kernel: Fix of 36 CVEs
- ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs
- Products
- bpftool, kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-headers, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python-perf
- Affected versions
- Not specified
- Fixed versions
- 3.10.0-1160.137.1.el7.tuxcare.els25
- CVEs
- CVE-2021-47103, CVE-2021-47310, CVE-2021-47321, CVE-2021-47352, CVE-2021-47497, CVE-2022-23037, CVE-2022-23038, CVE-2022-23039, CVE-2022-45884, CVE-2022-45885, CVE-2022-48695, CVE-2022-48757, CVE-2022-48760, CVE-2022-49292, CVE-2023-0386, CVE-2023-52530, CVE-2023-52578, CVE-2023-52594, CVE-2023-52764, CVE-2023-52835, CVE-2023-52864, CVE-2024-26961, CVE-2024-26974, CVE-2024-35965, CVE-2024-35966, CVE-2024-36921, CVE-2024-38621, CVE-2024-39499, CVE-2024-40901, CVE-2024-40929, CVE-2024-40978, CVE-2024-41069, CVE-2024-52332, CVE-2024-53214, CVE-2024-56616, CVE-2025-21704
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 14:07 UTC · Revision 1
Source evidence
- ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs
osv:CLSA-2025-1759432250
bpftool
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-debug
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-debug-devel
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-devel
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-headers
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-tools
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-tools-libs
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
kernel-tools-libs-devel
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
perf
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
python-perf
Fixed versions: 3.10.0-1160.137.1.el7.tuxcare.els25
Complete source record
{
"id": "c5970e719d6c8a961fea1594e01e5659437df7a82d1fe77733720417cad27d62",
"url": "https://osv.dev/vulnerability/CLSA-2025-1759432250",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "kernel: Fix of 36 CVEs",
"summary": "- ASoC: topology: Clean up route loading {CVE-2024-41069} - ASoC: topology: Fix references to freed memory {CVE-2024-41069} - drm/dp_mst: Fix MST sideband message body length check {CVE-2024-56616} - Bluetooth: L2CAP: Fix not validating setsockopt user input {CVE-2024-35965} - Bluetooth: L2CAP: uninitialized variables in l2cap_sock_setsockopt() {CVE-2024-35965} - usb: cdc-acm: Check control transfer buffer size before access {CVE-2025-21704} - igb: Fix potential invalid memory access in igb_init_module() {CVE-2024-52332} - vfio/pci: Properly hide first-in-list PCIe extended capability {CVE-2024-53214} - Bluetooth: RFCOMM: Fix not validating setsockopt user input {CVE-2024-35966} - Bluetooth: SCO: Fix not validating setsockopt user input {CVE-2024-35966} - media: stk1160: fix bounds checking in stk1160_copy_video() {CVE-2024-38621} - inet: fully convert sk->sk_rx_dst to RCU rules {CVE-2021-47103} - scsi: mpt3sas: Fix use-after-free warning {CVE-2022-48695} - scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory {CVE-2024-40901} - vmci: prevent speculation leaks by sanitizing event in event_deliver() {CVE-2024-39499} - USB: core: Fix hang in usb_kill_urb by adding memory barriers {CVE-2022-48760} - nvmem: Fix shift-out-of-bound (UBSAN) with byte size cells {CVE-2021-47497} - virtio-net: Add validation for used length {CVE-2021-47352} - watchdog: Fix possible use-after-free by calling del_timer_sync() {CVE-2021-47321} - scsi: qedi: Fix crash while reading debugfs",
"evidence": "osv:CLSA-2025-1759432250",
"products": [
{
"name": {
"value": "bpftool",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-debug-devel",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-devel",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-headers",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "kernel-tools-libs-devel",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "perf",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python-perf",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "3.10.0-1160.137.1.el7.tuxcare.els25",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2025-1759432250",
"aliases": [
"CLSA-2025-1759432250"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "bpftool",
"purl": "pkg:rpm/tuxcare/bpftool?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel",
"purl": "pkg:rpm/tuxcare/kernel?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-debug",
"purl": "pkg:rpm/tuxcare/kernel-debug?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-debug-devel",
"purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-devel",
"purl": "pkg:rpm/tuxcare/kernel-devel?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-headers",
"purl": "pkg:rpm/tuxcare/kernel-headers?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-tools",
"purl": "pkg:rpm/tuxcare/kernel-tools?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-tools-libs",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "kernel-tools-libs-devel",
"purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "perf",
"purl": "pkg:rpm/tuxcare/perf?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "3.10.0-1160.137.1.el7.tuxcare.els25"
}
]
}
],
"package": {
"name": "python-perf",
"purl": "pkg:rpm/tuxcare/python-perf?distro=rhel-7",
"ecosystem": "TuxCare:RHEL:7"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2025-1759432250.json"
}
}
],
"modified": "2026-10-21T10:48:13.872649863Z",
"provider": "osv",
"upstream": [
"CVE-2021-47103",
"CVE-2021-47310",
"CVE-2021-47321",
"CVE-2021-47352",
"CVE-2021-47497",
"CVE-2022-23037",
"CVE-2022-23038",
"CVE-2022-23039",
"CVE-2022-45884",
"CVE-2022-45885",
"CVE-2022-48695",
"CVE-2022-48757",
"CVE-2022-48760",
"CVE-2022-49292",
"CVE-2023-0386",
"CVE-2023-52530",
"CVE-2023-52578",
"CVE-2023-52594",
"CVE-2023-52764",
"CVE-2023-52835",
"CVE-2023-52864",
"CVE-2024-26961",
"CVE-2024-26974",
"CVE-2024-35965",
"CVE-2024-35966",
"CVE-2024-36921",
"CVE-2024-38621",
"CVE-2024-39499",
"CVE-2024-40901",
"CVE-2024-40929",
"CVE-2024-40978",
"CVE-2024-41069",
"CVE-2024-52332",
"CVE-2024-53214",
"CVE-2024-56616",
"CVE-2025-21704"
],
"references": [
"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2025-1759432250.html"
]
},
"related_cves": [
{
"value": "CVE-2021-47103",
"evidence": "/upstream"
},
{
"value": "CVE-2021-47310",
"evidence": "/upstream"
},
{
"value": "CVE-2021-47321",
"evidence": "/upstream"
},
{
"value": "CVE-2021-47352",
"evidence": "/upstream"
},
{
"value": "CVE-2021-47497",
"evidence": "/upstream"
},
{
"value": "CVE-2022-23037",
"evidence": "/upstream"
},
{
"value": "CVE-2022-23038",
"evidence": "/upstream"
},
{
"value": "CVE-2022-23039",
"evidence": "/upstream"
},
{
"value": "CVE-2022-45884",
"evidence": "/upstream"
},
{
"value": "CVE-2022-45885",
"evidence": "/upstream"
},
{
"value": "CVE-2022-48695",
"evidence": "/upstream"
},
{
"value": "CVE-2022-48757",
"evidence": "/upstream"
},
{
"value": "CVE-2022-48760",
"evidence": "/upstream"
},
{
"value": "CVE-2022-49292",
"evidence": "/upstream"
},
{
"value": "CVE-2023-0386",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52530",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52578",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52594",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52764",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52835",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52864",
"evidence": "/upstream"
},
{
"value": "CVE-2024-26961",
"evidence": "/upstream"
},
{
"value": "CVE-2024-26974",
"evidence": "/upstream"
},
{
"value": "CVE-2024-35965",
"evidence": "/upstream"
},
{
"value": "CVE-2024-35966",
"evidence": "/upstream"
},
{
"value": "CVE-2024-36921",
"evidence": "/upstream"
},
{
"value": "CVE-2024-38621",
"evidence": "/upstream"
},
{
"value": "CVE-2024-39499",
"evidence": "/upstream"
},
{
"value": "CVE-2024-40901",
"evidence": "/upstream"
},
{
"value": "CVE-2024-40929",
"evidence": "/upstream"
},
{
"value": "CVE-2024-40978",
"evidence": "/upstream"
},
{
"value": "CVE-2024-41069",
"evidence": "/upstream"
},
{
"value": "CVE-2024-52332",
"evidence": "/upstream"
},
{
"value": "CVE-2024-53214",
"evidence": "/upstream"
},
{
"value": "CVE-2024-56616",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21704",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 392893,
"published_at": "2025-10-02T19:10:57+00:00"
}