Advisory: CLSA-2025:1760546935
OS: AlmaLinux 9.2 ESU
Public date: 2025-10-15 16:49:05.454884
Project: kernel
Version: 7.0.0-284.1101.el9_2.tuxcare.7.els22
Errata link: https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1760546935.html
- locking/ww_mutex/test: Fix potential workqueue corruption {CVE-2023-52836} - netfilter: ipset: Fix suspicious rcu_dereference_protected() {CVE-2024-40993} - netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type {CVE-2024-39503} - netfilter: ipset: Missing gc cancellations fixed {CVE-2024-39503} - netfilter: ipset: Add list flush to cancel_gc {CVE-2024-39503} - netfilter: ipset: fix performance regression in swap operation {CVE-2024-26910} - netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test {CVE-2024-26910} - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() {CVE-2023-53521} - scsi: mpt3sas: Fix a memory leak {CVE-2023-53512} - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() {CVE-2023-53464} - wifi: ath11k: fix deinitialization of firmware resources {CVE-2023-53532} - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() {CVE-2022-50464} - ionic: catch failure from devlink_alloc {CVE-2023-53470} - enic: Validate length of nl attributes in enic_set_vf_port {CVE-2024-38659} - gpiolib: cdev: fix uninitialised kfifo {CVE-2024-36898} - Bluetooth: hci_conn: Fix crash on hci_create_cis_sync {CVE-2022-50447} - net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP {CVE-2024-36974} - ext4: Fix function prototype mismatch for ext4_feat_ktype {CVE-2023-53224} - ipv6: Add lwtunnel encap size of all siblings in nexthop calculation {CVE-2023-53477} - netfilter: nf_tables: prefer nft_chain_validate {CVE-2024-41042} - netfilter: nf_conntrack: fix crash due to removal of uninitialised entry {CVE-2025-38472} - Bluetooth: qca: add missing firmware sanity checks {CVE-2024-36880} - Bluetooth: qca: fix info leak when fetching fw build id {CVE-2024-36032} - Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp {CVE-2023-53297} - drm/amd/display: Skip finding free audio for unknown engine_id {CVE-2024-42119} - drm/dp_mst: Fix resetting msg rx state after topology removal {CVE-2024-57876} - drm/vc4: don't check if plane->state->fb == state->fb {CVE-2024-35932} - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create {CVE-2023-53263} - cifs: fix oops during encryption {CVE-2022-50341} - smb: client: fix use-after-free in cifs_oplock_break {CVE-2025-38527} - smb: client: fix race with concurrent opens in rename(2) {CVE-2025-39825} - ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL {CVE-2023-52697} - blk-mq: fix NULL dereference on q->elevator in blk_mq_elv_switch_none {CVE-2023-53292} - mlx5: fix possible ptp queue fifo use-after-free {CVE-2023-53398} - sctp: check send stream number after wait_for_sndbuf {CVE-2023-53296} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - scsi: mpi3mr: Use number of bits to manage bitmap sizes {CVE-2023-53376} - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue {CVE-2023-53280} - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data {CVE-2023-53232} - wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes {CVE-2023-53185} - fbdev: Fix invalid page access after closing deferred I/O devices {CVE-2023-52731} - ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer {CVE-2023-53395} - ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value {CVE-2022-50327} - media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() {CVE-2023-53220} - media: dvb-usb: az6027: fix null-ptr-deref in az6027_i2c_xfer() {CVE-2022-50272}
Update command: dnf update kernel*
bpftool-7.0.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-abi-stablelists-5.14.0-284.1101.el9_2.tuxcare.7.els22.noarch.rpm kernel-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-cross-headers-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-modules-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-debug-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-devel-matched-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-doc-5.14.0-284.1101.el9_2.tuxcare.7.els22.noarch.rpm kernel-headers-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-ipaclones-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-modules-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-modules-core-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-modules-extra-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-modules-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-modules-partner-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-selftests-internal-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-tools-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-tools-libs-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-tools-libs-devel-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm kernel-uki-virt-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm libbpf-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm libbpf-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm libbpf-devel-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm libbpf-static-1.0.0-2.el9_2.tuxcare.7.els22.i686.rpm libbpf-static-1.0.0-2.el9_2.tuxcare.7.els22.x86_64.rpm perf-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm python3-perf-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm rtla-5.14.0-284.1101.el9_2.tuxcare.7.els22.x86_64.rpm