0x21f/0x2f0 [i40e]\n i40e_open+0x63/0x130 [i40e]\n __dev_open+0xfc/0x210\n __dev_change_flags+0x1fc/0x240\n netif_change_flags+0x27/0x70\n do_setlink.isra.0+0x341/0xc70\n rtnl_newlink+0x468/0x860\n rtnetlink_rcv_msg+0x375/0x450\n netlink_rcv_skb+0x5c/0x110\n netlink_unicast+0x288/0x3c0\n netlink_sendmsg+0x20d/0x430\n ____sys_sendmsg+0x3a2/0x3d0\n ___sys_sendmsg+0x99/0xe0\n __sys_sendmsg+0x8a/0xf0\n do_syscall_64+0x82/0x2c0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n [...]\n \n ---[ end trace 0000000000000000 ]---\n\nUse the same dev_id for free_irq() as for request_irq().\n\nI tested this with inserting code to fail intentionally.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39911" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/13ab9adef3cd386511c930a9660ae06595007f89", "url": "https://git.kernel.org/stable/c/13ab9adef3cd386511c930a9660ae06595007f89" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/23431998a37764c464737b855c71a81d50992e98", "url": "https://git.kernel.org/stable/c/23431998a37764c464737b855c71a81d50992e98" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e4016c0dca53afc71e3b99e24252b63417395df", "url": "https://git.kernel.org/stable/c/6e4016c0dca53afc71e3b99e24252b63417395df" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/915470e1b44e71d1dd07ee067276f003c3521ee3", "url": "https://git.kernel.org/stable/c/915470e1b44e71d1dd07ee067276f003c3521ee3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a30afd6617c30aaa338d1dbcb1e34e7a1890085c", "url": "https://git.kernel.org/stable/c/a30afd6617c30aaa338d1dbcb1e34e7a1890085c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b905b2acb3a0bbb08ad9be9984d8cdabdf827315", "url": "https://git.kernel.org/stable/c/b905b2acb3a0bbb08ad9be9984d8cdabdf827315" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b9721a023df38cf44a88f2739b4cf51efd051f85", "url": "https://git.kernel.org/stable/c/b9721a023df38cf44a88f2739b4cf51efd051f85" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c62580674ce5feb1be4f90b5873ff3ce50e0a1db", "url": "https://git.kernel.org/stable/c/c62580674ce5feb1be4f90b5873ff3ce50e0a1db" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-10-01T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40258", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nmptcp: fix race condition in mptcp_schedule_work()\nsyzbot reported use-after-free in mptcp_schedule_work() [1]\nIssue here is that mptcp_schedule_work() schedules a work,\nthen gets a refcount on sk->sk_refcnt if the work was scheduled.\nThis refcount will be released by mptcp_worker().\n[A] if (schedule_work(...)) {\n[B] sock_hold(sk);\nreturn true;\n}\nProblem is that mptcp_worker() can run immediately and complete before [B]\nWe need instead :\nsock_hold(sk);\nif (schedule_work(...))\nreturn true;\nsock_put(sk);\n[1]\nrefcount_t: addition on 0; use-after-free.\nWARNING: CPU: 1 PID: 29 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 lib/refcount.c:25\nCall Trace:\n\n__refcount_add include/linux/refcount.h:-1 [inline]\n__refcount_inc include/linux/refcount.h:366 [inline]\nrefcount_inc include/linux/refcount.h:383 [inline]\nsock_hold include/net/sock.h:816 [inline]\nmptcp_schedule_work+0x164/0x1a0 net/mptcp/protocol.c:943\nmptcp_tout_timer+0x21/0xa0 net/mptcp/protocol.c:2316\ncall_timer_fn+0x17e/0x5f0 kernel/time/timer.c:1747\nexpire_timers kernel/time/timer.c:1798 [inline]\n__run_timers kernel/time/timer.c:2372 [inline]\n__run_timer_base+0x648/0x970 kernel/time/timer.c:2384\nrun_timer_base kernel/time/timer.c:2393 [inline]\nrun_timer_softirq+0xb7/0x180 kernel/time/timer.c:2403\nhandle_softirqs+0x22f/0x710 kernel/softirq.c:622\n__do_softirq kernel/softirq.c:656 [inline]\nrun_ktimerd+0xcf/0x190 kernel/softirq.c:1138\nsmpboot_thread_fn+0x542/0xa60 kernel/smpboot.c:160\nkthread+0x711/0x8a0 kernel/kthread.c:463\nret_from_fork+0x4bc/0x870 arch/x86/kernel/process.c:158\nret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40258" } ], "release_date": "2025-12-04T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38111", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mdiobus: Fix potential out-of-bounds read/write access\n\nWhen using publicly available tools like 'mdio-tools' to read/write data\nfrom/to network interface and its PHY via mdiobus, there is no verification of\nparameters passed to the ioctl and it accepts any mdio address.\nCurrently there is support for 32 addresses in kernel via PHY_MAX_ADDR define,\nbut it is possible to pass higher value than that via ioctl.\nWhile read/write operation should generally fail in this case,\nmdiobus provides stats array, where wrong address may allow out-of-bounds\nread/write.\n\nFix that by adding address verification before read/write operation.\nWhile this excludes this access from any statistics, it improves security of\nread/write operation.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38111" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/014ad9210373d2104f6ef10e6bb999a7a0a4c50e", "url": "https://git.kernel.org/stable/c/014ad9210373d2104f6ef10e6bb999a7a0a4c50e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/049af7ac45a6b407748ee0995278fd861e36df8f", "url": "https://git.kernel.org/stable/c/049af7ac45a6b407748ee0995278fd861e36df8f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0e629694126ca388916f059453a1c36adde219c4", "url": "https://git.kernel.org/stable/c/0e629694126ca388916f059453a1c36adde219c4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/19c5875e26c4ed5686d82a7d8f7051385461b9eb", "url": "https://git.kernel.org/stable/c/19c5875e26c4ed5686d82a7d8f7051385461b9eb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/73d478234a619f3476028cb02dee699c30ae8262", "url": "https://git.kernel.org/stable/c/73d478234a619f3476028cb02dee699c30ae8262" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b02d9d2732483e670bc34cb233d28e1d43b15da4", "url": "https://git.kernel.org/stable/c/b02d9d2732483e670bc34cb233d28e1d43b15da4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bab6bca0834cbb5be2a7cfe59ec6ad016ec72608", "url": "https://git.kernel.org/stable/c/bab6bca0834cbb5be2a7cfe59ec6ad016ec72608" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39901", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: remove read access to debugfs files\n\nThe 'command' and 'netdev_ops' debugfs files are a legacy debugging\ninterface supported by the i40e driver since its early days by commit\n02e9c290814c (\"i40e: debugfs interface\").\n\nBoth of these debugfs files provide a read handler which is mostly useless,\nand which is implemented with questionable logic. They both use a static\n256 byte buffer which is initialized to the empty string. In the case of\nthe 'command' file this buffer is literally never used and simply wastes\nspace. In the case of the 'netdev_ops' file, the last command written is\nsaved here.\n\nOn read, the files contents are presented as the name of the device\nfollowed by a colon and then the contents of their respective static\nbuffer. For 'command' this will always be \": \". For 'netdev_ops',\nthis will be \": \". But note the buffer is\nshared between all devices operated by this module. At best, it is mostly\nmeaningless information, and at worse it could be accessed simultaneously\nas there doesn't appear to be any locking mechanism.\n\nWe have also recently received multiple reports for both read functions\nabout their use of snprintf and potential overflow that could result in\nreading arbitrary kernel memory. For the 'command' file, this is definitely\nimpossible, since the static buffer is always zero and never written to.\nFor the 'netdev_ops' file, it does appear to be possible, if the user\ncarefully crafts the command input, it will be copied into the buffer,\nwhich could be large enough to cause snprintf to truncate, which then\ncauses the copy_to_user to read beyond the length of the buffer allocated\nby kzalloc.\n\nA minimal fix would be to replace snprintf() with scnprintf() which would\ncap the return to the number of bytes written, preventing an overflow. A\nmore involved fix would be to drop the mostly useless static buffers,\nsaving 512 bytes and modifying the read functions to stop needing those as\ninput.\n\nInstead, lets just completely drop the read access to these files. These\nare debug interfaces exposed as part of debugfs, and I don't believe that\ndropping read access will break any script, as the provided output is\npretty useless. You can find the netdev name through other more standard\ninterfaces, and the 'netdev_ops' interface can easily result in garbage if\nyou issue simultaneous writes to multiple devices at once.\n\nIn order to properly remove the i40e_dbg_netdev_ops_buf, we need to\nrefactor its write function to avoid using the static buffer. Instead, use\nthe same logic as the i40e_dbg_command_write, with an allocated buffer.\nUpdate the code to use this instead of the static buffer, and ensure we\nfree the buffer on exit. This fixes simultaneous writes to 'netdev_ops' on\nmultiple devices, and allows us to remove the now unused static buffer\nalong with removing the read access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39901" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/70d3dad7d5ad077965d7a63eed1942b7ba49bfb4", "url": "https://git.kernel.org/stable/c/70d3dad7d5ad077965d7a63eed1942b7ba49bfb4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7d190963b80f4cd99d7008615600aa7cc993c6ba", "url": "https://git.kernel.org/stable/c/7d190963b80f4cd99d7008615600aa7cc993c6ba" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9fcdb1c3c4ba134434694c001dbff343f1ffa319", "url": "https://git.kernel.org/stable/c/9fcdb1c3c4ba134434694c001dbff343f1ffa319" } ], "release_date": "2025-10-01T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38108", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: red: fix a race in __red_change()\n\nGerrard Tai reported a race condition in RED, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent's qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38108" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/110a47efcf23438ff8d31dbd9c854fae2a48bf98", "url": "https://git.kernel.org/stable/c/110a47efcf23438ff8d31dbd9c854fae2a48bf98" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2790c4ec481be45a80948d059cd7c9a06bc37493", "url": "https://git.kernel.org/stable/c/2790c4ec481be45a80948d059cd7c9a06bc37493" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2a71924ca4af59ffc00f0444732b6cd54b153d0e", "url": "https://git.kernel.org/stable/c/2a71924ca4af59ffc00f0444732b6cd54b153d0e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/444ad445df5496a785705019268a8a84b84484bb", "url": "https://git.kernel.org/stable/c/444ad445df5496a785705019268a8a84b84484bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4b755305b2b0618e857fdadb499365b5f2e478d1", "url": "https://git.kernel.org/stable/c/4b755305b2b0618e857fdadb499365b5f2e478d1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/85a3e0ede38450ea3053b8c45d28cf55208409b8", "url": "https://git.kernel.org/stable/c/85a3e0ede38450ea3053b8c45d28cf55208409b8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a1bf6a4e9264a685b0e642994031f9c5aad72414", "url": "https://git.kernel.org/stable/c/a1bf6a4e9264a685b0e642994031f9c5aad72414" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f569984417a4e12c67366e69bdcb752970de921d", "url": "https://git.kernel.org/stable/c/f569984417a4e12c67366e69bdcb752970de921d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-54072", "cwe": { "id": "CWE-367", "name": "Time-of-check Time-of-use (TOCTOU) Race Condition" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nALSA: pcm: Fix potential data race at PCM memory allocation helpers\nThe PCM memory allocation helpers have a sanity check against too many\nbuffer allocations. However, the check is performed without a proper\nlock and the allocation isn't serialized; this allows user to allocate\nmore memories than predefined max size.\nPractically seen, this isn't really a big problem, as it's more or\nless some \"soft limit\" as a sanity check, and it's not possible to\nallocate unlimitedly. But it's still better to address this for more\nconsistent behavior.\nThe patch covers the size check in do_alloc_pages() with the\ncard->memory_mutex, and increases the allocated size there for\npreventing the further overflow. When the actual allocation fails,\nthe size is decreased accordingly.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54072" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38320", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()\n\nKASAN reports a stack-out-of-bounds read in regs_get_kernel_stack_nth().\n\nCall Trace:\n[ 97.283505] BUG: KASAN: stack-out-of-bounds in regs_get_kernel_stack_nth+0xa8/0xc8\n[ 97.284677] Read of size 8 at addr ffff800089277c10 by task 1.sh/2550\n[ 97.285732]\n[ 97.286067] CPU: 7 PID: 2550 Comm: 1.sh Not tainted 6.6.0+ #11\n[ 97.287032] Hardware name: linux,dummy-virt (DT)\n[ 97.287815] Call trace:\n[ 97.288279] dump_backtrace+0xa0/0x128\n[ 97.288946] show_stack+0x20/0x38\n[ 97.289551] dump_stack_lvl+0x78/0xc8\n[ 97.290203] print_address_description.constprop.0+0x84/0x3c8\n[ 97.291159] print_report+0xb0/0x280\n[ 97.291792] kasan_report+0x84/0xd0\n[ 97.292421] __asan_load8+0x9c/0xc0\n[ 97.293042] regs_get_kernel_stack_nth+0xa8/0xc8\n[ 97.293835] process_fetch_insn+0x770/0xa30\n[ 97.294562] kprobe_trace_func+0x254/0x3b0\n[ 97.295271] kprobe_dispatcher+0x98/0xe0\n[ 97.295955] kprobe_breakpoint_handler+0x1b0/0x210\n[ 97.296774] call_break_hook+0xc4/0x100\n[ 97.297451] brk_handler+0x24/0x78\n[ 97.298073] do_debug_exception+0xac/0x178\n[ 97.298785] el1_dbg+0x70/0x90\n[ 97.299344] el1h_64_sync_handler+0xcc/0xe8\n[ 97.300066] el1h_64_sync+0x78/0x80\n[ 97.300699] kernel_clone+0x0/0x500\n[ 97.301331] __arm64_sys_clone+0x70/0x90\n[ 97.302084] invoke_syscall+0x68/0x198\n[ 97.302746] el0_svc_common.constprop.0+0x11c/0x150\n[ 97.303569] do_el0_svc+0x38/0x50\n[ 97.304164] el0_svc+0x44/0x1d8\n[ 97.304749] el0t_64_sync_handler+0x100/0x130\n[ 97.305500] el0t_64_sync+0x188/0x190\n[ 97.306151]\n[ 97.306475] The buggy address belongs to stack of task 1.sh/2550\n[ 97.307461] and is located at offset 0 in frame:\n[ 97.308257] __se_sys_clone+0x0/0x138\n[ 97.308910]\n[ 97.309241] This frame has 1 object:\n[ 97.309873] [48, 184) 'args'\n[ 97.309876]\n[ 97.310749] The buggy address belongs to the virtual mapping at\n[ 97.310749] [ffff800089270000, ffff800089279000) created by:\n[ 97.310749] dup_task_struct+0xc0/0x2e8\n[ 97.313347]\n[ 97.313674] The buggy address belongs to the physical page:\n[ 97.314604] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14f69a\n[ 97.315885] flags: 0x15ffffe00000000(node=1|zone=2|lastcpupid=0xfffff)\n[ 97.316957] raw: 015ffffe00000000 0000000000000000 dead000000000122 0000000000000000\n[ 97.318207] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000\n[ 97.319445] page dumped because: kasan: bad access detected\n[ 97.320371]\n[ 97.320694] Memory state around the buggy address:\n[ 97.321511] ffff800089277b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n[ 97.322681] ffff800089277b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n[ 97.323846] >ffff800089277c00: 00 00 f1 f1 f1 f1 f1 f1 00 00 00 00 00 00 00 00\n[ 97.325023] ^\n[ 97.325683] ffff800089277c80: 00 00 00 00 00 00 00 00 00 f3 f3 f3 f3 f3 f3 f3\n[ 97.326856] ffff800089277d00: f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n\nThis issue seems to be related to the behavior of some gcc compilers and\nwas also fixed on the s390 architecture before:\n\n commit d93a855c31b7 (\"s390/ptrace: Avoid KASAN false positives in regs_get_kernel_stack_nth()\")\n\nAs described in that commit, regs_get_kernel_stack_nth() has confirmed that\n`addr` is on the stack, so reading the value at `*addr` should be allowed.\nUse READ_ONCE_NOCHECK() helper to silence the KASAN check for this case.\n\n[will: Use '*addr' as the argument to READ_ONCE_NOCHECK()]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38320" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/01f91d415a8375d85e0c7d3615cd4a168308bb7c", "url": "https://git.kernel.org/stable/c/01f91d415a8375d85e0c7d3615cd4a168308bb7c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/21da6d3561f373898349ca7167c9811c020da695", "url": "https://git.kernel.org/stable/c/21da6d3561f373898349ca7167c9811c020da695" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/22f935bc86bdfbde04009f05eee191d220cd8c89", "url": "https://git.kernel.org/stable/c/22f935bc86bdfbde04009f05eee191d220cd8c89" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/39dfc971e42d886e7df01371cd1bef505076d84c", "url": "https://git.kernel.org/stable/c/39dfc971e42d886e7df01371cd1bef505076d84c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/422e565b7889ebfd9c8705a3fc786642afe61fca", "url": "https://git.kernel.org/stable/c/422e565b7889ebfd9c8705a3fc786642afe61fca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64773b3ea09235168a549a195cba43bb867c4a17", "url": "https://git.kernel.org/stable/c/64773b3ea09235168a549a195cba43bb867c4a17" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/67abac27d806e8f9d4226ec1528540cf73af673a", "url": "https://git.kernel.org/stable/c/67abac27d806e8f9d4226ec1528540cf73af673a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38", "url": "https://git.kernel.org/stable/c/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-10T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39883", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory\n\nWhen I did memory failure tests, below panic occurs:\n\npage dumped because: VM_BUG_ON_PAGE(PagePoisoned(page))\nkernel BUG at include/linux/page-flags.h:616!\nOops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI\nCPU: 3 PID: 720 Comm: bash Not tainted 6.10.0-rc1-00195-g148743902568 #40\nRIP: 0010:unpoison_memory+0x2f3/0x590\nRSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246\nRAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8\nRDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0\nRBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb\nR10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000\nR13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe\nFS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0\nCall Trace:\n \n unpoison_memory+0x2f3/0x590\n simple_attr_write_xsigned.constprop.0.isra.0+0xb3/0x110\n debugfs_attr_write+0x42/0x60\n full_proxy_write+0x5b/0x80\n vfs_write+0xd5/0x540\n ksys_write+0x64/0xe0\n do_syscall_64+0xb9/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f08f0314887\nRSP: 002b:00007ffece710078 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007f08f0314887\nRDX: 0000000000000009 RSI: 0000564787a30410 RDI: 0000000000000001\nRBP: 0000564787a30410 R08: 000000000000fefe R09: 000000007fffffff\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009\nR13: 00007f08f041b780 R14: 00007f08f0417600 R15: 00007f08f0416a00\n \nModules linked in: hwpoison_inject\n---[ end trace 0000000000000000 ]---\nRIP: 0010:unpoison_memory+0x2f3/0x590\nRSP: 0018:ffffa57fc8787d60 EFLAGS: 00000246\nRAX: 0000000000000037 RBX: 0000000000000009 RCX: ffff9be25fcdc9c8\nRDX: 0000000000000000 RSI: 0000000000000027 RDI: ffff9be25fcdc9c0\nRBP: 0000000000300000 R08: ffffffffb4956f88 R09: 0000000000009ffb\nR10: 0000000000000284 R11: ffffffffb4926fa0 R12: ffffe6b00c000000\nR13: ffff9bdb453dfd00 R14: 0000000000000000 R15: fffffffffffffffe\nFS: 00007f08f04e4740(0000) GS:ffff9be25fcc0000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000564787a30410 CR3: 000000010d4e2000 CR4: 00000000000006f0\nKernel panic - not syncing: Fatal exception\nKernel Offset: 0x31c00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)\n---[ end Kernel panic - not syncing: Fatal exception ]---\n\nThe root cause is that unpoison_memory() tries to check the PG_HWPoison\nflags of an uninitialized page. So VM_BUG_ON_PAGE(PagePoisoned(page)) is\ntriggered. This can be reproduced by below steps:\n\n1.Offline memory block:\n\n echo offline > /sys/devices/system/memory/memory12/state\n\n2.Get offlined memory pfn:\n\n page-types -b n -rlN\n\n3.Write pfn to unpoison-pfn\n\n echo > /sys/kernel/debug/hwpoison/unpoison-pfn\n\nThis scenario can be identified by pfn_to_online_page() returning NULL. \nAnd ZONE_DEVICE pages are never expected, so we can simply fail if\npfn_to_online_page() == NULL to fix the bug.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39883" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3d278e89c2ea62b1aaa4b0d8a9766a35b3a3164a", "url": "https://git.kernel.org/stable/c/3d278e89c2ea62b1aaa4b0d8a9766a35b3a3164a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/63a327a2375a8ce7a47dec5aaa4d8a9ae0a00b96", "url": "https://git.kernel.org/stable/c/63a327a2375a8ce7a47dec5aaa4d8a9ae0a00b96" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7618fd443aa4cfa553a64cacf5721581653ee7b0", "url": "https://git.kernel.org/stable/c/7618fd443aa4cfa553a64cacf5721581653ee7b0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8e01ea186a52c90694c08a9ff57bea1b0e78256a", "url": "https://git.kernel.org/stable/c/8e01ea186a52c90694c08a9ff57bea1b0e78256a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/99f7048957f5ae3cee1c01189147e73a9a96de02", "url": "https://git.kernel.org/stable/c/99f7048957f5ae3cee1c01189147e73a9a96de02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d613f53c83ec47089c4e25859d5e8e0359f6f8da", "url": "https://git.kernel.org/stable/c/d613f53c83ec47089c4e25859d5e8e0359f6f8da" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e4ec6def5643a1c9511115b3884eb879572294c6", "url": "https://git.kernel.org/stable/c/e4ec6def5643a1c9511115b3884eb879572294c6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fb65803ccff37cf9123c50c1c02efd1ed73c4ed5", "url": "https://git.kernel.org/stable/c/fb65803ccff37cf9123c50c1c02efd1ed73c4ed5" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-23T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39880", "cwe": { "id": "CWE-704", "name": "Incorrect Type Conversion or Cast" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlibceph: fix invalid accesses to ceph_connection_v1_info\n\nThere is a place where generic code in messenger.c is reading and\nanother place where it is writing to con->v1 union member without\nchecking that the union member is active (i.e. msgr1 is in use).\n\nOn 64-bit systems, con->v1.auth_retry overlaps with con->v2.out_iter,\nso such a read is almost guaranteed to return a bogus value instead of\n0 when msgr2 is in use. This ends up being fairly benign because the\nside effect is just the invalidation of the authorizer and successive\nfetching of new tickets.\n\ncon->v1.connect_seq overlaps with con->v2.conn_bufs and the fact that\nit's being written to can cause more serious consequences, but luckily\nit's not something that happens often.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39880" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/23538cfbeed87159a5ac6c61e7a6de3d8d4486a8", "url": "https://git.kernel.org/stable/c/23538cfbeed87159a5ac6c61e7a6de3d8d4486a8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/35dbbc3dbf8bccb2d77c68444f42c1e6d2d27983", "url": "https://git.kernel.org/stable/c/35dbbc3dbf8bccb2d77c68444f42c1e6d2d27983" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/591ea9c30737663a471b2bb07b27ddde86b020d5", "url": "https://git.kernel.org/stable/c/591ea9c30737663a471b2bb07b27ddde86b020d5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6bd8b56899be0b514945f639a89ccafb8f8dfaef", "url": "https://git.kernel.org/stable/c/6bd8b56899be0b514945f639a89ccafb8f8dfaef" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cdbc9836c7afadad68f374791738f118263c5371", "url": "https://git.kernel.org/stable/c/cdbc9836c7afadad68f374791738f118263c5371" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ea12ab684f8ae8a6da11a22c78d94a79e2163096", "url": "https://git.kernel.org/stable/c/ea12ab684f8ae8a6da11a22c78d94a79e2163096" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-23T06:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38415", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nSquashfs: check return result of sb_min_blocksize\n\nSyzkaller reports an \"UBSAN: shift-out-of-bounds in squashfs_bio_read\" bug.\n\nSyzkaller forks multiple processes which after mounting the Squashfs\nfilesystem, issues an ioctl(\"/dev/loop0\", LOOP_SET_BLOCK_SIZE, 0x8000). \nNow if this ioctl occurs at the same time another process is in the\nprocess of mounting a Squashfs filesystem on /dev/loop0, the failure\noccurs. When this happens the following code in squashfs_fill_super()\nfails.\n\n----\nmsblk->devblksize = sb_min_blocksize(sb, SQUASHFS_DEVBLK_SIZE);\nmsblk->devblksize_log2 = ffz(~msblk->devblksize);\n----\n\nsb_min_blocksize() returns 0, which means msblk->devblksize is set to 0.\n\nAs a result, ffz(~msblk->devblksize) returns 64, and msblk->devblksize_log2\nis set to 64.\n\nThis subsequently causes the\n\nUBSAN: shift-out-of-bounds in fs/squashfs/block.c:195:36\nshift exponent 64 is too large for 64-bit type 'u64' (aka\n'unsigned long long')\n\nThis commit adds a check for a 0 return by sb_min_blocksize().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38415" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0aff95d9bc7fb5400ca8af507429c4b067bdb425", "url": "https://git.kernel.org/stable/c/0aff95d9bc7fb5400ca8af507429c4b067bdb425" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/295ab18c2dbce8d0ac6ecf7c5187e16e1ac8b282", "url": "https://git.kernel.org/stable/c/295ab18c2dbce8d0ac6ecf7c5187e16e1ac8b282" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4f99357dadbf9c979ad737156ad4c37fadf7c56b", "url": "https://git.kernel.org/stable/c/4f99357dadbf9c979ad737156ad4c37fadf7c56b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/549f9e3d7b60d53808c98b9fde49b4f46d0524a5", "url": "https://git.kernel.org/stable/c/549f9e3d7b60d53808c98b9fde49b4f46d0524a5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5c51aa862cbeed2f3887f0382a2708956710bd68", "url": "https://git.kernel.org/stable/c/5c51aa862cbeed2f3887f0382a2708956710bd68" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6abf6b78c6fb112eee495f5636ffcc350dd2ce25", "url": "https://git.kernel.org/stable/c/6abf6b78c6fb112eee495f5636ffcc350dd2ce25" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/734aa85390ea693bb7eaf2240623d41b03705c84", "url": "https://git.kernel.org/stable/c/734aa85390ea693bb7eaf2240623d41b03705c84" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/db7096ea160e40d78c67fce52e7cc51bde049497", "url": "https://git.kernel.org/stable/c/db7096ea160e40d78c67fce52e7cc51bde049497" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39905", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phylink: add lock for serializing concurrent pl->phydev writes with resolver\n\nCurrently phylink_resolve() protects itself against concurrent\nphylink_bringup_phy() or phylink_disconnect_phy() calls which modify\npl->phydev by relying on pl->state_mutex.\n\nThe problem is that in phylink_resolve(), pl->state_mutex is in a lock\ninversion state with pl->phydev->lock. So pl->phydev->lock needs to be\nacquired prior to pl->state_mutex. But that requires dereferencing\npl->phydev in the first place, and without pl->state_mutex, that is\nracy.\n\nHence the reason for the extra lock. Currently it is redundant, but it\nwill serve a functional purpose once mutex_lock(&phy->lock) will be\nmoved outside of the mutex_lock(&pl->state_mutex) section.\n\nAnother alternative considered would have been to let phylink_resolve()\nacquire the rtnl_mutex, which is also held when phylink_bringup_phy()\nand phylink_disconnect_phy() are called. But since phylink_disconnect_phy()\nruns under rtnl_lock(), it would deadlock with phylink_resolve() when\ncalling flush_work(&pl->resolve). Additionally, it would have been\nundesirable because it would have unnecessarily blocked many other call\npaths as well in the entire kernel, so the smaller-scoped lock was\npreferred.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39905" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0ba5b2f2c381dbec9ed9e4ab3ae5d3e667de0dc3", "url": "https://git.kernel.org/stable/c/0ba5b2f2c381dbec9ed9e4ab3ae5d3e667de0dc3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/56fe63b05ec84ae6674269d78397cec43a7a295a", "url": "https://git.kernel.org/stable/c/56fe63b05ec84ae6674269d78397cec43a7a295a" } ], "release_date": "2025-10-01T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53680", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL\n\nOPDESC() simply indexes into nfsd4_ops[] by the op's operation\nnumber, without range checking that value. It assumes callers are\ncareful to avoid calling it with an out-of-bounds opnum value.\n\nnfsd4_decode_compound() is not so careful, and can invoke OPDESC()\nwith opnum set to OP_ILLEGAL, which is 10044 -- well beyond the end\nof nfsd4_ops[].", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53680" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/50827896c365e0f6c8b55ed56d444dafd87c92c5", "url": "https://git.kernel.org/stable/c/50827896c365e0f6c8b55ed56d444dafd87c92c5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/804d8e0a6e54427268790472781e03bc243f4ee3", "url": "https://git.kernel.org/stable/c/804d8e0a6e54427268790472781e03bc243f4ee3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a64160124d5a078be0c380b1e8a0bad2d040d3a1", "url": "https://git.kernel.org/stable/c/a64160124d5a078be0c380b1e8a0bad2d040d3a1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f352c41fa718482979e7e6b71b4da2b718e381cc", "url": "https://git.kernel.org/stable/c/f352c41fa718482979e7e6b71b4da2b718e381cc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ffcbcf087581ae68ddc0a21460f7ecd4315bdd0e", "url": "https://git.kernel.org/stable/c/ffcbcf087581ae68ddc0a21460f7ecd4315bdd0e" } ], "release_date": "2025-10-07T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40154", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping\nWhen an invalid value is passed via quirk option, currently\nbytcr_rt5640 driver only shows an error message but leaves as is.\nThis may lead to unepxected results like OOB access.\nThis patch corrects the input mapping to the certain default value if\nan invalid value is passed.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40154" } ], "release_date": "2025-11-12T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38013", "cwe": { "id": "CWE-129", "name": "Improper Validation of Array Index" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request\n\nMake sure that n_channels is set after allocating the\nstruct cfg80211_registered_device::int_scan_req member. Seen with\nsyzkaller:\n\nUBSAN: array-index-out-of-bounds in net/mac80211/scan.c:1208:5\nindex 0 is out of range for type 'struct ieee80211_channel *[] __counted_by(n_channels)' (aka 'struct ieee80211_channel *[]')\n\nThis was missed in the initial conversions because I failed to locate\nthe allocation likely due to the \"sizeof(void *)\" not matching the\n\"channels\" array type.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38013" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/07c737d9ab02c07b562aefcca16aa95077368e24", "url": "https://git.kernel.org/stable/c/07c737d9ab02c07b562aefcca16aa95077368e24" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/82bbe02b2500ef0a62053fe2eb84773fe31c5a0a", "url": "https://git.kernel.org/stable/c/82bbe02b2500ef0a62053fe2eb84773fe31c5a0a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3192e999a0d05ea0ba2c59c09afaf0b8ee70b81", "url": "https://git.kernel.org/stable/c/e3192e999a0d05ea0ba2c59c09afaf0b8ee70b81" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fde33ab3c052a302ee8a0b739094b88ceae4dd67", "url": "https://git.kernel.org/stable/c/fde33ab3c052a302ee8a0b739094b88ceae4dd67" } ], "release_date": "2025-06-18T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-50488", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix possible uaf for 'bfqq->bic'\n\nOur test report a uaf for 'bfqq->bic' in 5.10:\n\n==================================================================\nBUG: KASAN: use-after-free in bfq_select_queue+0x378/0xa30\n\nCPU: 6 PID: 2318352 Comm: fsstress Kdump: loaded Not tainted 5.10.0-60.18.0.50.h602.kasan.eulerosv2r11.x86_64 #1\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.12.1-0-ga5cab58-20220320_160524-szxrtosci10000 04/01/2014\nCall Trace:\n bfq_select_queue+0x378/0xa30\n bfq_dispatch_request+0xe8/0x130\n blk_mq_do_dispatch_sched+0x62/0xb0\n __blk_mq_sched_dispatch_requests+0x215/0x2a0\n blk_mq_sched_dispatch_requests+0x8f/0xd0\n __blk_mq_run_hw_queue+0x98/0x180\n __blk_mq_delay_run_hw_queue+0x22b/0x240\n blk_mq_run_hw_queue+0xe3/0x190\n blk_mq_sched_insert_requests+0x107/0x200\n blk_mq_flush_plug_list+0x26e/0x3c0\n blk_finish_plug+0x63/0x90\n __iomap_dio_rw+0x7b5/0x910\n iomap_dio_rw+0x36/0x80\n ext4_dio_read_iter+0x146/0x190 [ext4]\n ext4_file_read_iter+0x1e2/0x230 [ext4]\n new_sync_read+0x29f/0x400\n vfs_read+0x24e/0x2d0\n ksys_read+0xd5/0x1b0\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x61/0xc6\n\nCommit 3bc5e683c67d (\"bfq: Split shared queues on move between cgroups\")\nchanges that move process to a new cgroup will allocate a new bfqq to\nuse, however, the old bfqq and new bfqq can point to the same bic:\n\n1) Initial state, two process with io in the same cgroup.\n\nProcess 1 Process 2\n (BIC1) (BIC2)\n | Λ | Λ\n | | | |\n V | V |\n bfqq1 bfqq2\n\n2) bfqq1 is merged to bfqq2.\n\nProcess 1 Process 2\n (BIC1) (BIC2)\n | |\n \\-------------\\|\n V\n bfqq1 bfqq2(coop)\n\n3) Process 1 exit, then issue new io(denoce IOA) from Process 2.\n\n (BIC2)\n | Λ\n | |\n V |\n bfqq2(coop)\n\n4) Before IOA is completed, move Process 2 to another cgroup and issue io.\n\nProcess 2\n (BIC2)\n Λ\n |\\--------------\\\n | V\n bfqq2 bfqq3\n\nNow that BIC2 points to bfqq3, while bfqq2 and bfqq3 both point to BIC2.\nIf all the requests are completed, and Process 2 exit, BIC2 will be\nfreed while there is no guarantee that bfqq2 will be freed before BIC2.\n\nFix the problem by clearing bfqq->bic while bfqq is detached from bic.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-50488" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/094f3d9314d67691cb21ba091c1b528f6e3c4893", "url": "https://git.kernel.org/stable/c/094f3d9314d67691cb21ba091c1b528f6e3c4893" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5533742c7cb1bc9b1f0bf401cc397d44a3a9e07a", "url": "https://git.kernel.org/stable/c/5533742c7cb1bc9b1f0bf401cc397d44a3a9e07a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64dc8c732f5c2b406cc752e6aaa1bd5471159cab", "url": "https://git.kernel.org/stable/c/64dc8c732f5c2b406cc752e6aaa1bd5471159cab" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/761564d93c8265f65543acf0a576b32d66bfa26a", "url": "https://git.kernel.org/stable/c/761564d93c8265f65543acf0a576b32d66bfa26a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b22fd72bfebda3956efc4431b60ddfc0a51e03e0", "url": "https://git.kernel.org/stable/c/b22fd72bfebda3956efc4431b60ddfc0a51e03e0" } ], "release_date": "2025-10-04T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40269", "cwe": { "id": "CWE-131", "name": "Incorrect Calculation of Buffer Size" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nALSA: usb-audio: Fix potential overflow of PCM transfer buffer\nThe PCM stream data in USB-audio driver is transferred over USB URB\npacket buffers, and each packet size is determined dynamically. The\npacket sizes are limited by some factors such as wMaxPacketSize USB\ndescriptor. OTOH, in the current code, the actually used packet sizes\nare determined only by the rate and the PPS, which may be bigger than\nthe size limit above. This results in a buffer overflow, as reported\nby syzbot.\nBasically when the limit is smaller than the calculated packet size,\nit implies that something is wrong, most likely a weird USB\ndescriptor. So the best option would be just to return an error at\nthe parameter setup time before doing any further operations.\nThis patch introduces such a sanity check, and returns -EINVAL when\nthe packet size is greater than maxpacksize. The comparison with\nep->packsize[1] alone should suffice since it's always equal or\ngreater than ep->packsize[0].", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40269" } ], "release_date": "2025-12-06T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38107", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: ets: fix a race in ets_qdisc_change()\n\nGerrard Tai reported a race condition in ETS, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent's qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38107" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0383b25488a545be168744336847549d4a2d3d6c", "url": "https://git.kernel.org/stable/c/0383b25488a545be168744336847549d4a2d3d6c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/073f64c03516bcfaf790f8edc772e0cfb8a84ec3", "url": "https://git.kernel.org/stable/c/073f64c03516bcfaf790f8edc772e0cfb8a84ec3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0b479d0aa488cb478eb2e1d8868be946ac8afb4f", "url": "https://git.kernel.org/stable/c/0b479d0aa488cb478eb2e1d8868be946ac8afb4f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/347867cb424edae5fec1622712c8dd0a2c42918f", "url": "https://git.kernel.org/stable/c/347867cb424edae5fec1622712c8dd0a2c42918f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d92adacdd8c2960be856e0b82acc5b7c5395fddb", "url": "https://git.kernel.org/stable/c/d92adacdd8c2960be856e0b82acc5b7c5395fddb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/eb7b74e9754e1ba2088f914ad1f57a778b11894b", "url": "https://git.kernel.org/stable/c/eb7b74e9754e1ba2088f914ad1f57a778b11894b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fed94bd51d62d2e0e006aa61480e94e5cd0582b0", "url": "https://git.kernel.org/stable/c/fed94bd51d62d2e0e006aa61480e94e5cd0582b0" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38083", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: prio: fix a race in prio_tune()\n\nGerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer\nfires at the wrong time.\n\nThe race is as follows:\n\nCPU 0 CPU 1\n[1]: lock root\n[2]: qdisc_tree_flush_backlog()\n[3]: unlock root\n |\n | [5]: lock root\n | [6]: rehash\n | [7]: qdisc_tree_reduce_backlog()\n |\n[4]: qdisc_put()\n\nThis can be abused to underflow a parent's qlen.\n\nCalling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()\nshould fix the race, because all packets will be purged from the qdisc\nbefore releasing the lock.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38083" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/20f68e6a9e41693cb0e55e5b9ebbcb40983a4b8f", "url": "https://git.kernel.org/stable/c/20f68e6a9e41693cb0e55e5b9ebbcb40983a4b8f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3aaa7c01cf19d9b9bb64b88b65c3a6fd05da2eb4", "url": "https://git.kernel.org/stable/c/3aaa7c01cf19d9b9bb64b88b65c3a6fd05da2eb4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4483d8b9127591c60c4eb789d6cab953bc4522a9", "url": "https://git.kernel.org/stable/c/4483d8b9127591c60c4eb789d6cab953bc4522a9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/46c15c9d0f65c9ba857d63f53264f4b17e8a715f", "url": "https://git.kernel.org/stable/c/46c15c9d0f65c9ba857d63f53264f4b17e8a715f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/53d11560e957d53ee87a0653d258038ce12361b7", "url": "https://git.kernel.org/stable/c/53d11560e957d53ee87a0653d258038ce12361b7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/93f9eeb678d4c9c1abf720b3615fa8299a490845", "url": "https://git.kernel.org/stable/c/93f9eeb678d4c9c1abf720b3615fa8299a490845" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d35acc1be3480505b5931f17e4ea9b7617fea4d3", "url": "https://git.kernel.org/stable/c/d35acc1be3480505b5931f17e4ea9b7617fea4d3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e3f6745006dc9423d2b065b90f191cfa11b1b584", "url": "https://git.kernel.org/stable/c/e3f6745006dc9423d2b065b90f191cfa11b1b584" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-20T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-37825", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix out-of-bounds access in nvmet_enable_port\n\nWhen trying to enable a port that has no transport configured yet,\nnvmet_enable_port() uses NVMF_TRTYPE_MAX (255) to query the transports\narray, causing an out-of-bounds access:\n\n[ 106.058694] BUG: KASAN: global-out-of-bounds in nvmet_enable_port+0x42/0x1da\n[ 106.058719] Read of size 8 at addr ffffffff89dafa58 by task ln/632\n[...]\n[ 106.076026] nvmet: transport type 255 not supported\n\nSince commit 200adac75888, NVMF_TRTYPE_MAX is the default state as configured by\nnvmet_ports_make().\nAvoid this by checking for NVMF_TRTYPE_MAX before proceeding.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-37825" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3d7aa0c7b4e96cd460826d932e44710cdeb3378b", "url": "https://git.kernel.org/stable/c/3d7aa0c7b4e96cd460826d932e44710cdeb3378b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/83c00860a37b3fcba8026cb344101f1b8af547cf", "url": "https://git.kernel.org/stable/c/83c00860a37b3fcba8026cb344101f1b8af547cf" } ], "release_date": "2025-05-08T07:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39853", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix potential invalid access when MAC list is empty\n\nlist_first_entry() never returns NULL - if the list is empty, it still\nreturns a pointer to an invalid object, leading to potential invalid\nmemory access when dereferenced.\n\nFix this by using list_first_entry_or_null instead of list_first_entry.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39853" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1eadabcf5623f1237a539b16586b4ed8ac8dffcd", "url": "https://git.kernel.org/stable/c/1eadabcf5623f1237a539b16586b4ed8ac8dffcd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3c6fb929afa313d9d11f780451d113f73922fe5d", "url": "https://git.kernel.org/stable/c/3c6fb929afa313d9d11f780451d113f73922fe5d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf", "url": "https://git.kernel.org/stable/c/66e7cdbda74ee823ec2bf7b830ebd235c54f5ddf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/971feafe157afac443027acdc235badc6838560b", "url": "https://git.kernel.org/stable/c/971feafe157afac443027acdc235badc6838560b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9c21fc4cebd44dd21016c61261a683af390343f8", "url": "https://git.kernel.org/stable/c/9c21fc4cebd44dd21016c61261a683af390343f8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a556f06338e1d5a85af0e32ecb46e365547f92b9", "url": "https://git.kernel.org/stable/c/a556f06338e1d5a85af0e32ecb46e365547f92b9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e2a5e74879f9b494bbd66fa93f355feacde450c7", "url": "https://git.kernel.org/stable/c/e2a5e74879f9b494bbd66fa93f355feacde450c7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fb216d980fae6561c7c70af8ef826faf059c6515", "url": "https://git.kernel.org/stable/c/fb216d980fae6561c7c70af8ef826faf059c6515" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-19T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39933", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: let recv_done verify data_offset, data_length and remaining_data_length\n\nThis is inspired by the related server fixes.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39933" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f", "url": "https://git.kernel.org/stable/c/581fb78e0388b78911b0c920e4073737090c8b5f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e", "url": "https://git.kernel.org/stable/c/f57e53ea252363234f86674db475839e5b87102e" } ], "release_date": "2025-10-04T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-39973", "cwe": { "id": "CWE-131", "name": "Incorrect Calculation of Buffer Size" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\ni40e: add validation for ring_len param\nThe `ring_len` parameter provided by the virtual function (VF)\nis assigned directly to the hardware memory context (HMC) without\nany validation.\nTo address this, introduce an upper boundary check for both Tx and Rx\nqueue lengths. The maximum number of descriptors supported by the\nhardware is 8k-32.\nAdditionally, enforce alignment constraints: Tx rings must be a multiple\nof 8, and Rx rings must be a multiple of 32.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39973" } ], "release_date": "2025-10-15T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38729", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Validate UAC3 power domain descriptors, too\n\nUAC3 power domain descriptors need to be verified with its variable\nbLength for avoiding the unexpected OOB accesses by malicious\nfirmware, too.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38729" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc", "url": "https://git.kernel.org/stable/c/07c8d78dbb5e0ff8b23f7fd69cd1d4e2ba22b3dc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81", "url": "https://git.kernel.org/stable/c/1666207ba0a5973735ef010812536adde6174e81" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a", "url": "https://git.kernel.org/stable/c/29b415ec09f5b9d1dfa2423b826725a8c8796b9a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7", "url": "https://git.kernel.org/stable/c/40714daf4d0448e1692c78563faf0ed0f9d9b5c7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd", "url": "https://git.kernel.org/stable/c/452ad54f432675982cc0d6eb6c40a6c86ac61dbd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a", "url": "https://git.kernel.org/stable/c/cd08d390d15b204cac1d3174f5f149a20c52e61a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d832ccbc301fbd9e5a1d691bdcf461cdb514595f", "url": "https://git.kernel.org/stable/c/d832ccbc301fbd9e5a1d691bdcf461cdb514595f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ebc9e06b6ea978a20abf9b87d41afc51b2d745ac", "url": "https://git.kernel.org/stable/c/ebc9e06b6ea978a20abf9b87d41afc51b2d745ac" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f03418bb9d542f44df78eec2eff4ac83c0a8ac0d", "url": "https://git.kernel.org/stable/c/f03418bb9d542f44df78eec2eff4ac83c0a8ac0d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-04T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-68285", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nlibceph: fix potential use-after-free in have_mon_and_osd_map()\nThe wait loop in __ceph_open_session() can race with the client\nreceiving a new monmap or osdmap shortly after the initial map is\nreceived. Both ceph_monc_handle_map() and handle_one_map() install\na new map immediately after freeing the old one\nkfree(monc->monmap);\nmonc->monmap = monmap;\nceph_osdmap_destroy(osdc->osdmap);\nosdc->osdmap = newmap;\nunder client->monc.mutex and client->osdc.lock respectively, but\nbecause neither is taken in have_mon_and_osd_map() it's possible for\nclient->monc.monmap->epoch and client->osdc.osdmap->epoch arms in\nclient->monc.monmap && client->monc.monmap->epoch &&\nclient->osdc.osdmap && client->osdc.osdmap->epoch;\ncondition to dereference an already freed map. This happens to be\nreproducible with generic/395 and generic/397 with KASAN enabled:\nBUG: KASAN: slab-use-after-free in have_mon_and_osd_map+0x56/0x70\nRead of size 4 at addr ffff88811012d810 by task mount.ceph/13305\nCPU: 2 UID: 0 PID: 13305 Comm: mount.ceph Not tainted 6.14.0-rc2-build2+ #1266\n...\nCall Trace:\n\nhave_mon_and_osd_map+0x56/0x70\nceph_open_session+0x182/0x290\nceph_get_tree+0x333/0x680\nvfs_get_tree+0x49/0x180\ndo_new_mount+0x1a3/0x2d0\npath_mount+0x6dd/0x730\ndo_mount+0x99/0xe0\n__do_sys_mount+0x141/0x180\ndo_syscall_64+0x9f/0x100\nentry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nAllocated by task 13305:\nceph_osdmap_alloc+0x16/0x130\nceph_osdc_init+0x27a/0x4c0\nceph_create_client+0x153/0x190\ncreate_fs_client+0x50/0x2a0\nceph_get_tree+0xff/0x680\nvfs_get_tree+0x49/0x180\ndo_new_mount+0x1a3/0x2d0\npath_mount+0x6dd/0x730\ndo_mount+0x99/0xe0\n__do_sys_mount+0x141/0x180\ndo_syscall_64+0x9f/0x100\nentry_SYSCALL_64_after_hwframe+0x76/0x7e\nFreed by task 9475:\nkfree+0x212/0x290\nhandle_one_map+0x23c/0x3b0\nceph_osdc_handle_map+0x3c9/0x590\nmon_dispatch+0x655/0x6f0\nceph_con_process_message+0xc3/0xe0\nceph_con_v1_try_read+0x614/0x760\nceph_con_workfn+0x2de/0x650\nprocess_one_work+0x486/0x7c0\nprocess_scheduled_works+0x73/0x90\nworker_thread+0x1c8/0x2a0\nkthread+0x2ec/0x300\nret_from_fork+0x24/0x40\nret_from_fork_asm+0x1a/0x30\nRewrite the wait loop to check the above condition directly with\nclient->monc.mutex and client->osdc.lock taken as appropriate. While\nat it, improve the timeout handling (previously mount_timeout could be\nexceeded in case wait_event_interruptible_timeout() slept more than\nonce) and access client->auth_err under client->monc.mutex to match\nhow it's set in finish_auth().\nmonmap_show() and osdmap_show() now take the respective lock before\naccessing the map as well.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-68285" } ], "release_date": "2025-12-16T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39790", "cwe": { "id": "CWE-415", "name": "Double Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nbus: mhi: host: Detect events pointing to unexpected TREs\n\nWhen a remote device sends a completion event to the host, it contains a\npointer to the consumed TRE. The host uses this pointer to process all of\nthe TREs between it and the host's local copy of the ring's read pointer.\nThis works when processing completion for chained transactions, but can\nlead to nasty results if the device sends an event for a single-element\ntransaction with a read pointer that is multiple elements ahead of the\nhost's read pointer.\n\nFor instance, if the host accesses an event ring while the device is\nupdating it, the pointer inside of the event might still point to an old\nTRE. If the host uses the channel's xfer_cb() to directly free the buffer\npointed to by the TRE, the buffer will be double-freed.\n\nThis behavior was observed on an ep that used upstream EP stack without\n'commit 6f18d174b73d (\"bus: mhi: ep: Update read pointer only after buffer\nis written\")'. Where the device updated the events ring pointer before\nupdating the event contents, so it left a window where the host was able to\naccess the stale data the event pointed to, before the device had the\nchance to update them. The usual pattern was that the host received an\nevent pointing to a TRE that is not immediately after the last processed\none, so it got treated as if it was a chained transaction, processing all\nof the TREs in between the two read pointers.\n\nThis commit aims to harden the host by ensuring transactions where the\nevent points to a TRE that isn't local_rp + 1 are chained.\n\n[mani: added stable tag and reworded commit message]", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39790" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2ec99b922f4661521927eeada76f431eebfbabc4", "url": "https://git.kernel.org/stable/c/2ec99b922f4661521927eeada76f431eebfbabc4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4079c6c59705b96285219b9efc63cab870d757b7", "url": "https://git.kernel.org/stable/c/4079c6c59705b96285219b9efc63cab870d757b7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/44e1a079e18f78d6594a715b0c6d7e18c656f7b9", "url": "https://git.kernel.org/stable/c/44e1a079e18f78d6594a715b0c6d7e18c656f7b9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5bd398e20f0833ae8a1267d4f343591a2dd20185", "url": "https://git.kernel.org/stable/c/5bd398e20f0833ae8a1267d4f343591a2dd20185" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5e17429679a8545afe438ce7a82a13a54e8ceabb", "url": "https://git.kernel.org/stable/c/5e17429679a8545afe438ce7a82a13a54e8ceabb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7b3f0e3b60c27f4fcb69927d84987e5fd6240530", "url": "https://git.kernel.org/stable/c/7b3f0e3b60c27f4fcb69927d84987e5fd6240530" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-11T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38051", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: Fix use-after-free in cifs_fill_dirent\n\nThere is a race condition in the readdir concurrency process, which may\naccess the rsp buffer after it has been released, triggering the\nfollowing KASAN warning.\n\n ==================================================================\n BUG: KASAN: slab-use-after-free in cifs_fill_dirent+0xb03/0xb60 [cifs]\n Read of size 4 at addr ffff8880099b819c by task a.out/342975\n\n CPU: 2 UID: 0 PID: 342975 Comm: a.out Not tainted 6.15.0-rc6+ #240 PREEMPT(full)\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.1-2.fc37 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x53/0x70\n print_report+0xce/0x640\n kasan_report+0xb8/0xf0\n cifs_fill_dirent+0xb03/0xb60 [cifs]\n cifs_readdir+0x12cb/0x3190 [cifs]\n iterate_dir+0x1a1/0x520\n __x64_sys_getdents+0x134/0x220\n do_syscall_64+0x4b/0x110\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n RIP: 0033:0x7f996f64b9f9\n Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89\n f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01\n f0 ff ff 0d f7 c3 0c 00 f7 d8 64 89 8\n RSP: 002b:00007f996f53de78 EFLAGS: 00000207 ORIG_RAX: 000000000000004e\n RAX: ffffffffffffffda RBX: 00007f996f53ecdc RCX: 00007f996f64b9f9\n RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003\n RBP: 00007f996f53dea0 R08: 0000000000000000 R09: 0000000000000000\n R10: 0000000000000000 R11: 0000000000000207 R12: ffffffffffffff88\n R13: 0000000000000000 R14: 00007ffc8cd9a500 R15: 00007f996f51e000\n \n\n Allocated by task 408:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n __kasan_slab_alloc+0x6e/0x70\n kmem_cache_alloc_noprof+0x117/0x3d0\n mempool_alloc_noprof+0xf2/0x2c0\n cifs_buf_get+0x36/0x80 [cifs]\n allocate_buffers+0x1d2/0x330 [cifs]\n cifs_demultiplex_thread+0x22b/0x2690 [cifs]\n kthread+0x394/0x720\n ret_from_fork+0x34/0x70\n ret_from_fork_asm+0x1a/0x30\n\n Freed by task 342979:\n kasan_save_stack+0x20/0x40\n kasan_save_track+0x14/0x30\n kasan_save_free_info+0x3b/0x60\n __kasan_slab_free+0x37/0x50\n kmem_cache_free+0x2b8/0x500\n cifs_buf_release+0x3c/0x70 [cifs]\n cifs_readdir+0x1c97/0x3190 [cifs]\n iterate_dir+0x1a1/0x520\n __x64_sys_getdents64+0x134/0x220\n do_syscall_64+0x4b/0x110\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\n The buggy address belongs to the object at ffff8880099b8000\n which belongs to the cache cifs_request of size 16588\n The buggy address is located 412 bytes inside of\n freed 16588-byte region [ffff8880099b8000, ffff8880099bc0cc)\n\n The buggy address belongs to the physical page:\n page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x99b8\n head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\n anon flags: 0x80000000000040(head|node=0|zone=1)\n page_type: f5(slab)\n raw: 0080000000000040 ffff888001e03400 0000000000000000 dead000000000001\n raw: 0000000000000000 0000000000010001 00000000f5000000 0000000000000000\n head: 0080000000000040 ffff888001e03400 0000000000000000 dead000000000001\n head: 0000000000000000 0000000000010001 00000000f5000000 0000000000000000\n head: 0080000000000003 ffffea0000266e01 00000000ffffffff 00000000ffffffff\n head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008\n page dumped because: kasan: bad access detected\n\n Memory state around the buggy address:\n ffff8880099b8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff8880099b8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n >ffff8880099b8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff8880099b8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ffff8880099b8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ==================================================================\n\nPOC is available in the link [1].\n\nThe problem triggering process is as follows:\n\nProcess 1 Process 2\n-----------------------------------\n---truncated---", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38051" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1b197931fbc821bc7e9e91bf619400db563e3338", "url": "https://git.kernel.org/stable/c/1b197931fbc821bc7e9e91bf619400db563e3338" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/73cadde98f67f76c5eba00ac0b72c453383cec8b", "url": "https://git.kernel.org/stable/c/73cadde98f67f76c5eba00ac0b72c453383cec8b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9bea368648ac46f8593a780760362e40291d22a9", "url": "https://git.kernel.org/stable/c/9bea368648ac46f8593a780760362e40291d22a9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9c9aafbacc183598f064902365e107b5e856531f", "url": "https://git.kernel.org/stable/c/9c9aafbacc183598f064902365e107b5e856531f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a24c2f05ac3c5b0aaa539d9d913826d2643dfd0e", "url": "https://git.kernel.org/stable/c/a24c2f05ac3c5b0aaa539d9d913826d2643dfd0e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a7a8fe56e932a36f43e031b398aef92341bf5ea0", "url": "https://git.kernel.org/stable/c/a7a8fe56e932a36f43e031b398aef92341bf5ea0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/aee067e88d61eb72e966f094e4749c6b14e7008f", "url": "https://git.kernel.org/stable/c/aee067e88d61eb72e966f094e4749c6b14e7008f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c8623231e0edfcccb7cc6add0288fa0f0594282f", "url": "https://git.kernel.org/stable/c/c8623231e0edfcccb7cc6add0288fa0f0594282f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-18T10:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38346", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Fix UAF when lookup kallsym after ftrace disabled\n\nThe following issue happens with a buggy module:\n\nBUG: unable to handle page fault for address: ffffffffc05d0218\nPGD 1bd66f067 P4D 1bd66f067 PUD 1bd671067 PMD 101808067 PTE 0\nOops: Oops: 0000 [#1] SMP KASAN PTI\nTainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS\nRIP: 0010:sized_strscpy+0x81/0x2f0\nRSP: 0018:ffff88812d76fa08 EFLAGS: 00010246\nRAX: 0000000000000000 RBX: ffffffffc0601010 RCX: dffffc0000000000\nRDX: 0000000000000038 RSI: dffffc0000000000 RDI: ffff88812608da2d\nRBP: 8080808080808080 R08: ffff88812608da2d R09: ffff88812608da68\nR10: ffff88812608d82d R11: ffff88812608d810 R12: 0000000000000038\nR13: ffff88812608da2d R14: ffffffffc05d0218 R15: fefefefefefefeff\nFS: 00007fef552de740(0000) GS:ffff8884251c7000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffffffc05d0218 CR3: 00000001146f0000 CR4: 00000000000006f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n ftrace_mod_get_kallsym+0x1ac/0x590\n update_iter_mod+0x239/0x5b0\n s_next+0x5b/0xa0\n seq_read_iter+0x8c9/0x1070\n seq_read+0x249/0x3b0\n proc_reg_read+0x1b0/0x280\n vfs_read+0x17f/0x920\n ksys_read+0xf3/0x1c0\n do_syscall_64+0x5f/0x2e0\n entry_SYSCALL_64_after_hwframe+0x76/0x7e\n\nThe above issue may happen as follows:\n(1) Add kprobe tracepoint;\n(2) insmod test.ko;\n(3) Module triggers ftrace disabled;\n(4) rmmod test.ko;\n(5) cat /proc/kallsyms; --> Will trigger UAF as test.ko already removed;\nftrace_mod_get_kallsym()\n...\nstrscpy(module_name, mod_map->mod->name, MODULE_NAME_LEN);\n...\n\nThe problem is when a module triggers an issue with ftrace and\nsets ftrace_disable. The ftrace_disable is set when an anomaly is\ndiscovered and to prevent any more damage, ftrace stops all text\nmodification. The issue that happened was that the ftrace_disable stops\nmore than just the text modification.\n\nWhen a module is loaded, its init functions can also be traced. Because\nkallsyms deletes the init functions after a module has loaded, ftrace\nsaves them when the module is loaded and function tracing is enabled. This\nallows the output of the function trace to show the init function names\ninstead of just their raw memory addresses.\n\nWhen a module is removed, ftrace_release_mod() is called, and if\nftrace_disable is set, it just returns without doing anything more. The\nproblem here is that it leaves the mod_list still around and if kallsyms\nis called, it will call into this code and access the module memory that\nhas already been freed as it will return:\n\n strscpy(module_name, mod_map->mod->name, MODULE_NAME_LEN);\n\nWhere the \"mod\" no longer exists and triggers a UAF bug.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38346" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/03a162933c4a03b9f1a84f7d8482903c7e1e11bb", "url": "https://git.kernel.org/stable/c/03a162933c4a03b9f1a84f7d8482903c7e1e11bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6805582abb720681dd1c87ff677f155dcf4e86c9", "url": "https://git.kernel.org/stable/c/6805582abb720681dd1c87ff677f155dcf4e86c9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/83a692a9792aa86249d68a8ac0b9d55ecdd255fa", "url": "https://git.kernel.org/stable/c/83a692a9792aa86249d68a8ac0b9d55ecdd255fa" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8690cd3258455bbae64f809e1d3ee0f043661c71", "url": "https://git.kernel.org/stable/c/8690cd3258455bbae64f809e1d3ee0f043661c71" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8e89c17dc8970c5f71a3a991f5724d4c8de42d8c", "url": "https://git.kernel.org/stable/c/8e89c17dc8970c5f71a3a991f5724d4c8de42d8c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d064c68781c19f378af1ae741d9132d35d24b2bb", "url": "https://git.kernel.org/stable/c/d064c68781c19f378af1ae741d9132d35d24b2bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f78a786ad9a5443a29eef4dae60cde85b7375129", "url": "https://git.kernel.org/stable/c/f78a786ad9a5443a29eef4dae60cde85b7375129" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f914b52c379c12288b7623bb814d0508dbe7481d", "url": "https://git.kernel.org/stable/c/f914b52c379c12288b7623bb814d0508dbe7481d" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-10T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38323", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: atm: add lec_mutex\n\nsyzbot found its way in net/atm/lec.c, and found an error path\nin lecd_attach() could leave a dangling pointer in dev_lec[].\n\nAdd a mutex to protect dev_lecp[] uses from lecd_attach(),\nlec_vcc_attach() and lec_mcast_attach().\n\nFollowing patch will use this mutex for /proc/net/atm/lec.\n\nBUG: KASAN: slab-use-after-free in lecd_attach net/atm/lec.c:751 [inline]\nBUG: KASAN: slab-use-after-free in lane_ioctl+0x2224/0x23e0 net/atm/lec.c:1008\nRead of size 8 at addr ffff88807c7b8e68 by task syz.1.17/6142\n\nCPU: 1 UID: 0 PID: 6142 Comm: syz.1.17 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xcd/0x680 mm/kasan/report.c:521\n kasan_report+0xe0/0x110 mm/kasan/report.c:634\n lecd_attach net/atm/lec.c:751 [inline]\n lane_ioctl+0x2224/0x23e0 net/atm/lec.c:1008\n do_vcc_ioctl+0x12c/0x930 net/atm/ioctl.c:159\n sock_do_ioctl+0x118/0x280 net/socket.c:1190\n sock_ioctl+0x227/0x6b0 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \n\nAllocated by task 6132:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:47\n kasan_save_track+0x14/0x30 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __do_kmalloc_node mm/slub.c:4328 [inline]\n __kvmalloc_node_noprof+0x27b/0x620 mm/slub.c:5015\n alloc_netdev_mqs+0xd2/0x1570 net/core/dev.c:11711\n lecd_attach net/atm/lec.c:737 [inline]\n lane_ioctl+0x17db/0x23e0 net/atm/lec.c:1008\n do_vcc_ioctl+0x12c/0x930 net/atm/ioctl.c:159\n sock_do_ioctl+0x118/0x280 net/socket.c:1190\n sock_ioctl+0x227/0x6b0 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 6132:\n kasan_save_stack+0x33/0x60 mm/kasan/common.c:47\n kasan_save_track+0x14/0x30 mm/kasan/common.c:68\n kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2381 [inline]\n slab_free mm/slub.c:4643 [inline]\n kfree+0x2b4/0x4d0 mm/slub.c:4842\n free_netdev+0x6c5/0x910 net/core/dev.c:11892\n lecd_attach net/atm/lec.c:744 [inline]\n lane_ioctl+0x1ce8/0x23e0 net/atm/lec.c:1008\n do_vcc_ioctl+0x12c/0x930 net/atm/ioctl.c:159\n sock_do_ioctl+0x118/0x280 net/socket.c:1190\n sock_ioctl+0x227/0x6b0 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __x64_sys_ioctl+0x18e/0x210 fs/ioctl.c:893", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38323" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/17e156a94e94a906a570dbf9b48877956c60bef8", "url": "https://git.kernel.org/stable/c/17e156a94e94a906a570dbf9b48877956c60bef8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/18e8f0c4f826fb08c2d3825cdd6c57e24b207e0a", "url": "https://git.kernel.org/stable/c/18e8f0c4f826fb08c2d3825cdd6c57e24b207e0a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/64b378db28a967f7b271b055380c2360279aa424", "url": "https://git.kernel.org/stable/c/64b378db28a967f7b271b055380c2360279aa424" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a7a713dfb5f9477345450f27c7c0741864511192", "url": "https://git.kernel.org/stable/c/a7a713dfb5f9477345450f27c7c0741864511192" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d13a3824bfd2b4774b671a75cf766a16637a0e67", "url": "https://git.kernel.org/stable/c/d13a3824bfd2b4774b671a75cf766a16637a0e67" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/dffd03422ae6a459039c8602f410e6c0f4cbc6c8", "url": "https://git.kernel.org/stable/c/dffd03422ae6a459039c8602f410e6c0f4cbc6c8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e91274cc7ed88ab5bdc62d426067c82b0b118a0b", "url": "https://git.kernel.org/stable/c/e91274cc7ed88ab5bdc62d426067c82b0b118a0b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f4d80b16ecc4229f7e6345158ef34c36be323f0e", "url": "https://git.kernel.org/stable/c/f4d80b16ecc4229f7e6345158ef34c36be323f0e" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-10T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38103", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nHID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()\n\nUpdate struct hid_descriptor to better reflect the mandatory and\noptional parts of the HID Descriptor as per USB HID 1.11 specification.\nNote: the kernel currently does not parse any optional HID class\ndescriptors, only the mandatory report descriptor.\n\nUpdate all references to member element desc[0] to rpt_desc.\n\nAdd test to verify bLength and bNumDescriptors values are valid.\n\nReplace the for loop with direct access to the mandatory HID class\ndescriptor member for the report descriptor. This eliminates the\npossibility of getting an out-of-bounds fault.\n\nAdd a warning message if the HID descriptor contains any unsupported\noptional HID class descriptors.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38103" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1df80d748f984290c895e843401824215dcfbfb0", "url": "https://git.kernel.org/stable/c/1df80d748f984290c895e843401824215dcfbfb0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/41827a2dbdd7880df9881506dee13bc88d4230bb", "url": "https://git.kernel.org/stable/c/41827a2dbdd7880df9881506dee13bc88d4230bb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/485e1b741eb838cbe1d6b0e81e5ab62ae6c095cf", "url": "https://git.kernel.org/stable/c/485e1b741eb838cbe1d6b0e81e5ab62ae6c095cf" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4fa7831cf0ac71a0a345369d1a6084f2b096e55e", "url": "https://git.kernel.org/stable/c/4fa7831cf0ac71a0a345369d1a6084f2b096e55e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/74388368927e9c52a69524af5bbd6c55eb4690de", "url": "https://git.kernel.org/stable/c/74388368927e9c52a69524af5bbd6c55eb4690de" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7a6d6b68db128da2078ccd9a751dfa3f75c9cf5b", "url": "https://git.kernel.org/stable/c/7a6d6b68db128da2078ccd9a751dfa3f75c9cf5b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a8f842534807985d3a676006d140541b87044345", "url": "https://git.kernel.org/stable/c/a8f842534807985d3a676006d140541b87044345" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fe7f7ac8e0c708446ff017453add769ffc15deed", "url": "https://git.kernel.org/stable/c/fe7f7ac8e0c708446ff017453add769ffc15deed" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38702", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: fix potential buffer overflow in do_register_framebuffer()\n\nThe current implementation may lead to buffer overflow when:\n1. Unregistration creates NULL gaps in registered_fb[]\n2. All array slots become occupied despite num_registered_fb < FB_MAX\n3. The registration loop exceeds array bounds\n\nAdd boundary check to prevent registered_fb[FB_MAX] access.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38702" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399", "url": "https://git.kernel.org/stable/c/248b2aab9b2af5ecf89d9d7955a2ff20c4b4a399" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2828a433c7d7a05b6f27c8148502095101dd0b09", "url": "https://git.kernel.org/stable/c/2828a433c7d7a05b6f27c8148502095101dd0b09" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/523b84dc7ccea9c4d79126d6ed1cf9033cf83b05", "url": "https://git.kernel.org/stable/c/523b84dc7ccea9c4d79126d6ed1cf9033cf83b05" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5c3f5a25c62230b7965804ce7a2e9305c3ca3961", "url": "https://git.kernel.org/stable/c/5c3f5a25c62230b7965804ce7a2e9305c3ca3961" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/806f85bdd3a60187c21437fc51baace11f659f35", "url": "https://git.kernel.org/stable/c/806f85bdd3a60187c21437fc51baace11f659f35" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cbe740de32bb0fb7a5213731ff5f26ea6718fca3", "url": "https://git.kernel.org/stable/c/cbe740de32bb0fb7a5213731ff5f26ea6718fca3" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-04T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-52983", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nblock, bfq: fix uaf for bfqq in bic_set_bfqq()\nAfter commit 64dc8c732f5c (\"block, bfq: fix possible uaf for 'bfqq->bic'\"),\nbic->bfqq will be accessed in bic_set_bfqq(), however, in some context\nbic->bfqq will be freed, and bic_set_bfqq() is called with the freed\nbic->bfqq.\nFix the problem by always freeing bfqq after bic_set_bfqq().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-52983" } ], "release_date": "2025-03-27T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38157", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k_htc: Abort software beacon handling if disabled\n\nA malicious USB device can send a WMI_SWBA_EVENTID event from an\nath9k_htc-managed device before beaconing has been enabled. This causes\na device-by-zero error in the driver, leading to either a crash or an\nout of bounds read.\n\nPrevent this by aborting the handling in ath9k_htc_swba() if beacons are\nnot enabled.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38157" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0281c19074976ec48f0078d50530b406ddae75bc", "url": "https://git.kernel.org/stable/c/0281c19074976ec48f0078d50530b406ddae75bc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/40471b23147c86ea3ed97faee79937c618250bd0", "url": "https://git.kernel.org/stable/c/40471b23147c86ea3ed97faee79937c618250bd0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5482ef9875eaa43f0435e14570e1193823de857e", "url": "https://git.kernel.org/stable/c/5482ef9875eaa43f0435e14570e1193823de857e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5a85c21f812e02cb00ca07007d88acdd42d08c46", "url": "https://git.kernel.org/stable/c/5a85c21f812e02cb00ca07007d88acdd42d08c46" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7ee3fb6258da8c890a51b514f60d7570dc703605", "url": "https://git.kernel.org/stable/c/7ee3fb6258da8c890a51b514f60d7570dc703605" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ac4e317a95a1092b5da5b9918b7118759342641c", "url": "https://git.kernel.org/stable/c/ac4e317a95a1092b5da5b9918b7118759342641c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e5ce9df1d68094d37360dbd9b09289d42fa21e54", "url": "https://git.kernel.org/stable/c/e5ce9df1d68094d37360dbd9b09289d42fa21e54" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ee5ee646385f5846dcbc881389f3c44a197c402a", "url": "https://git.kernel.org/stable/c/ee5ee646385f5846dcbc881389f3c44a197c402a" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40141", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: ISO: Fix possible UAF on iso_conn_free\nThis attempt to fix similar issue to sco_conn_free where if the\nconn->sk is not set to NULL may lead to UAF on iso_conn_free.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40141" } ], "release_date": "2025-11-12T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-50329", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq\n\nCommit 64dc8c732f5c (\"block, bfq: fix possible uaf for 'bfqq->bic'\")\nwill access 'bic->bfqq' in bic_set_bfqq(), however, bfq_exit_icq_bfqq()\ncan free bfqq first, and then call bic_set_bfqq(), which will cause uaf.\n\nFix the problem by moving bfq_exit_bfqq() behind bic_set_bfqq().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-50329" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1425f1bb5df5239021fd09ebc2a5e8070e705d36", "url": "https://git.kernel.org/stable/c/1425f1bb5df5239021fd09ebc2a5e8070e705d36" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1ed959fef5b1c6f1a7a3fbea543698c30ebd6678", "url": "https://git.kernel.org/stable/c/1ed959fef5b1c6f1a7a3fbea543698c30ebd6678" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/246cf66e300b76099b5dbd3fdd39e9a5dbc53f02", "url": "https://git.kernel.org/stable/c/246cf66e300b76099b5dbd3fdd39e9a5dbc53f02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7949b0df3dd9f4817ed4a4e989fa9ee81df6205f", "url": "https://git.kernel.org/stable/c/7949b0df3dd9f4817ed4a4e989fa9ee81df6205f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cfe5b38c37720313eff0dec5517442c7ab3c9a20", "url": "https://git.kernel.org/stable/c/cfe5b38c37720313eff0dec5517442c7ab3c9a20" } ], "release_date": "2025-09-15T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-54102", "cwe": { "id": "CWE-120", "name": "Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nscsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow\nA static code analysis tool flagged the possibility of buffer overflow when\nusing copy_from_user() for a debugfs entry.\nCurrently, it is possible that copy_from_user() copies more bytes than what\nwould fit in the mybuf char array. Add a min() restriction check between\nsizeof(mybuf) - 1 and nbytes passed from the userspace buffer to protect\nagainst buffer overflow.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54102" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38574", "cwe": { "id": "CWE-908", "name": "Use of Uninitialized Resource" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npptp: ensure minimal skb length in pptp_xmit()\n\nCommit aabc6596ffb3 (\"net: ppp: Add bound checking for skb data\non ppp_sync_txmung\") fixed ppp_sync_txmunge()\n\nWe need a similar fix in pptp_xmit(), otherwise we might\nread uninit data as reported by syzbot.\n\nBUG: KMSAN: uninit-value in pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193\n pptp_xmit+0xc34/0x2720 drivers/net/ppp/pptp.c:193\n ppp_channel_bridge_input drivers/net/ppp/ppp_generic.c:2290 [inline]\n ppp_input+0x1d6/0xe60 drivers/net/ppp/ppp_generic.c:2314\n pppoe_rcv_core+0x1e8/0x760 drivers/net/ppp/pppoe.c:379\n sk_backlog_rcv+0x142/0x420 include/net/sock.h:1148\n __release_sock+0x1d3/0x330 net/core/sock.c:3213\n release_sock+0x6b/0x270 net/core/sock.c:3767\n pppoe_sendmsg+0x15d/0xcb0 drivers/net/ppp/pppoe.c:904\n sock_sendmsg_nosec net/socket.c:712 [inline]\n __sock_sendmsg+0x330/0x3d0 net/socket.c:727\n ____sys_sendmsg+0x893/0xd80 net/socket.c:2566\n ___sys_sendmsg+0x271/0x3b0 net/socket.c:2620\n __sys_sendmmsg+0x2d9/0x7c0 net/socket.c:2709", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38574" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a04db0fd75cb6034fc27a56b67b3b8b9022a98c", "url": "https://git.kernel.org/stable/c/1a04db0fd75cb6034fc27a56b67b3b8b9022a98c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/26672f1679b143aa34fca0b6046b7fd0c184770d", "url": "https://git.kernel.org/stable/c/26672f1679b143aa34fca0b6046b7fd0c184770d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5005d24377378a20e5c0e53052fc4ebdcdcbc611", "url": "https://git.kernel.org/stable/c/5005d24377378a20e5c0e53052fc4ebdcdcbc611" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/504cc4ab91073d2ac7404ad146139f86ecee7193", "url": "https://git.kernel.org/stable/c/504cc4ab91073d2ac7404ad146139f86ecee7193" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5de7513f38f3c19c0610294ee478242bea356f8c", "url": "https://git.kernel.org/stable/c/5de7513f38f3c19c0610294ee478242bea356f8c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/97b8c5d322c5c0038cac4bc56fdbe237d0be426f", "url": "https://git.kernel.org/stable/c/97b8c5d322c5c0038cac4bc56fdbe237d0be426f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b7dcda76fd0615c0599c89f36873a6cd48e02dbb", "url": "https://git.kernel.org/stable/c/b7dcda76fd0615c0599c89f36873a6cd48e02dbb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de9c4861fb42f0cd72da844c3c34f692d5895b7b", "url": "https://git.kernel.org/stable/c/de9c4861fb42f0cd72da844c3c34f692d5895b7b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ea99b88b1999ebcb24d5d3a6b7910030f40d3bba", "url": "https://git.kernel.org/stable/c/ea99b88b1999ebcb24d5d3a6b7910030f40d3bba" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-08-19T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38102", "cwe": { "id": "CWE-362", "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nVMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify\n\nDuring our test, it is found that a warning can be trigger in try_grab_folio\nas follow:\n\n ------------[ cut here ]------------\n WARNING: CPU: 0 PID: 1678 at mm/gup.c:147 try_grab_folio+0x106/0x130\n Modules linked in:\n CPU: 0 UID: 0 PID: 1678 Comm: syz.3.31 Not tainted 6.15.0-rc5 #163 PREEMPT(undef)\n RIP: 0010:try_grab_folio+0x106/0x130\n Call Trace:\n \n follow_huge_pmd+0x240/0x8e0\n follow_pmd_mask.constprop.0.isra.0+0x40b/0x5c0\n follow_pud_mask.constprop.0.isra.0+0x14a/0x170\n follow_page_mask+0x1c2/0x1f0\n __get_user_pages+0x176/0x950\n __gup_longterm_locked+0x15b/0x1060\n ? gup_fast+0x120/0x1f0\n gup_fast_fallback+0x17e/0x230\n get_user_pages_fast+0x5f/0x80\n vmci_host_unlocked_ioctl+0x21c/0xf80\n RIP: 0033:0x54d2cd\n ---[ end trace 0000000000000000 ]---\n\nDigging into the source, context->notify_page may init by get_user_pages_fast\nand can be seen in vmci_ctx_unset_notify which will try to put_page. However\nget_user_pages_fast is not finished here and lead to following\ntry_grab_folio warning. The race condition is shown as follow:\n\ncpu0\t\t\tcpu1\nvmci_host_do_set_notify\nvmci_host_setup_notify\nget_user_pages_fast(uva, 1, FOLL_WRITE, &context->notify_page);\nlockless_pages_from_mm\ngup_pgd_range\ngup_huge_pmd // update &context->notify_page\n\t\t\tvmci_host_do_set_notify\n\t\t\tvmci_ctx_unset_notify\n\t\t\tnotify_page = context->notify_page;\n\t\t\tif (notify_page)\n\t\t\tput_page(notify_page);\t// page is freed\n__gup_longterm_locked\n__get_user_pages\nfollow_trans_huge_pmd\ntry_grab_folio // warn here\n\nTo slove this, use local variable page to make notify_page can be seen\nafter finish get_user_pages_fast.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38102" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/00ddc7dad55b7bbb78df80d6e174d0c4764dea0c", "url": "https://git.kernel.org/stable/c/00ddc7dad55b7bbb78df80d6e174d0c4764dea0c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1bd6406fb5f36c2bb1e96e27d4c3e9f4d09edde4", "url": "https://git.kernel.org/stable/c/1bd6406fb5f36c2bb1e96e27d4c3e9f4d09edde4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/468aec888f838ce5174b96e0cb4396790d6f60ca", "url": "https://git.kernel.org/stable/c/468aec888f838ce5174b96e0cb4396790d6f60ca" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/58a90db70aa6616411e5f69d1982d9b1dd97d774", "url": "https://git.kernel.org/stable/c/58a90db70aa6616411e5f69d1982d9b1dd97d774" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6e3af836805ed1d7a699f76ec798626198917aa4", "url": "https://git.kernel.org/stable/c/6e3af836805ed1d7a699f76ec798626198917aa4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/74095bbbb19ca74a0368d857603a2438c88ca86c", "url": "https://git.kernel.org/stable/c/74095bbbb19ca74a0368d857603a2438c88ca86c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/75b5313c80c39a26d27cbb602f968a05576c36f9", "url": "https://git.kernel.org/stable/c/75b5313c80c39a26d27cbb602f968a05576c36f9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b4209e4b778e4e57d0636e1c9fc07a924dbc6043", "url": "https://git.kernel.org/stable/c/b4209e4b778e4e57d0636e1c9fc07a924dbc6043" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-54015", "cwe": { "id": "CWE-364", "name": "Signal Handler Race Condition" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nnet/mlx5: Devcom, fix error flow in mlx5_devcom_register_device\nIn case devcom allocation is failed, mlx5 is always freeing the priv.\nHowever, this priv might have been allocated by a different thread,\nand freeing it might lead to use-after-free bugs.\nFix it by freeing the priv only in case it was allocated by the\nrunning thread.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54015" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-68325", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: sch_cake: Fix incorrect qlen reduction in cake_drop\n\nIn cake_drop(), qdisc_tree_reduce_backlog() is used to update the qlen\nand backlog of the qdisc hierarchy. Its caller, cake_enqueue(), assumes\nthat the parent qdisc will enqueue the current packet. However, this\nassumption breaks when cake_enqueue() returns NET_XMIT_CN: the parent\nqdisc stops enqueuing current packet, leaving the tree qlen/backlog\naccounting inconsistent. This mismatch can lead to a NULL dereference\n(e.g., when the parent Qdisc is qfq_qdisc).\n\nThis patch computes the qlen/backlog delta in a more robust way by\nobserving the difference before and after the series of cake_drop()\ncalls, and then compensates the qdisc tree accounting if cake_enqueue()\nreturns NET_XMIT_CN.\n\nTo ensure correct compensation when ACK thinning is enabled, a new\nvariable is introduced to keep qlen unchanged.", "title": "Vulnerability description" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-68325" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0b6216f9b3d1c33c76f74511026e5de5385ee520", "url": "https://git.kernel.org/stable/c/0b6216f9b3d1c33c76f74511026e5de5385ee520" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/38abf6e931b169ea88d7529b49096f53a5dcf8fe", "url": "https://git.kernel.org/stable/c/38abf6e931b169ea88d7529b49096f53a5dcf8fe" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3ed6c458530a547ed0c9ea0b02b19bab620be88b", "url": "https://git.kernel.org/stable/c/3ed6c458530a547ed0c9ea0b02b19bab620be88b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/529c284cc2815c8350860e9a31722050fe7117cb", "url": "https://git.kernel.org/stable/c/529c284cc2815c8350860e9a31722050fe7117cb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9fefc78f7f02d71810776fdeb119a05a946a27cc", "url": "https://git.kernel.org/stable/c/9fefc78f7f02d71810776fdeb119a05a946a27cc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3f4e3de41a3f115db35276c6b186ccbc913934a", "url": "https://git.kernel.org/stable/c/a3f4e3de41a3f115db35276c6b186ccbc913934a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d01f0e072dadb02fe10f436b940dd957aff0d7d4", "url": "https://git.kernel.org/stable/c/d01f0e072dadb02fe10f436b940dd957aff0d7d4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fcb91be52eb6e92e00b533ebd7c77fecada537e1", "url": "https://git.kernel.org/stable/c/fcb91be52eb6e92e00b533ebd7c77fecada537e1" } ], "release_date": "2025-12-18T15:16:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38118", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete\n\nThis reworks MGMT_OP_REMOVE_ADV_MONITOR to not use mgmt_pending_add to\navoid crashes like bellow:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_complete+0xe5/0x540 net/bluetooth/mgmt.c:5406\nRead of size 8 at addr ffff88801c53f318 by task kworker/u5:5/5341\n\nCPU: 0 UID: 0 PID: 5341 Comm: kworker/u5:5 Not tainted 6.15.0-syzkaller-10402-g4cb6c8af8591 #0 PREEMPT(full)\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n \n dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:408 [inline]\n print_report+0xd2/0x2b0 mm/kasan/report.c:521\n kasan_report+0x118/0x150 mm/kasan/report.c:634\n mgmt_remove_adv_monitor_complete+0xe5/0x540 net/bluetooth/mgmt.c:5406\n hci_cmd_sync_work+0x261/0x3a0 net/bluetooth/hci_sync.c:334\n process_one_work kernel/workqueue.c:3238 [inline]\n process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3321\n worker_thread+0x8a0/0xda0 kernel/workqueue.c:3402\n kthread+0x711/0x8a0 kernel/kthread.c:464\n ret_from_fork+0x3fc/0x770 arch/x86/kernel/process.c:148\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245\n \n\nAllocated by task 5987:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n poison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:394\n kasan_kmalloc include/linux/kasan.h:260 [inline]\n __kmalloc_cache_noprof+0x230/0x3d0 mm/slub.c:4358\n kmalloc_noprof include/linux/slab.h:905 [inline]\n kzalloc_noprof include/linux/slab.h:1039 [inline]\n mgmt_pending_new+0x65/0x240 net/bluetooth/mgmt_util.c:252\n mgmt_pending_add+0x34/0x120 net/bluetooth/mgmt_util.c:279\n remove_adv_monitor+0x103/0x1b0 net/bluetooth/mgmt.c:5454\n hci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719\n hci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839\n sock_sendmsg_nosec net/socket.c:712 [inline]\n __sock_sendmsg+0x219/0x270 net/socket.c:727\n sock_write_iter+0x258/0x330 net/socket.c:1131\n new_sync_write fs/read_write.c:593 [inline]\n vfs_write+0x548/0xa90 fs/read_write.c:686\n ksys_write+0x145/0x250 fs/read_write.c:738\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nFreed by task 5989:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3e/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:576\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x62/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2380 [inline]\n slab_free mm/slub.c:4642 [inline]\n kfree+0x18e/0x440 mm/slub.c:4841\n mgmt_pending_foreach+0xc9/0x120 net/bluetooth/mgmt_util.c:242\n mgmt_index_removed+0x10d/0x2f0 net/bluetooth/mgmt.c:9366\n hci_sock_bind+0xbe9/0x1000 net/bluetooth/hci_sock.c:1314\n __sys_bind_socket net/socket.c:1810 [inline]\n __sys_bind+0x2c3/0x3e0 net/socket.c:1841\n __do_sys_bind net/socket.c:1846 [inline]\n __se_sys_bind net/socket.c:1844 [inline]\n __x64_sys_bind+0x7a/0x90 net/socket.c:1844\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xfa/0x3b0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38118" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/32aa2fbe319f33b0318ec6f4fceb63879771a286", "url": "https://git.kernel.org/stable/c/32aa2fbe319f33b0318ec6f4fceb63879771a286" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3c9aba9cbdf163e2654be9f82d43ff8a04273962", "url": "https://git.kernel.org/stable/c/3c9aba9cbdf163e2654be9f82d43ff8a04273962" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9df3e5e7f7e4653fd9802878cedc36defc5ef42d", "url": "https://git.kernel.org/stable/c/9df3e5e7f7e4653fd9802878cedc36defc5ef42d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9f66b6531c2b4e996bb61720ee94adb4b2e8d1be", "url": "https://git.kernel.org/stable/c/9f66b6531c2b4e996bb61720ee94adb4b2e8d1be" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c", "url": "https://git.kernel.org/stable/c/e6ed54e86aae9e4f7286ce8d5c73780f91b48d1c" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-50865", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\ntcp: fix a signed-integer-overflow bug in tcp_add_backlog()\nThe type of sk_rcvbuf and sk_sndbuf in struct sock is int, and\nin tcp_add_backlog(), the variable limit is caculated by adding\nsk_rcvbuf, sk_sndbuf and 64 * 1024, it may exceed the max value\nof int and overflow. This patch reduces the limit budget by\nhalving the sndbuf to solve this issue since ACK packets are much\nsmaller than the payload.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-50865" } ], "release_date": "2025-12-30T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38395", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nregulator: gpio: Fix the out-of-bounds access to drvdata::gpiods\n\ndrvdata::gpiods is supposed to hold an array of 'gpio_desc' pointers. But\nthe memory is allocated for only one pointer. This will lead to\nout-of-bounds access later in the code if 'config::ngpios' is > 1. So\nfix the code to allocate enough memory to hold 'config::ngpios' of GPIO\ndescriptors.\n\nWhile at it, also move the check for memory allocation failure to be below\nthe allocation to make it more readable.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38395" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/24418bc77a66cb5be9f5a837431ba3674ed8b52f", "url": "https://git.kernel.org/stable/c/24418bc77a66cb5be9f5a837431ba3674ed8b52f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3830ab97cda9599872625cc0dc7b00160193634f", "url": "https://git.kernel.org/stable/c/3830ab97cda9599872625cc0dc7b00160193634f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/56738cbac3bbb1d39a71a07f57484dec1db8b239", "url": "https://git.kernel.org/stable/c/56738cbac3bbb1d39a71a07f57484dec1db8b239" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9fe71972869faed1f8f9b3beb9040f9c1b300c79", "url": "https://git.kernel.org/stable/c/9fe71972869faed1f8f9b3beb9040f9c1b300c79" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a", "url": "https://git.kernel.org/stable/c/a1e12fac214d4f49fcb186dbdf9c5592e7fa0a7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3cd5ae7befbac849e0e0529c94ca04e8093cfd2", "url": "https://git.kernel.org/stable/c/a3cd5ae7befbac849e0e0529c94ca04e8093cfd2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3", "url": "https://git.kernel.org/stable/c/c9764fd88bc744592b0604ccb6b6fc1a5f76b4e3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e4d19e5d71b217940e33f2ef6c6962b7b68c5606", "url": "https://git.kernel.org/stable/c/e4d19e5d71b217940e33f2ef6c6962b7b68c5606" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39863", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work\n\nThe brcmf_btcoex_detach() only shuts down the btcoex timer, if the\nflag timer_on is false. However, the brcmf_btcoex_timerfunc(), which\nruns as timer handler, sets timer_on to false. This creates critical\nrace conditions:\n\n1.If brcmf_btcoex_detach() is called while brcmf_btcoex_timerfunc()\nis executing, it may observe timer_on as false and skip the call to\ntimer_shutdown_sync().\n\n2.The brcmf_btcoex_timerfunc() may then reschedule the brcmf_btcoex_info\nworker after the cancel_work_sync() has been executed, resulting in\nuse-after-free bugs.\n\nThe use-after-free bugs occur in two distinct scenarios, depending on\nthe timing of when the brcmf_btcoex_info struct is freed relative to\nthe execution of its worker thread.\n\nScenario 1: Freed before the worker is scheduled\n\nThe brcmf_btcoex_info is deallocated before the worker is scheduled.\nA race condition can occur when schedule_work(&bt_local->work) is\ncalled after the target memory has been freed. The sequence of events\nis detailed below:\n\nCPU0 | CPU1\nbrcmf_btcoex_detach | brcmf_btcoex_timerfunc\n | bt_local->timer_on = false;\n if (cfg->btcoex->timer_on) |\n ... |\n cancel_work_sync(); |\n ... |\n kfree(cfg->btcoex); // FREE |\n | schedule_work(&bt_local->work); // USE\n\nScenario 2: Freed after the worker is scheduled\n\nThe brcmf_btcoex_info is freed after the worker has been scheduled\nbut before or during its execution. In this case, statements within\nthe brcmf_btcoex_handler() — such as the container_of macro and\nsubsequent dereferences of the brcmf_btcoex_info object will cause\na use-after-free access. The following timeline illustrates this\nscenario:\n\nCPU0 | CPU1\nbrcmf_btcoex_detach | brcmf_btcoex_timerfunc\n | bt_local->timer_on = false;\n if (cfg->btcoex->timer_on) |\n ... |\n cancel_work_sync(); |\n ... | schedule_work(); // Reschedule\n |\n kfree(cfg->btcoex); // FREE | brcmf_btcoex_handler() // Worker\n /* | btci = container_of(....); // USE\n The kfree() above could | ...\n also occur at any point | btci-> // USE\n during the worker's execution|\n */ |\n\nTo resolve the race conditions, drop the conditional check and call\ntimer_shutdown_sync() directly. It can deactivate the timer reliably,\nregardless of its current state. Once stopped, the timer_on state is\nthen set to false.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39863" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2f6fbc8e04ca1d1d5c560be694199f847229c625", "url": "https://git.kernel.org/stable/c/2f6fbc8e04ca1d1d5c560be694199f847229c625" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3e789f8475f6c857c88de5c5bf4b24b11a477dd7", "url": "https://git.kernel.org/stable/c/3e789f8475f6c857c88de5c5bf4b24b11a477dd7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9cb83d4be0b9b697eae93d321e0da999f9cdfcfc", "url": "https://git.kernel.org/stable/c/9cb83d4be0b9b697eae93d321e0da999f9cdfcfc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f1150153c4e5940fe49ab51136343c5b4fe49d63", "url": "https://git.kernel.org/stable/c/f1150153c4e5940fe49ab51136343c5b4fe49d63" } ], "release_date": "2025-09-19T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38403", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock/vmci: Clear the vmci transport packet properly when initializing it\n\nIn vmci_transport_packet_init memset the vmci_transport_packet before\npopulating the fields to avoid any uninitialised data being left in the\nstructure.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38403" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0a01021317375b8d1895152f544421ce49299eb1", "url": "https://git.kernel.org/stable/c/0a01021317375b8d1895152f544421ce49299eb1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/19c2cc01ff9a8031398a802676ffb0f4692dd95d", "url": "https://git.kernel.org/stable/c/19c2cc01ff9a8031398a802676ffb0f4692dd95d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1c1bcb0e78230f533b4103e8cf271d17c3f469f0", "url": "https://git.kernel.org/stable/c/1c1bcb0e78230f533b4103e8cf271d17c3f469f0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/223e2288f4b8c262a864e2c03964ffac91744cd5", "url": "https://git.kernel.org/stable/c/223e2288f4b8c262a864e2c03964ffac91744cd5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2d44723a091bc853272e1a51a488a3d22b80be5e", "url": "https://git.kernel.org/stable/c/2d44723a091bc853272e1a51a488a3d22b80be5e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/75705b44e0b9aaa74f4c163d93d388bcba9e386a", "url": "https://git.kernel.org/stable/c/75705b44e0b9aaa74f4c163d93d388bcba9e386a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/94d0c326cb3ee6b0f8bd00e209550b93fcc5c839", "url": "https://git.kernel.org/stable/c/94d0c326cb3ee6b0f8bd00e209550b93fcc5c839" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e9a673153d578fd439919a24e99851b2f87ecbce", "url": "https://git.kernel.org/stable/c/e9a673153d578fd439919a24e99851b2f87ecbce" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39691", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfs/buffer: fix use-after-free when call bh_read() helper\n\nThere's issue as follows:\nBUG: KASAN: stack-out-of-bounds in end_buffer_read_sync+0xe3/0x110\nRead of size 8 at addr ffffc9000168f7f8 by task swapper/3/0\nCPU: 3 UID: 0 PID: 0 Comm: swapper/3 Not tainted 6.16.0-862.14.0.6.x86_64\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996)\nCall Trace:\n \n dump_stack_lvl+0x55/0x70\n print_address_description.constprop.0+0x2c/0x390\n print_report+0xb4/0x270\n kasan_report+0xb8/0xf0\n end_buffer_read_sync+0xe3/0x110\n end_bio_bh_io_sync+0x56/0x80\n blk_update_request+0x30a/0x720\n scsi_end_request+0x51/0x2b0\n scsi_io_completion+0xe3/0x480\n ? scsi_device_unbusy+0x11e/0x160\n blk_complete_reqs+0x7b/0x90\n handle_softirqs+0xef/0x370\n irq_exit_rcu+0xa5/0xd0\n sysvec_apic_timer_interrupt+0x6e/0x90\n \n\n Above issue happens when do ntfs3 filesystem mount, issue may happens\n as follows:\n mount IRQ\nntfs_fill_super\n read_cache_page\n do_read_cache_folio\n filemap_read_folio\n mpage_read_folio\n\t do_mpage_readpage\n\t ntfs_get_block_vbo\n\t bh_read\n\t submit_bh\n\t wait_on_buffer(bh);\n\t blk_complete_reqs\n\t\t\t\t scsi_io_completion\n\t\t\t\t scsi_end_request\n\t\t\t\t blk_update_request\n\t\t\t\t end_bio_bh_io_sync\n\t\t\t\t\t end_buffer_read_sync\n\t\t\t\t\t __end_buffer_read_notouch\n\t\t\t\t\t unlock_buffer\n\n wait_on_buffer(bh);--> return will return to caller\n\n\t\t\t\t\t put_bh\n\t\t\t\t\t --> trigger stack-out-of-bounds\nIn the mpage_read_folio() function, the stack variable 'map_bh' is\npassed to ntfs_get_block_vbo(). Once unlock_buffer() unlocks and\nwait_on_buffer() returns to continue processing, the stack variable\nis likely to be reclaimed. Consequently, during the end_buffer_read_sync()\nprocess, calling put_bh() may result in stack overrun.\n\nIf the bh is not allocated on the stack, it belongs to a folio. Freeing\na buffer head which belongs to a folio is done by drop_buffers() which\nwill fail to free buffers which are still locked. So it is safe to call\nput_bh() before __end_buffer_read_notouch().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39691" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/03b40bf5d0389ca23ae6857ee25789f0e0b47ce8", "url": "https://git.kernel.org/stable/c/03b40bf5d0389ca23ae6857ee25789f0e0b47ce8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/042cf48ecf67f72c8b3846c7fac678f472712ff3", "url": "https://git.kernel.org/stable/c/042cf48ecf67f72c8b3846c7fac678f472712ff3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3169edb8945c295cf89120fc6b2c35cfe3ad4c9e", "url": "https://git.kernel.org/stable/c/3169edb8945c295cf89120fc6b2c35cfe3ad4c9e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/70a09115da586bf662c3bae9c0c4a1b99251fad9", "url": "https://git.kernel.org/stable/c/70a09115da586bf662c3bae9c0c4a1b99251fad9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7375f22495e7cd1c5b3b5af9dcc4f6dffe34ce49", "url": "https://git.kernel.org/stable/c/7375f22495e7cd1c5b3b5af9dcc4f6dffe34ce49" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/90b5193edb323fefbee0e4e5bc39ed89dcc37719", "url": "https://git.kernel.org/stable/c/90b5193edb323fefbee0e4e5bc39ed89dcc37719" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c58c6b532b7b69537cfd9ef701c7e37cdcf79dc4", "url": "https://git.kernel.org/stable/c/c58c6b532b7b69537cfd9ef701c7e37cdcf79dc4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c5aa6ba1127307ab5dc3773eaf40d73a3423841f", "url": "https://git.kernel.org/stable/c/c5aa6ba1127307ab5dc3773eaf40d73a3423841f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-05T18:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40248", "cwe": { "id": "CWE-364", "name": "Signal Handler Race Condition" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nvsock: Ignore signal/timeout on connect() if already established\nDuring connect(), acting on a signal/timeout by disconnecting an already\nestablished socket leads to several issues:\n1. connect() invoking vsock_transport_cancel_pkt() ->\nvirtio_transport_purge_skbs() may race with sendmsg() invoking\nvirtio_transport_get_credit(). This results in a permanently elevated\n`vvs->bytes_unsent`. Which, in turn, confuses the SOCK_LINGER handling.\n2. connect() resetting a connected socket's state may race with socket\nbeing placed in a sockmap. A disconnected socket remaining in a sockmap\nbreaks sockmap's assumptions. And gives rise to WARNs.\n3. connect() transitioning SS_CONNECTED -> SS_UNCONNECTED allows for a\ntransport change/drop after TCP_ESTABLISHED. Which poses a problem for\nany simultaneous sendmsg() or connect() and may result in a\nuse-after-free/null-ptr-deref.\nDo not disconnect socket on signal/timeout. Keep the logic for unconnected\nsockets: they don't linger, can't be placed in a sockmap, are rejected by\nsendmsg().\n[1]: https://lore.kernel.org/netdev/e07fd95c-9a38-4eea-9638-133e38c2ec9b@rbox.co/\n[2]: https://lore.kernel.org/netdev/20250317-vsock-trans-signal-race-v4-0-fc8837f3f1d4@rbox.co/\n[3]: https://lore.kernel.org/netdev/60f1b7db-3099-4f6a-875e-af9f6ef194f6@rbox.co/", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40248" } ], "release_date": "2025-12-04T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53484", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nlib: cpu_rmap: Avoid use after free on rmap->obj array entries\n\nWhen calling irq_set_affinity_notifier() with NULL at the notify\nargument, it will cause freeing of the glue pointer in the\ncorresponding array entry but will leave the pointer in the array. A\nsubsequent call to free_irq_cpu_rmap() will try to free this entry again\nleading to possible use after free.\n\nFix that by setting NULL to the array entry and checking that we have\nnon-zero at the array entry when iterating over the array in\nfree_irq_cpu_rmap().\n\nThe current code does not suffer from this since there are no cases\nwhere irq_set_affinity_notifier(irq, NULL) (note the NULL passed for the\nnotify arg) is called, followed by a call to free_irq_cpu_rmap() so we\ndon't hit and issue. Subsequent patches in this series excersize this\nflow, hence the required fix.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53484" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37", "url": "https://git.kernel.org/stable/c/4e0473f1060aa49621d40a113afde24818101d37" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f", "url": "https://git.kernel.org/stable/c/67bca5f1d644f4e79b694abd8052a177de81c37f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5", "url": "https://git.kernel.org/stable/c/981f339d2905b6a92ef59358158b326493aecac5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16", "url": "https://git.kernel.org/stable/c/c6ed54dd90698dc0744d669524cc1c122ded8a16" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4", "url": "https://git.kernel.org/stable/c/c9115f49cf260d24d8b5f2d9a4b63cb31a627bb4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000", "url": "https://git.kernel.org/stable/c/cc2d2b3dbfb0ba57bc027fb7e1121250c50e4000" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48", "url": "https://git.kernel.org/stable/c/d1308bd0b24cb1d78fa2747d5fa3e055cc628a48" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289", "url": "https://git.kernel.org/stable/c/f748e15253833b771acbede14ea98f50831ac289" } ], "release_date": "2025-10-01T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38245", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\natm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().\n\nsyzbot reported a warning below during atm_dev_register(). [0]\n\nBefore creating a new device and procfs/sysfs for it, atm_dev_register()\nlooks up a duplicated device by __atm_dev_lookup(). These operations are\ndone under atm_dev_mutex.\n\nHowever, when removing a device in atm_dev_deregister(), it releases the\nmutex just after removing the device from the list that __atm_dev_lookup()\niterates over.\n\nSo, there will be a small race window where the device does not exist on\nthe device list but procfs/sysfs are still not removed, triggering the\nsplat.\n\nLet's hold the mutex until procfs/sysfs are removed in\natm_dev_deregister().\n\n[0]:\nproc_dir_entry 'atm/atmtcp:0' already registered\nWARNING: CPU: 0 PID: 5919 at fs/proc/generic.c:377 proc_register+0x455/0x5f0 fs/proc/generic.c:377\nModules linked in:\nCPU: 0 UID: 0 PID: 5919 Comm: syz-executor284 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full)\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025\nRIP: 0010:proc_register+0x455/0x5f0 fs/proc/generic.c:377\nCode: 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 a2 01 00 00 48 8b 44 24 10 48 c7 c7 20 c0 c2 8b 48 8b b0 d8 00 00 00 e8 0c 02 1c ff 90 <0f> 0b 90 90 48 c7 c7 80 f2 82 8e e8 0b de 23 09 48 8b 4c 24 28 48\nRSP: 0018:ffffc9000466fa30 EFLAGS: 00010282\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817ae248\nRDX: ffff888026280000 RSI: ffffffff817ae255 RDI: 0000000000000001\nRBP: ffff8880232bed48 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000001 R12: ffff888076ed2140\nR13: dffffc0000000000 R14: ffff888078a61340 R15: ffffed100edda444\nFS: 00007f38b3b0c6c0(0000) GS:ffff888124753000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f38b3bdf953 CR3: 0000000076d58000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n proc_create_data+0xbe/0x110 fs/proc/generic.c:585\n atm_proc_dev_register+0x112/0x1e0 net/atm/proc.c:361\n atm_dev_register+0x46d/0x890 net/atm/resources.c:113\n atmtcp_create+0x77/0x210 drivers/atm/atmtcp.c:369\n atmtcp_attach drivers/atm/atmtcp.c:403 [inline]\n atmtcp_ioctl+0x2f9/0xd60 drivers/atm/atmtcp.c:464\n do_vcc_ioctl+0x12c/0x930 net/atm/ioctl.c:159\n sock_do_ioctl+0x115/0x280 net/socket.c:1190\n sock_ioctl+0x227/0x6b0 net/socket.c:1311\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl fs/ioctl.c:893 [inline]\n __x64_sys_ioctl+0x18b/0x210 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\nRIP: 0033:0x7f38b3b74459\nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007f38b3b0c198 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\nRAX: ffffffffffffffda RBX: 00007f38b3bfe318 RCX: 00007f38b3b74459\nRDX: 0000000000000000 RSI: 0000000000006180 RDI: 0000000000000005\nRBP: 00007f38b3bfe310 R08: 65732f636f72702f R09: 65732f636f72702f\nR10: 65732f636f72702f R11: 0000000000000246 R12: 00007f38b3bcb0ac\nR13: 00007f38b3b0c1a0 R14: 0000200000000200 R15: 00007f38b3bcb03b\n ", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38245" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/26248d5d68c865b888d632162abbf8130645622c", "url": "https://git.kernel.org/stable/c/26248d5d68c865b888d632162abbf8130645622c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2a8dcee649d12f69713f2589171a1caf6d4fa439", "url": "https://git.kernel.org/stable/c/2a8dcee649d12f69713f2589171a1caf6d4fa439" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4bb1bb438134d9ee6b97cc07289dd7c569092eec", "url": "https://git.kernel.org/stable/c/4bb1bb438134d9ee6b97cc07289dd7c569092eec" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6922f1a048c090f10704bbef4a3a1e81932d2e0a", "url": "https://git.kernel.org/stable/c/6922f1a048c090f10704bbef4a3a1e81932d2e0a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a433791aeaea6e84df709e0b9584b9bbe040cd1c", "url": "https://git.kernel.org/stable/c/a433791aeaea6e84df709e0b9584b9bbe040cd1c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ae539d963a17443ec54cba8a767e4ffa318264f4", "url": "https://git.kernel.org/stable/c/ae539d963a17443ec54cba8a767e4ffa318264f4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2e40fcfe1575faaa548f87614006d3fe44c779e", "url": "https://git.kernel.org/stable/c/b2e40fcfe1575faaa548f87614006d3fe44c779e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cabed6ba92a9a8c09da02a3f20e32ecd80989896", "url": "https://git.kernel.org/stable/c/cabed6ba92a9a8c09da02a3f20e32ecd80989896" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-09T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38680", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()\n\nThe buffer length check before calling uvc_parse_format() only ensured\nthat the buffer has at least 3 bytes (buflen > 2), buf the function\naccesses buffer[3], requiring at least 4 bytes.\n\nThis can lead to an out-of-bounds read if the buffer has exactly 3 bytes.\n\nFix it by checking that the buffer has at least 4 bytes in\nuvc_parse_format().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38680" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1e269581b3aa5962fdc52757ab40da286168c087", "url": "https://git.kernel.org/stable/c/1e269581b3aa5962fdc52757ab40da286168c087" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/424980d33b3f816485513e538610168b03fab9f1", "url": "https://git.kernel.org/stable/c/424980d33b3f816485513e538610168b03fab9f1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6d4a7c0b296162354b6fc759a1475b9d57ddfaa6", "url": "https://git.kernel.org/stable/c/6d4a7c0b296162354b6fc759a1475b9d57ddfaa6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/782b6a718651eda3478b1824b37a8b3185d2740c", "url": "https://git.kernel.org/stable/c/782b6a718651eda3478b1824b37a8b3185d2740c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8343f3fe0b755925f83d60b05e92bf4396879758", "url": "https://git.kernel.org/stable/c/8343f3fe0b755925f83d60b05e92bf4396879758" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9ad554217c9b945031c73df4e8176a475e2dea57", "url": "https://git.kernel.org/stable/c/9ad554217c9b945031c73df4e8176a475e2dea57" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a97e062e4ff3dab84a2f1eb811e9eddc6699e2a9", "url": "https://git.kernel.org/stable/c/a97e062e4ff3dab84a2f1eb811e9eddc6699e2a9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cac702a439050df65272c49184aef7975fe3eff2", "url": "https://git.kernel.org/stable/c/cac702a439050df65272c49184aef7975fe3eff2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ffdd82182953df643aa63d999b6f1653d0c93778", "url": "https://git.kernel.org/stable/c/ffdd82182953df643aa63d999b6f1653d0c93778" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-04T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40277", "cwe": { "id": "CWE-190", "name": "Integer Overflow or Wraparound" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\ndrm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE\nThis data originates from userspace and is used in buffer offset\ncalculations which could potentially overflow causing an out-of-bounds\naccess.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40277" } ], "release_date": "2025-12-06T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2022-50700", "cwe": { "id": "CWE-364", "name": "Signal Handler Race Condition" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nwifi: ath10k: Delay the unmapping of the buffer\nOn WCN3990, we are seeing a rare scenario where copy engine hardware is\nsending a copy complete interrupt to the host driver while still\nprocessing the buffer that the driver has sent, this is leading into an\nSMMU fault triggering kernel panic. This is happening on copy engine\nchannel 3 (CE3) where the driver normally enqueues WMI commands to the\nfirmware. Upon receiving a copy complete interrupt, host driver will\nimmediately unmap and frees the buffer presuming that hardware has\nprocessed the buffer. In the issue case, upon receiving copy complete\ninterrupt, host driver will unmap and free the buffer but since hardware\nis still accessing the buffer (which in this case got unmapped in\nparallel), SMMU hardware will trigger an SMMU fault resulting in a\nkernel panic.\nIn order to avoid this, as a work around, add a delay before unmapping\nthe copy engine source DMA buffer. This is conditionally done for\nWCN3990 and only for the CE3 channel where issue is seen.\nBelow is the crash signature:\nwifi smmu error: kernel: [ 10.120965] arm-smmu 15000000.iommu: Unhandled\ncontext fault: fsr=0x402, iova=0x7fdfd8ac0,\nfsynr=0x500003,cbfrsynra=0xc1, cb=6 arm-smmu 15000000.iommu: Unhandled\ncontext fault:fsr=0x402, iova=0x7fe06fdc0, fsynr=0x710003,\ncbfrsynra=0xc1, cb=6 qcom-q6v5-mss 4080000.remoteproc: fatal error\nreceived: err_qdi.c:1040:EF:wlan_process:0x1:WLAN RT:0x2091:\ncmnos_thread.c:3998:Asserted in copy_engine.c:AXI_ERROR_DETECTED:2149\nremoteproc remoteproc0: crash detected in\n4080000.remoteproc: type fatal error <3> remoteproc remoteproc0:\nhandling crash #1 in 4080000.remoteproc\npc : __arm_lpae_unmap+0x500/0x514\nlr : __arm_lpae_unmap+0x4bc/0x514\nsp : ffffffc011ffb530\nx29: ffffffc011ffb590 x28: 0000000000000000\nx27: 0000000000000000 x26: 0000000000000004\nx25: 0000000000000003 x24: ffffffc011ffb890\nx23: ffffffa762ef9be0 x22: ffffffa77244ef00\nx21: 0000000000000009 x20: 00000007fff7c000\nx19: 0000000000000003 x18: 0000000000000000\nx17: 0000000000000004 x16: ffffffd7a357d9f0\nx15: 0000000000000000 x14: 00fd5d4fa7ffffff\nx13: 000000000000000e x12: 0000000000000000\nx11: 00000000ffffffff x10: 00000000fffffe00\nx9 : 000000000000017c x8 : 000000000000000c\nx7 : 0000000000000000 x6 : ffffffa762ef9000\nx5 : 0000000000000003 x4 : 0000000000000004\nx3 : 0000000000001000 x2 : 00000007fff7c000\nx1 : ffffffc011ffb890 x0 : 0000000000000000 Call trace:\n__arm_lpae_unmap+0x500/0x514\n__arm_lpae_unmap+0x4bc/0x514\n__arm_lpae_unmap+0x4bc/0x514\narm_lpae_unmap_pages+0x78/0xa4\narm_smmu_unmap_pages+0x78/0x104\n__iommu_unmap+0xc8/0x1e4\niommu_unmap_fast+0x38/0x48\n__iommu_dma_unmap+0x84/0x104\niommu_dma_free+0x34/0x50\ndma_free_attrs+0xa4/0xd0\nath10k_htt_rx_free+0xc4/0xf4 [ath10k_core] ath10k_core_stop+0x64/0x7c\n[ath10k_core]\nath10k_halt+0x11c/0x180 [ath10k_core]\nath10k_stop+0x54/0x94 [ath10k_core]\ndrv_stop+0x48/0x1c8 [mac80211]\nieee80211_do_open+0x638/0x77c [mac80211] ieee80211_open+0x48/0x5c\n[mac80211]\n__dev_open+0xb4/0x174\n__dev_change_flags+0xc4/0x1dc\ndev_change_flags+0x3c/0x7c\ndevinet_ioctl+0x2b4/0x580\ninet_ioctl+0xb0/0x1b4\nsock_do_ioctl+0x4c/0x16c\ncompat_ifreq_ioctl+0x1cc/0x35c\ncompat_sock_ioctl+0x110/0x2ac\n__arm64_compat_sys_ioctl+0xf4/0x3e0\nel0_svc_common+0xb4/0x17c\nel0_svc_compat_handler+0x2c/0x58\nel0_svc_compat+0x8/0x2c\nTested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2022-50700" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2023-53676", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()\n\nThe function lio_target_nacl_info_show() uses sprintf() in a loop to print\ndetails for every iSCSI connection in a session without checking for the\nbuffer length. With enough iSCSI connections it's possible to overflow the\nbuffer provided by configfs and corrupt the memory.\n\nThis patch replaces sprintf() with sysfs_emit_at() that checks for buffer\nboundries.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53676" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0cac6cbb9908309352a5d30c1876882771d3da50", "url": "https://git.kernel.org/stable/c/0cac6cbb9908309352a5d30c1876882771d3da50" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/114b44dddea1f8f99576de3c0e6e9059012002fc", "url": "https://git.kernel.org/stable/c/114b44dddea1f8f99576de3c0e6e9059012002fc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6", "url": "https://git.kernel.org/stable/c/2cbe6a88fbdd6e8aeab358eef61472e2de43d6f6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4738bf8b2d3635c2944b81b2a84d97b8c8b0978d", "url": "https://git.kernel.org/stable/c/4738bf8b2d3635c2944b81b2a84d97b8c8b0978d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5353df78c22623b42a71d51226d228a8413097e2", "url": "https://git.kernel.org/stable/c/5353df78c22623b42a71d51226d228a8413097e2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/801f287c93ff95582b0a2d2163f12870a2f076d4", "url": "https://git.kernel.org/stable/c/801f287c93ff95582b0a2d2163f12870a2f076d4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a", "url": "https://git.kernel.org/stable/c/bbe3ff47bf09db8956bc2eeb49d2d514d256ad2a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/df349e84c2cb0dd05d98c8e1189c26ab4b116083", "url": "https://git.kernel.org/stable/c/df349e84c2cb0dd05d98c8e1189c26ab4b116083" } ], "release_date": "2025-10-07T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53668", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nring-buffer: Fix deadloop issue on reading trace_pipe\n\nSoft lockup occurs when reading file 'trace_pipe':\n\n watchdog: BUG: soft lockup - CPU#6 stuck for 22s! [cat:4488]\n [...]\n RIP: 0010:ring_buffer_empty_cpu+0xed/0x170\n RSP: 0018:ffff88810dd6fc48 EFLAGS: 00000246\n RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff93d1aaeb\n RDX: ffff88810a280040 RSI: 0000000000000008 RDI: ffff88811164b218\n RBP: ffff88811164b218 R08: 0000000000000000 R09: ffff88815156600f\n R10: ffffed102a2acc01 R11: 0000000000000001 R12: 0000000051651901\n R13: 0000000000000000 R14: ffff888115e49500 R15: 0000000000000000\n [...]\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00007f8d853c2000 CR3: 000000010dcd8000 CR4: 00000000000006e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n __find_next_entry+0x1a8/0x4b0\n ? peek_next_entry+0x250/0x250\n ? down_write+0xa5/0x120\n ? down_write_killable+0x130/0x130\n trace_find_next_entry_inc+0x3b/0x1d0\n tracing_read_pipe+0x423/0xae0\n ? tracing_splice_read_pipe+0xcb0/0xcb0\n vfs_read+0x16b/0x490\n ksys_read+0x105/0x210\n ? __ia32_sys_pwrite64+0x200/0x200\n ? switch_fpu_return+0x108/0x220\n do_syscall_64+0x33/0x40\n entry_SYSCALL_64_after_hwframe+0x61/0xc6\n\nThrough the vmcore, I found it's because in tracing_read_pipe(),\nring_buffer_empty_cpu() found some buffer is not empty but then it\ncannot read anything due to \"rb_num_of_entries() == 0\" always true,\nThen it infinitely loop the procedure due to user buffer not been\nfilled, see following code path:\n\n tracing_read_pipe() {\n ... ...\n waitagain:\n tracing_wait_pipe() // 1. find non-empty buffer here\n trace_find_next_entry_inc() // 2. loop here try to find an entry\n __find_next_entry()\n ring_buffer_empty_cpu(); // 3. find non-empty buffer\n peek_next_entry() // 4. but peek always return NULL\n ring_buffer_peek()\n rb_buffer_peek()\n rb_get_reader_page()\n // 5. because rb_num_of_entries() == 0 always true here\n // then return NULL\n // 6. user buffer not been filled so goto 'waitgain'\n // and eventually leads to an deadloop in kernel!!!\n }\n\nBy some analyzing, I found that when resetting ringbuffer, the 'entries'\nof its pages are not all cleared (see rb_reset_cpu()). Then when reducing\nthe ringbuffer, and if some reduced pages exist dirty 'entries' data, they\nwill be added into 'cpu_buffer->overrun' (see rb_remove_pages()), which\ncause wrong 'overrun' count and eventually cause the deadloop issue.\n\nTo fix it, we need to clear every pages in rb_reset_cpu().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53668" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0a29dae5786d263016a9aceb1e56bf3fd4cc6fa0", "url": "https://git.kernel.org/stable/c/0a29dae5786d263016a9aceb1e56bf3fd4cc6fa0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/27bdd93e44cc28dd9b94893fae146b83d4f5b31e", "url": "https://git.kernel.org/stable/c/27bdd93e44cc28dd9b94893fae146b83d4f5b31e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5e68f1f3a20fe9b6bde018e353269fbfa289609c", "url": "https://git.kernel.org/stable/c/5e68f1f3a20fe9b6bde018e353269fbfa289609c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7e42907f3a7b4ce3a2d1757f6d78336984daf8f5", "url": "https://git.kernel.org/stable/c/7e42907f3a7b4ce3a2d1757f6d78336984daf8f5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8b0b63fdac6b70a45614e7d4b30e5bbb93deb007", "url": "https://git.kernel.org/stable/c/8b0b63fdac6b70a45614e7d4b30e5bbb93deb007" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a55e8a3596048c2f7b574049aeb1885b5abba1cc", "url": "https://git.kernel.org/stable/c/a55e8a3596048c2f7b574049aeb1885b5abba1cc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bb14a93bccc92766b1d9302c6bcbea17d4bce306", "url": "https://git.kernel.org/stable/c/bb14a93bccc92766b1d9302c6bcbea17d4bce306" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e84829522fc72bb43556b31575731de0440ac0dd", "url": "https://git.kernel.org/stable/c/e84829522fc72bb43556b31575731de0440ac0dd" } ], "release_date": "2025-10-07T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53259", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nVMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF\n\nThe call to get_user_pages_fast() in vmci_host_setup_notify() can return\nNULL context->notify_page causing a GPF. To avoid GPF check if\ncontext->notify_page == NULL and return error if so.\n\ngeneral protection fault, probably for non-canonical address\n 0xe0009d1000000060: 0000 [#1] PREEMPT SMP KASAN NOPTI\nKASAN: maybe wild-memory-access in range [0x0005088000000300-\n 0x0005088000000307]\nCPU: 2 PID: 26180 Comm: repro_34802241 Not tainted 6.1.0-rc4 #1\nHardware name: Red Hat KVM, BIOS 1.15.0-2.module+el8.6.0 04/01/2014\nRIP: 0010:vmci_ctx_check_signal_notify+0x91/0xe0\nCall Trace:\n \n vmci_host_unlocked_ioctl+0x362/0x1f40\n __x64_sys_ioctl+0x1a1/0x230\n do_syscall_64+0x3a/0x90\n entry_SYSCALL_64_after_hwframe+0x63/0xcd", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53259" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/055891397f530f9b1b22be38d7eca8b08382941f", "url": "https://git.kernel.org/stable/c/055891397f530f9b1b22be38d7eca8b08382941f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a726cb47fd204109c767409fa9ca15a96328f14", "url": "https://git.kernel.org/stable/c/1a726cb47fd204109c767409fa9ca15a96328f14" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/91b8e4f61f8f4594ee65368c8d89e6fdc29d3fb1", "url": "https://git.kernel.org/stable/c/91b8e4f61f8f4594ee65368c8d89e6fdc29d3fb1" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a3c89e8c69a58f62451c0a75b77fcab25979b897", "url": "https://git.kernel.org/stable/c/a3c89e8c69a58f62451c0a75b77fcab25979b897" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b4239bfb260d1e6837766c41a0b241d7670f1402", "url": "https://git.kernel.org/stable/c/b4239bfb260d1e6837766c41a0b241d7670f1402" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d4198f67e7556b1507f14f60d81a72660e5560e4", "url": "https://git.kernel.org/stable/c/d4198f67e7556b1507f14f60d81a72660e5560e4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" } ], "release_date": "2025-09-15T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38685", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbdev: Fix vmalloc out-of-bounds write in fast_imageblit\n\nThis issue triggers when a userspace program does an ioctl\nFBIOPUT_CON2FBMAP by passing console number and frame buffer number.\nIdeally this maps console to frame buffer and updates the screen if\nconsole is visible.\n\nAs part of mapping it has to do resize of console according to frame\nbuffer info. if this resize fails and returns from vc_do_resize() and\ncontinues further. At this point console and new frame buffer are mapped\nand sets display vars. Despite failure still it continue to proceed\nupdating the screen at later stages where vc_data is related to previous\nframe buffer and frame buffer info and display vars are mapped to new\nframe buffer and eventully leading to out-of-bounds write in\nfast_imageblit(). This bheviour is excepted only when fg_console is\nequal to requested console which is a visible console and updates screen\nwith invalid struct references in fbcon_putcs().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38685" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/078e62bffca4b7e72e8f3550eb063ab981c36c7a", "url": "https://git.kernel.org/stable/c/078e62bffca4b7e72e8f3550eb063ab981c36c7a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/27b118aebdd84161c8ff5ce49d9d536f2af10754", "url": "https://git.kernel.org/stable/c/27b118aebdd84161c8ff5ce49d9d536f2af10754" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4c4d7ddaf1d43780b106bedc692679f965dc5a3a", "url": "https://git.kernel.org/stable/c/4c4d7ddaf1d43780b106bedc692679f965dc5a3a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/56701bf9eeb63219e378cb7fcbd066ea4eaeeb50", "url": "https://git.kernel.org/stable/c/56701bf9eeb63219e378cb7fcbd066ea4eaeeb50" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/af0db3c1f898144846d4c172531a199bb3ca375d", "url": "https://git.kernel.org/stable/c/af0db3c1f898144846d4c172531a199bb3ca375d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cfec17721265e72e50cc69c6004fe3475cd38df2", "url": "https://git.kernel.org/stable/c/cfec17721265e72e50cc69c6004fe3475cd38df2" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ed9b8e5016230868c8d813d9179523f729fec8c6", "url": "https://git.kernel.org/stable/c/ed9b8e5016230868c8d813d9179523f729fec8c6" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-04T16:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38375", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: ensure the received length does not exceed allocated size\n\nIn xdp_linearize_page, when reading the following buffers from the ring,\nwe forget to check the received length with the true allocate size. This\ncan lead to an out-of-bound read. This commit adds that missing check.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38375" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8", "url": "https://git.kernel.org/stable/c/11f2d0e8be2b5e784ac45fa3da226492c3e506d8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73", "url": "https://git.kernel.org/stable/c/315dbdd7cdf6aa533829774caaf4d25f1fd20e73" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58", "url": "https://git.kernel.org/stable/c/6aca3dad2145e864dfe4d1060f45eb1bac75dd58" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c", "url": "https://git.kernel.org/stable/c/773e95c268b5d859f51f7547559734fd2a57660c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b", "url": "https://git.kernel.org/stable/c/80b971be4c37a4d23a7f1abc5ff33dc7733d649b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651", "url": "https://git.kernel.org/stable/c/982beb7582c193544eb9c6083937ec5ac1c9d651" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef", "url": "https://git.kernel.org/stable/c/bc68bc3563344ccdc57d1961457cdeecab8f81ef" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1", "url": "https://git.kernel.org/stable/c/ddc8649d363141fb3371dd81a73e1cb4ef8ed1e1" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T13:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40271", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nfs/proc: fix uaf in proc_readdir_de()\nPde is erased from subdir rbtree through rb_erase(), but not set the node\nto EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE()\nset the erased node to EMPTY, then pde_subdir_next() will return NULL to\navoid uaf access.\nWe found an uaf issue while using stress-ng testing, need to run testcase\ngetdent and tun in the same time. The steps of the issue is as follows:\n1) use getdent to traverse dir /proc/pid/net/dev_snmp6/, and current\npde is tun3;\n2) in the [time windows] unregister netdevice tun3 and tun2, and erase\nthem from rbtree. erase tun3 first, and then erase tun2. the\npde(tun2) will be released to slab;\n3) continue to getdent process, then pde_subdir_next() will return\npde(tun2) which is released, it will case uaf access.\nCPU 0 | CPU 1\n-------------------------------------------------------------------------\ntraverse dir /proc/pid/net/dev_snmp6/ | unregister_netdevice(tun->dev) //tun3 tun2\nsys_getdents64() |\niterate_dir() |\nproc_readdir() |\nproc_readdir_de() | snmp6_unregister_dev()\npde_get(de); | proc_remove()\nread_unlock(&proc_subdir_lock); | remove_proc_subtree()\n| write_lock(&proc_subdir_lock);\n[time window] | rb_erase(&root->subdir_node, &parent->subdir);\n| write_unlock(&proc_subdir_lock);\nread_lock(&proc_subdir_lock); |\nnext = pde_subdir_next(de); |\npde_put(de); |\nde = next; //UAF |\nrbtree of dev_snmp6\n|\npde(tun3)\n/ \\\nNULL pde(tun2)", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40271" } ], "release_date": "2025-12-06T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-68305", "cwe": { "id": "CWE-366", "name": "Race Condition within a Thread" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: hci_sock: Prevent race in socket write iter and sock bind\nThere is a potential race condition between sock bind and socket write\niter. bind may free the same cmd via mgmt_pending before write iter sends\nthe cmd, just as syzbot reported in UAF[1].\nHere we use hci_dev_lock to synchronize the two, thereby avoiding the\nUAF mentioned in [1].\n[1]\nsyzbot reported:\nBUG: KASAN: slab-use-after-free in mgmt_pending_remove+0x3b/0x210 net/bluetooth/mgmt_util.c:316\nRead of size 8 at addr ffff888077164818 by task syz.0.17/5989\nCall Trace:\nmgmt_pending_remove+0x3b/0x210 net/bluetooth/mgmt_util.c:316\nset_link_security+0x5c2/0x710 net/bluetooth/mgmt.c:1918\nhci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719\nhci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839\nsock_sendmsg_nosec net/socket.c:727 [inline]\n__sock_sendmsg+0x21c/0x270 net/socket.c:742\nsock_write_iter+0x279/0x360 net/socket.c:1195\nAllocated by task 5989:\nmgmt_pending_add+0x35/0x140 net/bluetooth/mgmt_util.c:296\nset_link_security+0x557/0x710 net/bluetooth/mgmt.c:1910\nhci_mgmt_cmd+0x9c9/0xef0 net/bluetooth/hci_sock.c:1719\nhci_sock_sendmsg+0x6ca/0xef0 net/bluetooth/hci_sock.c:1839\nsock_sendmsg_nosec net/socket.c:727 [inline]\n__sock_sendmsg+0x21c/0x270 net/socket.c:742\nsock_write_iter+0x279/0x360 net/socket.c:1195\nFreed by task 5991:\nmgmt_pending_free net/bluetooth/mgmt_util.c:311 [inline]\nmgmt_pending_foreach+0x30d/0x380 net/bluetooth/mgmt_util.c:257\nmgmt_index_removed+0x112/0x2f0 net/bluetooth/mgmt.c:9477\nhci_sock_bind+0xbe9/0x1000 net/bluetooth/hci_sock.c:1314", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-68305" } ], "release_date": "2025-12-16T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-54155", "cwe": { "id": "CWE-617", "name": "Reachable Assertion" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nnet: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail()\nSyzkaller reported the following issue:\n=======================================\nToo BIG xdp->frame_sz = 131072\nWARNING: CPU: 0 PID: 5020 at net/core/filter.c:4121\n____bpf_xdp_adjust_tail net/core/filter.c:4121 [inline]\nWARNING: CPU: 0 PID: 5020 at net/core/filter.c:4121\nbpf_xdp_adjust_tail+0x466/0xa10 net/core/filter.c:4103\n...\nCall Trace:\n\nbpf_prog_4add87e5301a4105+0x1a/0x1c\n__bpf_prog_run include/linux/filter.h:600 [inline]\nbpf_prog_run_xdp include/linux/filter.h:775 [inline]\nbpf_prog_run_generic_xdp+0x57e/0x11e0 net/core/dev.c:4721\nnetif_receive_generic_xdp net/core/dev.c:4807 [inline]\ndo_xdp_generic+0x35c/0x770 net/core/dev.c:4866\ntun_get_user+0x2340/0x3ca0 drivers/net/tun.c:1919\ntun_chr_write_iter+0xe8/0x210 drivers/net/tun.c:2043\ncall_write_iter include/linux/fs.h:1871 [inline]\nnew_sync_write fs/read_write.c:491 [inline]\nvfs_write+0x650/0xe40 fs/read_write.c:584\nksys_write+0x12f/0x250 fs/read_write.c:637\ndo_syscall_x64 arch/x86/entry/common.c:50 [inline]\ndo_syscall_64+0x38/0xb0 arch/x86/entry/common.c:80\nentry_SYSCALL_64_after_hwframe+0x63/0xcd\nxdp->frame_sz > PAGE_SIZE check was introduced in commit c8741e2bfe87\n(\"xdp: Allow bpf_xdp_adjust_tail() to grow packet size\"). But Jesper\nDangaard Brouer noted that after introducing the\nxdp_init_buff() which all XDP driver use - it's safe to remove this\ncheck. The original intend was to catch cases where XDP drivers have\nnot been updated to use xdp.frame_sz, but that is not longer a concern\n(since xdp_init_buff).\nRunning the initial syzkaller repro it was discovered that the\ncontiguous physical memory allocation is used for both xdp paths in\ntun_get_user(), e.g. tun_build_skb() and tun_alloc_skb(). It was also\nstated by Jesper Dangaard Brouer that XDP can\nwork on higher order pages, as long as this is contiguous physical\nmemory (e.g. a page).", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-54155" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-38004", "cwe": { "id": "CWE-125", "name": "Out-of-bounds Read" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: bcm: add locking for bcm_op runtime updates\n\nThe CAN broadcast manager (CAN BCM) can send a sequence of CAN frames via\nhrtimer. The content and also the length of the sequence can be changed\nresp reduced at runtime where the 'currframe' counter is then set to zero.\n\nAlthough this appeared to be a safe operation the updates of 'currframe'\ncan be triggered from user space and hrtimer context in bcm_can_tx().\nAnderson Nascimento created a proof of concept that triggered a KASAN\nslab-out-of-bounds read access which can be prevented with a spin_lock_bh.\n\nAt the rework of bcm_can_tx() the 'count' variable has been moved into\nthe protected section as this variable can be modified from both contexts\ntoo.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38004" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/2a437b86ac5a9893c902f30ef66815bf13587bf6", "url": "https://git.kernel.org/stable/c/2a437b86ac5a9893c902f30ef66815bf13587bf6" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7595de7bc56e0e52b74e56c90f7e247bf626d628", "url": "https://git.kernel.org/stable/c/7595de7bc56e0e52b74e56c90f7e247bf626d628" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/76c84c3728178b2d38d5604e399dfe8b0752645e", "url": "https://git.kernel.org/stable/c/76c84c3728178b2d38d5604e399dfe8b0752645e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/8f1c022541bf5a923c8d6fa483112c15250f30a4", "url": "https://git.kernel.org/stable/c/8f1c022541bf5a923c8d6fa483112c15250f30a4" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7", "url": "https://git.kernel.org/stable/c/c2aba69d0c36a496ab4f2e81e9c2b271f2693fd7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c4e8a172501e677ebd8ea9d9161d97dc4df56fbd", "url": "https://git.kernel.org/stable/c/c4e8a172501e677ebd8ea9d9161d97dc4df56fbd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/cc55dd28c20a6611e30596019b3b2f636819a4c0", "url": "https://git.kernel.org/stable/c/cc55dd28c20a6611e30596019b3b2f636819a4c0" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/fbd8fdc2b218e979cfe422b139b8f74c12419d1f", "url": "https://git.kernel.org/stable/c/fbd8fdc2b218e979cfe422b139b8f74c12419d1f" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-06-08T11:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53762", "cwe": { "id": "CWE-825", "name": "Expired Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: hci_sync: Fix UAF in hci_disconnect_all_sync\nUse-after-free can occur in hci_disconnect_all_sync if a connection is\ndeleted by concurrent processing of a controller event.\nTo prevent this the code now tries to iterate over the list backwards\nto ensure the links are cleanup before its parents, also it no longer\nrelies on a cursor, instead it always uses the last element since\nhci_abort_conn_sync is guaranteed to call hci_conn_del.\nUAF crash log:\n==================================================================\nBUG: KASAN: slab-use-after-free in hci_set_powered_sync\n(net/bluetooth/hci_sync.c:5424) [bluetooth]\nRead of size 8 at addr ffff888009d9c000 by task kworker/u9:0/124\nCPU: 0 PID: 124 Comm: kworker/u9:0 Tainted: G W\n6.5.0-rc1+ #10\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS\n1.16.2-1.fc38 04/01/2014\nWorkqueue: hci0 hci_cmd_sync_work [bluetooth]\nCall Trace:\n\ndump_stack_lvl+0x5b/0x90\nprint_report+0xcf/0x670\n? __virt_addr_valid+0xdd/0x160\n? hci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\nkasan_report+0xa6/0xe0\n? hci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\n? __pfx_set_powered_sync+0x10/0x10 [bluetooth]\nhci_set_powered_sync+0x2c9/0x4a0 [bluetooth]\n? __pfx_hci_set_powered_sync+0x10/0x10 [bluetooth]\n? __pfx_lock_release+0x10/0x10\n? __pfx_set_powered_sync+0x10/0x10 [bluetooth]\nhci_cmd_sync_work+0x137/0x220 [bluetooth]\nprocess_one_work+0x526/0x9d0\n? __pfx_process_one_work+0x10/0x10\n? __pfx_do_raw_spin_lock+0x10/0x10\n? mark_held_locks+0x1a/0x90\nworker_thread+0x92/0x630\n? __pfx_worker_thread+0x10/0x10\nkthread+0x196/0x1e0\n? __pfx_kthread+0x10/0x10\nret_from_fork+0x2c/0x50\n\nAllocated by task 1782:\nkasan_save_stack+0x33/0x60\nkasan_set_track+0x25/0x30\n__kasan_kmalloc+0x8f/0xa0\nhci_conn_add+0xa5/0xa80 [bluetooth]\nhci_bind_cis+0x881/0x9b0 [bluetooth]\niso_connect_cis+0x121/0x520 [bluetooth]\niso_sock_connect+0x3f6/0x790 [bluetooth]\n__sys_connect+0x109/0x130\n__x64_sys_connect+0x40/0x50\ndo_syscall_64+0x60/0x90\nentry_SYSCALL_64_after_hwframe+0x6e/0xd8\nFreed by task 695:\nkasan_save_stack+0x33/0x60\nkasan_set_track+0x25/0x30\nkasan_save_free_info+0x2b/0x50\n__kasan_slab_free+0x10a/0x180\n__kmem_cache_free+0x14d/0x2e0\ndevice_release+0x5d/0xf0\nkobject_put+0xdf/0x270\nhci_disconn_complete_evt+0x274/0x3a0 [bluetooth]\nhci_event_packet+0x579/0x7e0 [bluetooth]\nhci_rx_work+0x287/0xaa0 [bluetooth]\nprocess_one_work+0x526/0x9d0\nworker_thread+0x92/0x630\nkthread+0x196/0x1e0\nret_from_fork+0x2c/0x50\n==================================================================", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53762" } ], "release_date": "2025-12-08T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38129", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\npage_pool: Fix use-after-free in page_pool_recycle_in_ring\n\nsyzbot reported a uaf in page_pool_recycle_in_ring:\n\nBUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 kernel/locking/lockdep.c:5862\nRead of size 8 at addr ffff8880286045a0 by task syz.0.284/6943\n\nCPU: 0 UID: 0 PID: 6943 Comm: syz.0.284 Not tainted 6.13.0-rc3-syzkaller-gdfa94ce54f41 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nCall Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n lock_release+0x151/0xa30 kernel/locking/lockdep.c:5862\n __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:165 [inline]\n _raw_spin_unlock_bh+0x1b/0x40 kernel/locking/spinlock.c:210\n spin_unlock_bh include/linux/spinlock.h:396 [inline]\n ptr_ring_produce_bh include/linux/ptr_ring.h:164 [inline]\n page_pool_recycle_in_ring net/core/page_pool.c:707 [inline]\n page_pool_put_unrefed_netmem+0x748/0xb00 net/core/page_pool.c:826\n page_pool_put_netmem include/net/page_pool/helpers.h:323 [inline]\n page_pool_put_full_netmem include/net/page_pool/helpers.h:353 [inline]\n napi_pp_put_page+0x149/0x2b0 net/core/skbuff.c:1036\n skb_pp_recycle net/core/skbuff.c:1047 [inline]\n skb_free_head net/core/skbuff.c:1094 [inline]\n skb_release_data+0x6c4/0x8a0 net/core/skbuff.c:1125\n skb_release_all net/core/skbuff.c:1190 [inline]\n __kfree_skb net/core/skbuff.c:1204 [inline]\n sk_skb_reason_drop+0x1c9/0x380 net/core/skbuff.c:1242\n kfree_skb_reason include/linux/skbuff.h:1263 [inline]\n __skb_queue_purge_reason include/linux/skbuff.h:3343 [inline]\n\nroot cause is:\n\npage_pool_recycle_in_ring\n ptr_ring_produce\n spin_lock(&r->producer_lock);\n WRITE_ONCE(r->queue[r->producer++], ptr)\n //recycle last page to pool\n\t\t\t\tpage_pool_release\n\t\t\t\t page_pool_scrub\n\t\t\t\t page_pool_empty_ring\n\t\t\t\t ptr_ring_consume\n\t\t\t\t page_pool_return_page //release all page\n\t\t\t\t __page_pool_destroy\n\t\t\t\t free_percpu(pool->recycle_stats);\n\t\t\t\t free(pool) //free\n\n spin_unlock(&r->producer_lock); //pool->ring uaf read\n recycle_stat_inc(pool, ring);\n\npage_pool can be free while page pool recycle the last page in ring.\nAdd producer-lock barrier to page_pool_release to prevent the page\npool from being free before all pages have been recycled.\n\nrecycle_stat_inc() is empty when CONFIG_PAGE_POOL_STATS is not\nenabled, which will trigger Wempty-body build warning. Add definition\nfor pool stat macro to fix warning.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38129" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/1a8c0b61d4cb55c5440583ec9e7f86a730369e32", "url": "https://git.kernel.org/stable/c/1a8c0b61d4cb55c5440583ec9e7f86a730369e32" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/271683bb2cf32e5126c592b5d5e6a756fa374fd9", "url": "https://git.kernel.org/stable/c/271683bb2cf32e5126c592b5d5e6a756fa374fd9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4914c0a166540e534a0c1d43affd329d95fb56fd", "url": "https://git.kernel.org/stable/c/4914c0a166540e534a0c1d43affd329d95fb56fd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4ab8c0f8905c9c4d05e7f437e65a9a365573ff02", "url": "https://git.kernel.org/stable/c/4ab8c0f8905c9c4d05e7f437e65a9a365573ff02" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d69f28ef7cdafdcf37ee310f38b1399e7d05f9a8", "url": "https://git.kernel.org/stable/c/d69f28ef7cdafdcf37ee310f38b1399e7d05f9a8" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/e869a85acc2e60dc554579b910826a4919d8cd98", "url": "https://git.kernel.org/stable/c/e869a85acc2e60dc554579b910826a4919d8cd98" } ], "release_date": "2025-07-03T09:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38425", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: tegra: check msg length in SMBUS block read\n\nFor SMBUS block read, do not continue to read if the message length\npassed from the device is '0' or greater than the maximum allowed bytes.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38425" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/3f03f77ce688d02da284174e1884b6065d6159bd", "url": "https://git.kernel.org/stable/c/3f03f77ce688d02da284174e1884b6065d6159bd" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/75a864f21ceeb8c1e8ce1b7589174fec2c3a039e", "url": "https://git.kernel.org/stable/c/75a864f21ceeb8c1e8ce1b7589174fec2c3a039e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/a6e04f05ce0b070ab39d5775580e65c7d943da0b", "url": "https://git.kernel.org/stable/c/a6e04f05ce0b070ab39d5775580e65c7d943da0b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/be5f6a65509cd5675362f15eb0440fb28b0f9d64", "url": "https://git.kernel.org/stable/c/be5f6a65509cd5675362f15eb0440fb28b0f9d64" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c39d1a9ae4ad66afcecab124d7789722bfe909fa", "url": "https://git.kernel.org/stable/c/c39d1a9ae4ad66afcecab124d7789722bfe909fa" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-25T15:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53996", "cwe": { "id": "CWE-805", "name": "Buffer Access with Incorrect Length Value" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nx86/sev: Make enc_dec_hypercall() accept a size instead of npages\nenc_dec_hypercall() accepted a page count instead of a size, which\nforced its callers to round up. As a result, non-page aligned\nvaddrs caused pages to be spuriously marked as decrypted via the\nencryption status hypercall, which in turn caused consistent\ncorruption of pages during live migration. Live migration requires\naccurate encryption status information to avoid migrating pages\nfrom the wrong perspective.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53996" } ], "release_date": "2025-12-24T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2025-39766", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit\n\nThe following setup can trigger a WARNING in htb_activate due to\nthe condition: !cl->leaf.q->q.qlen\n\ntc qdisc del dev lo root\ntc qdisc add dev lo root handle 1: htb default 1\ntc class add dev lo parent 1: classid 1:1 \\\n htb rate 64bit\ntc qdisc add dev lo parent 1:1 handle f: \\\n cake memlimit 1b\nping -I lo -f -c1 -s64 -W0.001 127.0.0.1\n\nThis is because the low memlimit leads to a low buffer_limit, which\ncauses packet dropping. However, cake_enqueue still returns\nNET_XMIT_SUCCESS, causing htb_enqueue to call htb_activate with an\nempty child qdisc. We should return NET_XMIT_CN when packets are\ndropped from the same tin and flow.\n\nI do not believe return value of NET_XMIT_CN is necessary for packet\ndrops in the case of ack filtering, as that is meant to optimize\nperformance, not to signal congestion.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39766" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0dacfc5372e314d1219f03e64dde3ab495a5a25e", "url": "https://git.kernel.org/stable/c/0dacfc5372e314d1219f03e64dde3ab495a5a25e" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/15de71d06a400f7fdc15bf377a2552b0ec437cf5", "url": "https://git.kernel.org/stable/c/15de71d06a400f7fdc15bf377a2552b0ec437cf5" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/62d591dde4defb1333d202410609c4ddeae060b3", "url": "https://git.kernel.org/stable/c/62d591dde4defb1333d202410609c4ddeae060b3" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/710866fc0a64eafcb8bacd91bcb1329eb7e5035f", "url": "https://git.kernel.org/stable/c/710866fc0a64eafcb8bacd91bcb1329eb7e5035f" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/7689ab22de36f8db19095f6bdf11f28cfde92f5c", "url": "https://git.kernel.org/stable/c/7689ab22de36f8db19095f6bdf11f28cfde92f5c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/aa12ee1c1bd260943fd6ab556d8635811c332eeb", "url": "https://git.kernel.org/stable/c/aa12ee1c1bd260943fd6ab556d8635811c332eeb" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/de04ddd2980b48caa8d7e24a7db2742917a8b280", "url": "https://git.kernel.org/stable/c/de04ddd2980b48caa8d7e24a7db2742917a8b280" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/ff57186b2cc39766672c4c0332323933e5faaa88", "url": "https://git.kernel.org/stable/c/ff57186b2cc39766672c4c0332323933e5faaa88" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-09-11T17:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53780", "cwe": { "id": "CWE-191", "name": "Integer Underflow (Wrap or Wraparound)" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\ndrm/amd/display: fix FCLK pstate change underflow\n[Why]\nCurrently we set FCLK p-state change\nwatermark calculated based on dummy\np-state latency when UCLK p-state is\nnot supported\n[How]\nCalculate FCLK p-state change watermark\nbased on on FCLK pstate change latency\nin case UCLK p-state is not supported", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53780" } ], "release_date": "2025-12-09T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] }, { "cve": "CVE-2024-58013", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nBluetooth: MGMT: Fix slab-use-after-free Read in mgmt_remove_adv_monitor_sync\nThis fixes the following crash:\n==================================================================\nBUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 net/bluetooth/mgmt.c:5543\nRead of size 8 at addr ffff88814128f898 by task kworker/u9:4/5961\nCPU: 1 UID: 0 PID: 5961 Comm: kworker/u9:4 Not tainted 6.12.0-syzkaller-10684-gf1cd565ce577 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\nWorkqueue: hci0 hci_cmd_sync_work\nCall Trace:\n\n__dump_stack lib/dump_stack.c:94 [inline]\ndump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\nprint_address_description mm/kasan/report.c:378 [inline]\nprint_report+0x169/0x550 mm/kasan/report.c:489\nkasan_report+0x143/0x180 mm/kasan/report.c:602\nmgmt_remove_adv_monitor_sync+0x3a/0xd0 net/bluetooth/mgmt.c:5543\nhci_cmd_sync_work+0x22b/0x400 net/bluetooth/hci_sync.c:332\nprocess_one_work kernel/workqueue.c:3229 [inline]\nprocess_scheduled_works+0xa63/0x1850 kernel/workqueue.c:3310\nworker_thread+0x870/0xd30 kernel/workqueue.c:3391\nkthread+0x2f0/0x390 kernel/kthread.c:389\nret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\nret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nAllocated by task 16026:\nkasan_save_stack mm/kasan/common.c:47 [inline]\nkasan_save_track+0x3f/0x80 mm/kasan/common.c:68\npoison_kmalloc_redzone mm/kasan/common.c:377 [inline]\n__kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:394\nkasan_kmalloc include/linux/kasan.h:260 [inline]\n__kmalloc_cache_noprof+0x243/0x390 mm/slub.c:4314\nkmalloc_noprof include/linux/slab.h:901 [inline]\nkzalloc_noprof include/linux/slab.h:1037 [inline]\nmgmt_pending_new+0x65/0x250 net/bluetooth/mgmt_util.c:269\nmgmt_pending_add+0x36/0x120 net/bluetooth/mgmt_util.c:296\nremove_adv_monitor+0x102/0x1b0 net/bluetooth/mgmt.c:5568\nhci_mgmt_cmd+0xc47/0x11d0 net/bluetooth/hci_sock.c:1712\nhci_sock_sendmsg+0x7b8/0x11c0 net/bluetooth/hci_sock.c:1832\nsock_sendmsg_nosec net/socket.c:711 [inline]\n__sock_sendmsg+0x221/0x270 net/socket.c:726\nsock_write_iter+0x2d7/0x3f0 net/socket.c:1147\nnew_sync_write fs/read_write.c:586 [inline]\nvfs_write+0xaeb/0xd30 fs/read_write.c:679\nksys_write+0x18f/0x2b0 fs/read_write.c:731\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\nFreed by task 16022:\nkasan_save_stack mm/kasan/common.c:47 [inline]\nkasan_save_track+0x3f/0x80 mm/kasan/common.c:68\nkasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\npoison_slab_object mm/kasan/common.c:247 [inline]\n__kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\nkasan_slab_free include/linux/kasan.h:233 [inline]\nslab_free_hook mm/slub.c:2338 [inline]\nslab_free mm/slub.c:4598 [inline]\nkfree+0x196/0x420 mm/slub.c:4746\nmgmt_pending_foreach+0xd1/0x130 net/bluetooth/mgmt_util.c:259\n__mgmt_power_off+0x183/0x430 net/bluetooth/mgmt.c:9550\nhci_dev_close_sync+0x6c4/0x11c0 net/bluetooth/hci_sync.c:5208\nhci_dev_do_close net/bluetooth/hci_core.c:483 [inline]\nhci_dev_close+0x112/0x210 net/bluetooth/hci_core.c:508\nsock_do_ioctl+0x158/0x460 net/socket.c:1209\nsock_ioctl+0x626/0x8e0 net/socket.c:1328\nvfs_ioctl fs/ioctl.c:51 [inline]\n__do_sys_ioctl fs/ioctl.c:906 [inline]\n__se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2024-58013" } ], "release_date": "2025-02-27T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-39891", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mwifiex: Initialize the chan_stats array to zero\n\nThe adapter->chan_stats[] array is initialized in\nmwifiex_init_channel_scan_gap() with vmalloc(), which doesn't zero out\nmemory. The array is filled in mwifiex_update_chan_statistics()\nand then the user can query the data in mwifiex_cfg80211_dump_survey().\n\nThere are two potential issues here. What if the user calls\nmwifiex_cfg80211_dump_survey() before the data has been filled in.\nAlso the mwifiex_update_chan_statistics() function doesn't necessarily\ninitialize the whole array. Since the array was not initialized at\nthe start that could result in an information leak.\n\nAlso this array is pretty small. It's a maximum of 900 bytes so it's\nmore appropriate to use kcalloc() instead vmalloc().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-39891" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/05daef0442d28350a1a0d6d0e2cab4a7a91df475", "url": "https://git.kernel.org/stable/c/05daef0442d28350a1a0d6d0e2cab4a7a91df475" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/06616410a3e5e6cd1de5b7cbc668f1a7edeedad9", "url": "https://git.kernel.org/stable/c/06616410a3e5e6cd1de5b7cbc668f1a7edeedad9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/0e20450829ca3c1dbc2db536391537c57a40fe0b", "url": "https://git.kernel.org/stable/c/0e20450829ca3c1dbc2db536391537c57a40fe0b" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/32c124c9c03aa755cbaf60ef7f76afd918d47659", "url": "https://git.kernel.org/stable/c/32c124c9c03aa755cbaf60ef7f76afd918d47659" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5285b7009dc1e09d5bb9e05fae82e1a807882dbc", "url": "https://git.kernel.org/stable/c/5285b7009dc1e09d5bb9e05fae82e1a807882dbc" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9df29aa5637d94d24f7c5f054ef4feaa7b766111", "url": "https://git.kernel.org/stable/c/9df29aa5637d94d24f7c5f054ef4feaa7b766111" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/9eb0118b3470b4d2e4e3bbb1fc088b30c0285d65", "url": "https://git.kernel.org/stable/c/9eb0118b3470b4d2e4e3bbb1fc088b30c0285d65" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/acdf26a912190fc6746e2a890d7d0338190527b4", "url": "https://git.kernel.org/stable/c/acdf26a912190fc6746e2a890d7d0338190527b4" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-10-01T08:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-38212", "cwe": { "id": "CWE-416", "name": "Use After Free" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\nipc: fix to protect IPCS lookups using RCU\n\nsyzbot reported that it discovered a use-after-free vulnerability, [0]\n\n[0]: https://lore.kernel.org/all/67af13f8.050a0220.21dd3.0038.GAE@google.com/\n\nidr_for_each() is protected by rwsem, but this is not enough. If it is\nnot protected by RCU read-critical region, when idr_for_each() calls\nradix_tree_node_free() through call_rcu() to free the radix_tree_node\nstructure, the node will be freed immediately, and when reading the next\nnode in radix_tree_for_each_slot(), the already freed memory may be read.\n\nTherefore, we need to add code to make sure that idr_for_each() is\nprotected within the RCU read-critical region when we call it in\nshm_destroy_orphaned().", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-38212" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5180561afff8e0f029073c8c8117c95c6512d1f9", "url": "https://git.kernel.org/stable/c/5180561afff8e0f029073c8c8117c95c6512d1f9" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/5f1e1573bf103303944fd7225559de5d8297539c", "url": "https://git.kernel.org/stable/c/5f1e1573bf103303944fd7225559de5d8297539c" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/68c173ea138b66d7dd1fd980c9bc578a18e11884", "url": "https://git.kernel.org/stable/c/68c173ea138b66d7dd1fd980c9bc578a18e11884" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/74bc813d11c30e28fc5261dc877cca662ccfac68", "url": "https://git.kernel.org/stable/c/74bc813d11c30e28fc5261dc877cca662ccfac68" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/78297d53d3878d43c1d627d20cd09f611fa4b91d", "url": "https://git.kernel.org/stable/c/78297d53d3878d43c1d627d20cd09f611fa4b91d" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b0b6bf90ce2699a574b3683e22c44d0dcdd7a057", "url": "https://git.kernel.org/stable/c/b0b6bf90ce2699a574b3683e22c44d0dcdd7a057" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b968ba8bfd9f90914957bbbd815413bf6a98eca7", "url": "https://git.kernel.org/stable/c/b968ba8bfd9f90914957bbbd815413bf6a98eca7" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/d66adabe91803ef34a8b90613c81267b5ded1472", "url": "https://git.kernel.org/stable/c/d66adabe91803ef34a8b90613c81267b5ded1472" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html", "url": "https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html" } ], "release_date": "2025-07-04T14:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2025-40240", "cwe": { "id": "CWE-476", "name": "NULL Pointer Dereference" }, "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\nsctp: avoid NULL dereference when chunk data buffer is missing\nchunk->skb pointer is dereferenced in the if-block where it's supposed\nto be NULL only.\nchunk->skb can only be NULL if chunk->head_skb is not. Check for frag_list\ninstead and do it just before replacing chunk->skb. We're sure that\notherwise chunk->skb is non-NULL because of outer if() condition.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-40240" } ], "release_date": "2025-12-04T00:00:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] }, { "cve": "CVE-2023-53473", "notes": [ { "category": "description", "text": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: improve error handling from ext4_dirhash()\n\nThe ext4_dirhash() will *almost* never fail, especially when the hash\ntree feature was first introduced. However, with the addition of\nsupport of encrypted, casefolded file names, that function can most\ncertainly fail today.\n\nSo make sure the callers of ext4_dirhash() properly check for\nfailures, and reflect the errors back up to their callers.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2023-53473" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786", "url": "https://git.kernel.org/stable/c/4b3cb1d108bfc2aebb0d7c8a52261a53cf7f5786" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553", "url": "https://git.kernel.org/stable/c/70d579aefa652a06af97e013e3fbbabbe5a43553" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a", "url": "https://git.kernel.org/stable/c/b2531936118deb3f479c4fa1bcd787b74b8faa6a" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43", "url": "https://git.kernel.org/stable/c/c1fae027da61fe8e7eb99f7244297e81bc0f1e43" }, { "category": "external", "summary": "https://git.kernel.org/stable/c/f68876aeef96ef8b708ab10b9cb47ce0a5adb424", "url": "https://git.kernel.org/stable/c/f68876aeef96ef8b708ab10b9cb47ce0a5adb424" } ], "release_date": "2025-10-01T12:15:00Z", "remediations": [ { "category": "vendor_fix", "date": "2026-02-16T10:56:27.087482Z", "details": "Details on how to apply the fix are available at: https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384", "product_ids": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ], "url": "https://cve.tuxcare.com/els/releases/CLSA-2026:1771239384" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "AlmaLinux-9.2:bpftool-0:7.0.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-abi-stablelists-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-cross-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-debug-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-devel-matched-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-doc-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.noarch", "AlmaLinux-9.2:kernel-headers-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-ipaclones-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-core-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-extra-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-modules-partner-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-selftests-internal-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-tools-libs-devel-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:kernel-uki-virt-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-devel-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.i686", "AlmaLinux-9.2:libbpf-static-2:1.0.0-2.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:python3-perf-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64", "AlmaLinux-9.2:rtla-0:5.14.0-284.1101.el9_2.tuxcare.7.els28.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Important" } ] } ] }