Skip to content
Heist/ feed
Back to feed
UnratedFix available

kernel: Fix of 64 CVEs

Type: advisorySources: OSV

- xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix addres

Products
bpftool, kernel, kernel-debug, kernel-debug-devel, kernel-devel, kernel-headers, kernel-tools, kernel-tools-libs, kernel-tools-libs-devel, perf, python-perf
Affected versions
Not specified
Fixed versions
3.10.0-1160.139.1.el7.tuxcare.els3
CVEs
CVE-2022-21546, CVE-2022-3640, CVE-2022-48900, CVE-2022-49870, CVE-2022-49907, CVE-2022-49917, CVE-2022-49918, CVE-2022-49948, CVE-2022-50084, CVE-2022-50085, CVE-2022-50252, CVE-2022-50258, CVE-2022-50386, CVE-2022-50408, CVE-2023-52854, CVE-2023-53000, CVE-2023-53117, CVE-2023-53305, CVE-2023-53365, CVE-2023-53373, CVE-2025-37839, CVE-2025-37882, CVE-2025-38250, CVE-2025-38584, CVE-2025-38718, CVE-2025-39751, CVE-2025-39965
Confirmed fixed CVEs
Not specified
Updated in this feed
1 Nov 2026, 11:26 UTC · Revision 1

Source evidence

kernel: Fix of 64 CVEs

core-osv · Original source

Published 19 Oct 2026, 13:38 UTC

- xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix addres

osv:CLSA-2025-1766599987

bpftool

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-debug

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-debug-devel

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-devel

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-headers

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-tools

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-tools-libs

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

kernel-tools-libs-devel

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

perf

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

python-perf

Fixed versions: 3.10.0-1160.139.1.el7.tuxcare.els3

Complete source record
{
  "id": "d42190b2493e018abc94f9ba991a7052e6b74a6066cdd292bb081226041be062",
  "url": "https://osv.dev/vulnerability/CLSA-2025-1766599987",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "kernel: Fix of 64 CVEs",
    "summary": "- xfrm: Duplicate SPI Handling {CVE-2025-39965} - xfrm: state: use atomic_inc_not_zero to increment refcount - padata: Fix pd UAF once and for all {CVE-2025-38584} - padata: Remove broken queue flushing {CVE-2023-52854} - padata: ensure padata_do_serial() runs on the correct CPU - Bluetooth: L2CAP: Fix use-after-free {CVE-2023-53305} - wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() {CVE-2022-50408} - sctp: linearize cloned gso packets in sctp_rcv {CVE-2025-38718} - ip6mr: Fix skb_under_panic in ip6mr_cache_report() {CVE-2023-53365} - Bluetooth: L2CAP: Fix user-after-free {CVE-2022-50386} - Bluetooth: L2CAP: Fix use-after-free caused by l2cap_chan_put {CVE-2022-3640} - ipvs: fix WARNING in ip_vs_app_net_cleanup() {CVE-2022-49917} - ipvs: fix WARNING in __ip_vs_cleanup_batch() {CVE-2022-49918} - ipvs: use explicitly signed chars - vt: Clear selection before changing the font {CVE-2022-49948} - fs: prevent out-of-bounds array speculation when closing a file descriptor {CVE-2023-53117} - xen/netfront: react properly to failing gnttab_end_foreign_access_ref() {CVE-2022-48900} - netlink: prevent potential spectre v1 gadgets {CVE-2023-53000} - igb: Do not free q_vector unless new one was allocated {CVE-2022-50252} - scsi: target: Fix WRITE_SAME No Data Buffer crash {CVE-2022-21546} - net: mdio: fix undefined behavior in bit shift for __mdiobus_register {CVE-2022-49907} - dm raid: fix address sanitizer warning in raid_status {CVE-2022-50084} - dm raid: fix addres",
    "evidence": "osv:CLSA-2025-1766599987",
    "products": [
      {
        "name": {
          "value": "bpftool",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/0/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-debug",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/2/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-debug-devel",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/3/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-devel",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/4/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-headers",
          "evidence": "/affected/5/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/5/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-tools",
          "evidence": "/affected/6/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/6/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-tools-libs",
          "evidence": "/affected/7/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/7/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "kernel-tools-libs-devel",
          "evidence": "/affected/8/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/8/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "perf",
          "evidence": "/affected/9/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/9/ranges"
          }
        ],
        "affected_versions": []
      },
      {
        "name": {
          "value": "python-perf",
          "evidence": "/affected/10/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "3.10.0-1160.139.1.el7.tuxcare.els3",
            "evidence": "/affected/10/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CLSA-2025-1766599987",
      "aliases": [
        "CLSA-2025-1766599987"
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "bpftool",
            "purl": "pkg:rpm/tuxcare/bpftool?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel",
            "purl": "pkg:rpm/tuxcare/kernel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-debug",
            "purl": "pkg:rpm/tuxcare/kernel-debug?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-debug-devel",
            "purl": "pkg:rpm/tuxcare/kernel-debug-devel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-devel",
            "purl": "pkg:rpm/tuxcare/kernel-devel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-headers",
            "purl": "pkg:rpm/tuxcare/kernel-headers?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-tools",
            "purl": "pkg:rpm/tuxcare/kernel-tools?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-tools-libs",
            "purl": "pkg:rpm/tuxcare/kernel-tools-libs?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "kernel-tools-libs-devel",
            "purl": "pkg:rpm/tuxcare/kernel-tools-libs-devel?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "perf",
            "purl": "pkg:rpm/tuxcare/perf?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "3.10.0-1160.139.1.el7.tuxcare.els3"
                }
              ]
            }
          ],
          "package": {
            "name": "python-perf",
            "purl": "pkg:rpm/tuxcare/python-perf?distro=oraclelinux-7",
            "ecosystem": "TuxCare:OracleLinux:7"
          },
          "database_specific": {
            "source": "https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2025-1766599987.json"
          }
        }
      ],
      "modified": "2026-10-26T09:31:54.505650029Z",
      "provider": "osv",
      "upstream": [
        "CVE-2022-21546",
        "CVE-2022-3640",
        "CVE-2022-48900",
        "CVE-2022-49870",
        "CVE-2022-49907",
        "CVE-2022-49917",
        "CVE-2022-49918",
        "CVE-2022-49948",
        "CVE-2022-50084",
        "CVE-2022-50085",
        "CVE-2022-50252",
        "CVE-2022-50258",
        "CVE-2022-50386",
        "CVE-2022-50408",
        "CVE-2023-52854",
        "CVE-2023-53000",
        "CVE-2023-53117",
        "CVE-2023-53305",
        "CVE-2023-53365",
        "CVE-2023-53373",
        "CVE-2025-37839",
        "CVE-2025-37882",
        "CVE-2025-38250",
        "CVE-2025-38584",
        "CVE-2025-38718",
        "CVE-2025-39751",
        "CVE-2025-39965"
      ],
      "references": [
        "https://errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2025-1766599987.html",
        "https://nvd.nist.gov/vuln/detail/CVE-2019-25162",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-0129",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-20292",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-20321",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-28964",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-28971",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-30178",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-3178",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-31916",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-34693",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-3659",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-3679",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-37159",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-3923",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-4149",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-4159",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-43389",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-43976",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-45868",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-46906",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-46932",
        "https://nvd.nist.gov/vuln/detail/CVE-2021-47171",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-0812",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-1016",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-20566",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-21499",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-21546",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-23042",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-36280",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-3629",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-3640",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-42895",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49870",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49907",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49917",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49918",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-49948",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50084",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50085",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50252",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50258",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50386",
        "https://nvd.nist.gov/vuln/detail/CVE-2022-50408",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-1513",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-42753",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-45862",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-52435",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-52854",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53000",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53117",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53305",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53365",
        "https://nvd.nist.gov/vuln/detail/CVE-2023-53373",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-26923",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-35962",
        "https://nvd.nist.gov/vuln/detail/CVE-2024-35967",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-37797",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-37839",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-37882",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-38250",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-38584",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-38718",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-39797",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-39965"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2022-21546",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-3640",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-48900",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-49870",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-49907",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-49917",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-49918",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-49948",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50084",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50085",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50252",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50258",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50386",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2022-50408",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-52854",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-53000",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-53117",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-53305",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-53365",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2023-53373",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-37839",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-37882",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-38250",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-38584",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-38718",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-39751",
        "evidence": "/upstream"
      },
      {
        "value": "CVE-2025-39965",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 448918,
  "published_at": "2026-10-19T13:38:29+00:00"
}