🛡️ CLSA-2025-1738957378 — linux-buildinfo-4.4.0-270-tuxcare.els41- (CVE-2024-38553 +29 more)

Fix of 49 CVEs

• CVE-url: https://ubuntu.com/security/CVE-2024-38553/CVE-2024-38597
• netpoll: make ndo_poll_controller() optional
• bonding: use netpoll_poll_dev() helper
• netpoll: do not test NAPI_STATE_SCHED in poll_one_napi()
• CVE-url: https://ubuntu.com/security/CVE-2024-38597
• eth: sungem: remove .ndo_poll_controller to avoid deadlocks
• CVE-url: https://ubuntu.com/security/CVE-2024-38553
• net: fec: remove .ndo_poll_controller to avoid deadlocks
• CVE-url: https://ubuntu.com/security/CVE-2024-41066
• ibmvnic: Add tx check to prevent skb leak
• CVE-url: https://ubuntu.com/security/CVE-2024-40982
• ssb: Fix potential NULL pointer dereference in ssb_device_uevent()
• CVE-url: https://ubuntu.com/security/CVE-2024-50154
• tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink().
• CVE-url: https://ubuntu.com/security/CVE-2024-56595
• jfs: add a check to prevent array-index-out-of-bounds in dbAdjTree
• CVE-url: https://ubuntu.com/security/CVE-2024-57896
• btrfs: fix hang during unmount when stopping a space reclaim worker
• btrfs: wait for fixup workers before stopping cleaner kthread during umount
• btrfs: flush delalloc workers queue before stopping cleaner kthread during

unmount

• CVE-url: https://ubuntu.com/security/CVE-2024-56598
• jfs: array-index-out-of-bounds fix in dtReadFirst
• CVE-url: https://ubuntu.com/security/CVE-2024-56596
• jfs: fix array-index-out-of-bounds in jfs_readdir
• Bionic update: upstream stable patchset 2022-01-25 (LP: #1959033) // CVE-

url: https://ubuntu.com/security/CVE-2021-47485

• IB/qib: Protect from buffer overflow in struct qib_user_sdma_pkt fields
• CVE-url: https://ubuntu.com/security/CVE-2024-56602
• net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()
• CVE-url: https://ubuntu.com/security/CVE-2024-56601
• net: inet: do not leave a dangling sk pointer in inet_create()
• CVE-url: https://ubuntu.com/security/CVE-2024-56600
• sock: struct proto hash function may error
• net: inet6: do not leave a dangling sk pointer in inet6_create()
• CVE-url: https://ubuntu.com/security/CVE-2023-52818
• drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7
• CVE-url: https://ubuntu.com/security/CVE-2024-35887
• ax25: fix use-after-free bugs caused by ax25_ds_del_timer
• Bionic update: upstream stable patchset 2021-11-02 (LP: #1949512) // CVE-

url: https://ubuntu.com/security/CVE-2021-47404

• HID: betop: fix slab-out-of-bounds Write in betop_probe
• Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE-

url: https://ubuntu.com/security/CVE-2021-47254

• gfs2: Fix use-after-free in gfs2_glock_shrink_scan
• Bionic update: upstream stable patchset 2022-01-14 (LP: #1957957) // CVE-

url: https://ubuntu.com/security/CVE-2021-47506

• nfsd: fix use-after-free due to delegation race
• CVE-url: https://ubuntu.com/security/CVE-2024-56606
• af_packet: avoid erroring out after sock_init_data() in packet_create()
• CVE-url: https://ubuntu.com/security/CVE-2024-53141
• netfilter: ipset: add missing range check in bitmap_ip_uadt
• Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE-

url: https://ubuntu.com/security/CVE-2021-47280

• drm: Fix use-after-free read in drm_getunique()
• Bionic update: upstream stable patchset 2021-07-14 (LP: #1936231) // CVE-

url: https://ubuntu.com/security/CVE-2021-47235

• net: ethernet: fix potential use-after-free in ec_bhf_remove
• Bionic update: upstream stable patchset 2021-08-13 (LP: #1939913) // CVE-

url: https://ubuntu.com/security/CVE-2021-47309

• net: validate lwtstate->data before returning from skb_tunnel_info()
• Bionic update: upstream stable patchset 2022-01-06 (LP: #1956614) // CVE-

url: https://ubuntu.com/security/CVE-2021-47549

• sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
• CVE-url: https://ubuntu.com/security/CVE-2024-53165
• sh: intc: Fix use-after-free bug in register_intc_controller()
• CVE-url: https://ubuntu.com/security/CVE-2024-56603
• net: af_can: do not leave a dangling sk pointer in can_create()
• CVE-url: https://ubuntu.com/security/CVE-2024-53173
• NFSv4.0: Fix a use-after-free problem in the asynchronous open()
• Bionic update: upstream stable patchset 2022-01-11 (LP: #1957113) // CVE-

url: https://ubuntu.com/security/CVE-2021-47500

• iio: mma8452: Fix trigger reference couting
• CVE-url: https://ubuntu.com/security/CVE-2024-26996
• usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport

error

• Bionic update: upstream stable patchset 2021-12-03 (LP: #1953202) // CVE-

url: https://ubuntu.com/security/CVE-2021-47483

• regmap: Fix possible double-free in regcache_rbtree_exit()
• CVE-url: https://ubuntu.com/secur