Fix of 104 CVEs
* CVE-2025-38699 - scsi: bfa: Double-free fix {CVE-2025-38699} * CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697} * CVE-2025-39823 - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} * CVE-2025-39689 - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} * CVE-2025-39749 - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} * CVE-2025-38728 - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} * CVE-2025-38676 - iommu/amd: Avoid stack buffer overflow from kernel cmdline {CVE-2025-38676} * CVE-2025-38574 - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} * CVE-2025-38572 - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} * CVE-2025-38685 - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} * CVE-2025-38563 - vm_ops: rename .split() callback to .may_split() {CVE-2025-38563} - perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563} * CVE-2025-38702 - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} * CVE-2025-39911 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} * CVE-2025-39971 - i40e: fix idx validation in config queues msg {CVE-2025-39971} * CVE-2025-40154 - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} * CVE-2025-39973 - i40e: increase max descriptors for XL710 {CVE-2025-39973} - i40e: a
- Products
- linux-buildinfo-5.4.0-225-tuxcare.els7-generic, linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency, linux-cloud-tools-5.4.0-225-tuxcare.els7, linux-cloud-tools-5.4.0-225-tuxcare.els7-generic, linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency, linux-cloud-tools-common, linux-doc, linux-headers-5.4.0-225-tuxcare.els7, linux-headers-5.4.0-225-tuxcare.els7-generic, linux-headers-5.4.0-225-tuxcare.els7-lowlatency, linux-image-unsigned-5.4.0-225-tuxcare.els7-generic, linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency, linux-libc-dev, linux-modules-5.4.0-225-tuxcare.els7-generic, linux-modules-5.4.0-225-tuxcare.els7-lowlatency, linux-modules-extra-5.4.0-225-tuxcare.els7-generic, linux-source-5.4.0, linux-tools-5.4.0-225-tuxcare.els7, linux-tools-5.4.0-225-tuxcare.els7-generic, linux-tools-5.4.0-225-tuxcare.els7-lowlatency, linux-tools-common, linux-tools-host
- Affected versions
- Not specified
- Fixed versions
- 5.4.0-225.245
- CVEs
- CVE-2022-49026, CVE-2022-49698, CVE-2023-52854, CVE-2024-35867, CVE-2024-50061, CVE-2025-21726, CVE-2025-22107, CVE-2025-37817, CVE-2025-37913, CVE-2025-37915, CVE-2025-37927, CVE-2025-37928, CVE-2025-38068, CVE-2025-38102, CVE-2025-38198, CVE-2025-38204, CVE-2025-38245, CVE-2025-38249, CVE-2025-38323, CVE-2025-38346, CVE-2025-38348, CVE-2025-38375, CVE-2025-38377, CVE-2025-38389, CVE-2025-38395, CVE-2025-38401, CVE-2025-38415, CVE-2025-38416, CVE-2025-38422, CVE-2025-38428, CVE-2025-38445, CVE-2025-38459, CVE-2025-38482, CVE-2025-38483, CVE-2025-38494, CVE-2025-38497, CVE-2025-38527, CVE-2025-38529, CVE-2025-38530, CVE-2025-38563, CVE-2025-38572, CVE-2025-38574, CVE-2025-38676, CVE-2025-38685, CVE-2025-38697, CVE-2025-38699, CVE-2025-38702, CVE-2025-38724, CVE-2025-38728, CVE-2025-39689, CVE-2025-39702, CVE-2025-39730, CVE-2025-39749, CVE-2025-39757, CVE-2025-39760, CVE-2025-39810, CVE-2025-39817, CVE-2025-39823, CVE-2025-39841, CVE-2025-39853, CVE-2025-39860, CVE-2025-39863, CVE-2025-39883, CVE-2025-39891, CVE-2025-39901, CVE-2025-39905, CVE-2025-39911, CVE-2025-39965, CVE-2025-39971, CVE-2025-39973, CVE-2025-39993, CVE-2025-40154
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 11:43 UTC · Revision 1
Source evidence
* CVE-2025-38699 - scsi: bfa: Double-free fix {CVE-2025-38699} * CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697} * CVE-2025-39823 - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} * CVE-2025-39689 - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} * CVE-2025-39749 - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} * CVE-2025-38728 - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} * CVE-2025-38676 - iommu/amd: Avoid stack buffer overflow from kernel cmdline {CVE-2025-38676} * CVE-2025-38574 - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} * CVE-2025-38572 - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} * CVE-2025-38685 - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} * CVE-2025-38563 - vm_ops: rename .split() callback to .may_split() {CVE-2025-38563} - perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563} * CVE-2025-38702 - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} * CVE-2025-39911 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} * CVE-2025-39971 - i40e: fix idx validation in config queues msg {CVE-2025-39971} * CVE-2025-40154 - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} * CVE-2025-39973 - i40e: increase max descriptors for XL710 {CVE-2025-39973} - i40e: a
osv:CLSA-2026-1772815097
linux-buildinfo-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7
Fixed versions: 5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-cloud-tools-common
Fixed versions: 5.4.0-225.245
linux-doc
Fixed versions: 5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7
Fixed versions: 5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-headers-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-image-unsigned-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-libc-dev
Fixed versions: 5.4.0-225.245
linux-modules-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-modules-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-modules-extra-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-source-5.4.0
Fixed versions: 5.4.0-225.245
linux-tools-5.4.0-225-tuxcare.els7
Fixed versions: 5.4.0-225.245
linux-tools-5.4.0-225-tuxcare.els7-generic
Fixed versions: 5.4.0-225.245
linux-tools-5.4.0-225-tuxcare.els7-lowlatency
Fixed versions: 5.4.0-225.245
linux-tools-common
Fixed versions: 5.4.0-225.245
linux-tools-host
Fixed versions: 5.4.0-225.245
Complete source record
{
"id": "cba5990f8657af0a298fa325933dac30883a9056c94be2467f85fe05f71f4db4",
"url": "https://osv.dev/vulnerability/CLSA-2026-1772815097",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Fix of 104 CVEs",
"summary": "* CVE-2025-38699 - scsi: bfa: Double-free fix {CVE-2025-38699} * CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG {CVE-2025-38697} * CVE-2025-39823 - KVM: x86: use array_index_nospec with indices that come from guest {CVE-2025-39823} * CVE-2025-39689 - ftrace: Also allocate and copy hash for reading of filter files {CVE-2025-39689} * CVE-2025-39749 - rcu: Protect ->defer_qs_iw_pending from data race {CVE-2025-39749} * CVE-2025-38728 - smb3: fix for slab out of bounds on mount to ksmbd {CVE-2025-38728} * CVE-2025-38676 - iommu/amd: Avoid stack buffer overflow from kernel cmdline {CVE-2025-38676} * CVE-2025-38574 - pptp: ensure minimal skb length in pptp_xmit() {CVE-2025-38574} * CVE-2025-38572 - ipv6: reject malicious packets in ipv6_gso_segment() {CVE-2025-38572} * CVE-2025-38685 - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit {CVE-2025-38685} * CVE-2025-38563 - vm_ops: rename .split() callback to .may_split() {CVE-2025-38563} - perf/core: Prevent VMA split of buffer mappings {CVE-2025-38563} * CVE-2025-38702 - fbdev: fix potential buffer overflow in do_register_framebuffer() {CVE-2025-38702} * CVE-2025-39911 - i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path {CVE-2025-39911} * CVE-2025-39971 - i40e: fix idx validation in config queues msg {CVE-2025-39971} * CVE-2025-40154 - ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping {CVE-2025-40154} * CVE-2025-39973 - i40e: increase max descriptors for XL710 {CVE-2025-39973} - i40e: a",
"evidence": "osv:CLSA-2026-1772815097",
"products": [
{
"name": {
"value": "linux-buildinfo-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-cloud-tools-5.4.0-225-tuxcare.els7",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-cloud-tools-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-cloud-tools-common",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-doc",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-headers-5.4.0-225-tuxcare.els7",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-headers-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-headers-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-image-unsigned-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-libc-dev",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-modules-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-modules-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-modules-extra-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-source-5.4.0",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-tools-5.4.0-225-tuxcare.els7",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-tools-5.4.0-225-tuxcare.els7-generic",
"evidence": "/affected/18/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/18/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-tools-5.4.0-225-tuxcare.els7-lowlatency",
"evidence": "/affected/19/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/19/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-tools-common",
"evidence": "/affected/20/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/20/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "linux-tools-host",
"evidence": "/affected/21/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.4.0-225.245",
"evidence": "/affected/21/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CLSA-2026-1772815097",
"aliases": [
"CLSA-2026-1772815097"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-buildinfo-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-buildinfo-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-buildinfo-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-cloud-tools-5.4.0-225-tuxcare.els7",
"purl": "pkg:deb/tuxcare/linux-cloud-tools-5.4.0-225-tuxcare.els7?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-cloud-tools-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-cloud-tools-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-cloud-tools-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-cloud-tools-common",
"purl": "pkg:deb/tuxcare/linux-cloud-tools-common?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-doc",
"purl": "pkg:deb/tuxcare/linux-doc?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-headers-5.4.0-225-tuxcare.els7",
"purl": "pkg:deb/tuxcare/linux-headers-5.4.0-225-tuxcare.els7?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-headers-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-headers-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-headers-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-headers-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-image-unsigned-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-image-unsigned-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-image-unsigned-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-libc-dev",
"purl": "pkg:deb/tuxcare/linux-libc-dev?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-modules-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-modules-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-modules-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-modules-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-modules-extra-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-modules-extra-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-source-5.4.0",
"purl": "pkg:deb/tuxcare/linux-source-5.4.0?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-tools-5.4.0-225-tuxcare.els7",
"purl": "pkg:deb/tuxcare/linux-tools-5.4.0-225-tuxcare.els7?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-tools-5.4.0-225-tuxcare.els7-generic",
"purl": "pkg:deb/tuxcare/linux-tools-5.4.0-225-tuxcare.els7-generic?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-tools-5.4.0-225-tuxcare.els7-lowlatency",
"purl": "pkg:deb/tuxcare/linux-tools-5.4.0-225-tuxcare.els7-lowlatency?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-tools-common",
"purl": "pkg:deb/tuxcare/linux-tools-common?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "5.4.0-225.245"
}
]
}
],
"package": {
"name": "linux-tools-host",
"purl": "pkg:deb/tuxcare/linux-tools-host?distro=ubuntu-20.04",
"ecosystem": "TuxCare:Ubuntu:20.04"
},
"database_specific": {
"source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu20.04els/CLSA-2026-1772815097.json"
}
}
],
"modified": "2026-10-26T09:32:05.143904618Z",
"provider": "osv",
"upstream": [
"CVE-2022-49026",
"CVE-2022-49698",
"CVE-2023-52854",
"CVE-2024-35867",
"CVE-2024-50061",
"CVE-2025-21726",
"CVE-2025-22107",
"CVE-2025-37817",
"CVE-2025-37913",
"CVE-2025-37915",
"CVE-2025-37927",
"CVE-2025-37928",
"CVE-2025-38068",
"CVE-2025-38102",
"CVE-2025-38198",
"CVE-2025-38204",
"CVE-2025-38245",
"CVE-2025-38249",
"CVE-2025-38323",
"CVE-2025-38346",
"CVE-2025-38348",
"CVE-2025-38375",
"CVE-2025-38377",
"CVE-2025-38389",
"CVE-2025-38395",
"CVE-2025-38401",
"CVE-2025-38415",
"CVE-2025-38416",
"CVE-2025-38422",
"CVE-2025-38428",
"CVE-2025-38445",
"CVE-2025-38459",
"CVE-2025-38482",
"CVE-2025-38483",
"CVE-2025-38494",
"CVE-2025-38497",
"CVE-2025-38527",
"CVE-2025-38529",
"CVE-2025-38530",
"CVE-2025-38563",
"CVE-2025-38572",
"CVE-2025-38574",
"CVE-2025-38676",
"CVE-2025-38685",
"CVE-2025-38697",
"CVE-2025-38699",
"CVE-2025-38702",
"CVE-2025-38724",
"CVE-2025-38728",
"CVE-2025-39689",
"CVE-2025-39702",
"CVE-2025-39730",
"CVE-2025-39749",
"CVE-2025-39757",
"CVE-2025-39760",
"CVE-2025-39810",
"CVE-2025-39817",
"CVE-2025-39823",
"CVE-2025-39841",
"CVE-2025-39853",
"CVE-2025-39860",
"CVE-2025-39863",
"CVE-2025-39883",
"CVE-2025-39891",
"CVE-2025-39901",
"CVE-2025-39905",
"CVE-2025-39911",
"CVE-2025-39965",
"CVE-2025-39971",
"CVE-2025-39973",
"CVE-2025-39993",
"CVE-2025-40154"
],
"references": [
"https://errata.tuxcare.com/els_os/ubuntu20.04els/CLSA-2026-1772815097.html",
"https://nvd.nist.gov/vuln/detail/CVE-2022-1734",
"https://nvd.nist.gov/vuln/detail/CVE-2022-21546",
"https://nvd.nist.gov/vuln/detail/CVE-2022-3545",
"https://nvd.nist.gov/vuln/detail/CVE-2022-36123",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49026",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49698",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49975",
"https://nvd.nist.gov/vuln/detail/CVE-2022-49980",
"https://nvd.nist.gov/vuln/detail/CVE-2023-52854",
"https://nvd.nist.gov/vuln/detail/CVE-2023-52927",
"https://nvd.nist.gov/vuln/detail/CVE-2023-53282",
"https://nvd.nist.gov/vuln/detail/CVE-2024-35867",
"https://nvd.nist.gov/vuln/detail/CVE-2024-50061",
"https://nvd.nist.gov/vuln/detail/CVE-2024-56664",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21726",
"https://nvd.nist.gov/vuln/detail/CVE-2025-21727",
"https://nvd.nist.gov/vuln/detail/CVE-2025-22083",
"https://nvd.nist.gov/vuln/detail/CVE-2025-22107",
"https://nvd.nist.gov/vuln/detail/CVE-2025-22121",
"https://nvd.nist.gov/vuln/detail/CVE-2025-23142",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37738",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37739",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37749",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37780",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37789",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37796",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37810",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37817",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37823",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37839",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37879",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37882",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37892",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37913",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37915",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37923",
"https://nvd.nist.gov/vuln/detail/CVE-2025-37927",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38000",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38068",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38069",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38102",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38180",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38198",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38204",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38245",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38249",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38250",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38323",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38346",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38348",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38375",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38377",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38389",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38395",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38401",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38415",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38416",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38422",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38428",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38445",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38459",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38482",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38483",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38494",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38497",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38527",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38529",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38530",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38556",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38563",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38572",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38574",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38676",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38685",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38697",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38699",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38702",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38718",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38724",
"https://nvd.nist.gov/vuln/detail/CVE-2025-38728",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39689",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39702",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39730",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39749",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39757",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39760",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39797",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39810",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39817",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39823",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39841",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39853",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39860",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39863",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39883",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39891",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39901",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39905",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39911",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39965",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39971",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39973",
"https://nvd.nist.gov/vuln/detail/CVE-2025-39993",
"https://nvd.nist.gov/vuln/detail/CVE-2025-40154"
]
},
"related_cves": [
{
"value": "CVE-2022-49026",
"evidence": "/upstream"
},
{
"value": "CVE-2022-49698",
"evidence": "/upstream"
},
{
"value": "CVE-2023-52854",
"evidence": "/upstream"
},
{
"value": "CVE-2024-35867",
"evidence": "/upstream"
},
{
"value": "CVE-2024-50061",
"evidence": "/upstream"
},
{
"value": "CVE-2025-21726",
"evidence": "/upstream"
},
{
"value": "CVE-2025-22107",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37817",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37913",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37915",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37927",
"evidence": "/upstream"
},
{
"value": "CVE-2025-37928",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38068",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38102",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38198",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38204",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38245",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38249",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38323",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38346",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38348",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38375",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38377",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38389",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38395",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38401",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38415",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38416",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38422",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38428",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38445",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38459",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38482",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38483",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38494",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38497",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38527",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38529",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38530",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38563",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38572",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38574",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38676",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38685",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38697",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38699",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38702",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38724",
"evidence": "/upstream"
},
{
"value": "CVE-2025-38728",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39689",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39702",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39730",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39749",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39757",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39760",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39810",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39817",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39823",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39841",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39853",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39860",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39863",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39883",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39891",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39901",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39905",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39911",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39965",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39971",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39973",
"evidence": "/upstream"
},
{
"value": "CVE-2025-39993",
"evidence": "/upstream"
},
{
"value": "CVE-2025-40154",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 449658,
"published_at": "2026-10-21T08:58:13+00:00"
}