{
"document":{
"aggregate_severity":{
"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
"text":"Critical"
},
"category":"csaf_vex",
"csaf_version":"2.0",
"distribution":{
"tlp":{
"label":"WHITE",
"url":"https:/www.first.org/tlp/"
}
},
"lang":"en",
"notes":[
{
"text":"kernel security update",
"category":"general",
"title":"Synopsis"
},
{
"text":"An update for kernel is now available for openEuler-22.03-LTS-SP3",
"category":"general",
"title":"Summary"
},
{
"text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nlib/generic-radix-tree.c: Don't overflow in peek()\n\nWhen we started spreading new inode numbers throughout most of the 64\nbit inode space, that triggered some corner case bugs, in particular\nsome integer overflows related to the radix tree code. Oops.(CVE-2021-47432)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: Fix a deadlock in the error handler\n\nThe following deadlock has been observed on a test setup:\n\n - All tags allocated\n\n - The SCSI error handler calls ufshcd_eh_host_reset_handler()\n\n - ufshcd_eh_host_reset_handler() queues work that calls\n ufshcd_err_handler()\n\n - ufshcd_err_handler() locks up as follows:\n\nWorkqueue: ufs_eh_wq_0 ufshcd_err_handler.cfi_jt\nCall trace:\n __switch_to+0x298/0x5d8\n __schedule+0x6cc/0xa94\n schedule+0x12c/0x298\n blk_mq_get_tag+0x210/0x480\n __blk_mq_alloc_request+0x1c8/0x284\n blk_get_request+0x74/0x134\n ufshcd_exec_dev_cmd+0x68/0x640\n ufshcd_verify_dev_init+0x68/0x35c\n ufshcd_probe_hba+0x12c/0x1cb8\n ufshcd_host_reset_and_restore+0x88/0x254\n ufshcd_reset_and_restore+0xd0/0x354\n ufshcd_err_handler+0x408/0xc58\n process_one_work+0x24c/0x66c\n worker_thread+0x3e8/0xa4c\n kthread+0x150/0x1b4\n ret_from_fork+0x10/0x30\n\nFix this lockup by making ufshcd_exec_dev_cmd() allocate a reserved\nrequest.(CVE-2021-47622)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: seville: register the mdiobus under devres\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe Seville VSC9959 switch is a platform device, so the initial set of\nconstraints that I thought would cause this (I2C or SPI buses which call\n->remove on ->shutdown) do not apply. But there is one more which\napplies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the seville switch driver on shutdown.\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe seville driver has a code structure that could accommodate both the\nmdiobus_unregister and mdiobus_free calls, but it has an external\ndependency upon mscc_miim_setup() from mdio-mscc-miim.c, which calls\ndevm_mdiobus_alloc_size() on its behalf. So rather than restructuring\nthat, and exporting yet one more symbol mscc_miim_teardown(), let's work\nwith devres and replace of_mdiobus_register with the devres variant.\nWhen we use all-devres, we can ensure that devres doesn't free a\nstill-registered bus (it either runs both callbacks, or none).(CVE-2022-48814)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: lock against ->sock changing during sysfs read\n\n->sock can be set to NULL asynchronously unless ->recv_mutex is held.\nSo it is important to hold that mutex. Otherwise a sysfs read can\ntrigger an oops.\nCommit 17f09d3f619a (\"SUNRPC: Check if the xprt is connected before\nhandling sysfs reads\") appears to attempt to fix this problem, but it\nonly narrows the race window.(CVE-2022-48816)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix leaking sent_cmd skb\n\nsent_cmd memory is not freed before freeing hci_dev causing it to leak\nit contents.(CVE-2022-48844)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential deadlock when releasing mids\n\nAll release_mid() callers seem to hold a reference of @mid so there is\nno need to call kref_put(&mid->refcount, __release_mid) under\n@server->mid_lock spinlock. If they don't, then an use-after-free bug\nwould have occurred anyways.\n\nBy getting rid of such spinlock also fixes a potential deadlock as\nshown below\n\nCPU 0 CPU 1\n------------------------------------------------------------------\ncifs_demultiplex_thread() cifs_debug_data_proc_show()\n release_mid()\n spin_lock(&server->mid_lock);\n spin_lock(&cifs_tcp_ses_lock)\n\t\t\t\t spin_lock(&server->mid_lock)\n __release_mid()\n smb2_find_smb_tcon()\n spin_lock(&cifs_tcp_ses_lock) *deadlock*(CVE-2023-52757)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: config: fix iteration issue in 'usb_get_bos_descriptor()'\n\nThe BOS descriptor defines a root descriptor and is the base descriptor for\naccessing a family of related descriptors.\n\nFunction 'usb_get_bos_descriptor()' encounters an iteration issue when\nskipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in\nthe same descriptor being read repeatedly.\n\nTo address this issue, a 'goto' statement is introduced to ensure that the\npointer and the amount read is updated correctly. This ensures that the\nfunction iterates to the next descriptor instead of reading the same\ndescriptor repeatedly.(CVE-2023-52781)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nkeys: Fix overwrite of key expiration on instantiation\n\nThe expiry time of a key is unconditionally overwritten during\ninstantiation, defaulting to turn it permanent. This causes a problem\nfor DNS resolution as the expiration set by user-space is overwritten to\nTIME64_MAX, disabling further DNS updates. Fix this by restoring the\ncondition that key_set_expiry is only called when the pre-parser sets a\nspecific expiry.(CVE-2024-36031)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfs: Handle error of rpc_proc_register() in nfs_net_init().\n\nsyzkaller reported a warning [0] triggered while destroying immature\nnetns.\n\nrpc_proc_register() was called in init_nfs_fs(), but its error\nhas been ignored since at least the initial commit 1da177e4c3f4\n(\"Linux-2.6.12-rc2\").\n\nRecently, commit d47151b79e32 (\"nfs: expose /proc/net/sunrpc/nfs\nin net namespaces\") converted the procfs to per-netns and made\nthe problem more visible.\n\nEven when rpc_proc_register() fails, nfs_net_init() could succeed,\nand thus nfs_net_exit() will be called while destroying the netns.\n\nThen, remove_proc_entry() will be called for non-existing proc\ndirectory and trigger the warning below.\n\nLet's handle the error of rpc_proc_register() properly in nfs_net_init().\n\n[0]:\nname 'nfs'\nWARNING: CPU: 1 PID: 1710 at fs/proc/generic.c:711 remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711\nModules linked in:\nCPU: 1 PID: 1710 Comm: syz-executor.2 Not tainted 6.8.0-12822-gcd51db110a7e #12\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nRIP: 0010:remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711\nCode: 41 5d 41 5e c3 e8 85 09 b5 ff 48 c7 c7 88 58 64 86 e8 09 0e 71 02 e8 74 09 b5 ff 4c 89 e6 48 c7 c7 de 1b 80 84 e8 c5 ad 97 ff <0f> 0b eb b1 e8 5c 09 b5 ff 48 c7 c7 88 58 64 86 e8 e0 0d 71 02 eb\nRSP: 0018:ffffc9000c6d7ce0 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff8880422b8b00 RCX: ffffffff8110503c\nRDX: ffff888030652f00 RSI: ffffffff81105045 RDI: 0000000000000001\nRBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000001 R11: ffffffff81bb62cb R12: ffffffff84807ffc\nR13: ffff88804ad6fcc0 R14: ffffffff84807ffc R15: ffffffff85741ff8\nFS: 00007f30cfba8640(0000) GS:ffff88807dd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007ff51afe8000 CR3: 000000005a60a005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \n rpc_proc_unregister+0x64/0x70 net/sunrpc/stats.c:310\n nfs_net_exit+0x1c/0x30 fs/nfs/inode.c:2438\n ops_exit_list+0x62/0xb0 net/core/net_namespace.c:170\n setup_net+0x46c/0x660 net/core/net_namespace.c:372\n copy_net_ns+0x244/0x590 net/core/net_namespace.c:505\n create_new_namespaces+0x2ed/0x770 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0xae/0x160 kernel/nsproxy.c:228\n ksys_unshare+0x342/0x760 kernel/fork.c:3322\n __do_sys_unshare kernel/fork.c:3393 [inline]\n __se_sys_unshare kernel/fork.c:3391 [inline]\n __x64_sys_unshare+0x1f/0x30 kernel/fork.c:3391\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x4f/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x46/0x4e\nRIP: 0033:0x7f30d0febe5d\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48\nRSP: 002b:00007f30cfba7cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110\nRAX: ffffffffffffffda RBX: 00000000004bbf80 RCX: 00007f30d0febe5d\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c020600\nRBP: 00000000004bbf80 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002\nR13: 000000000000000b R14: 00007f30d104c530 R15: 0000000000000000\n (CVE-2024-36939)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Ensure the copied buf is NUL terminated\n\nCurrently, we allocate a count-sized kernel buffer and copy count from\nuserspace to that buffer. Later, we use kstrtouint on this buffer but we\ndon't ensure that the string is terminated inside the buffer, this can\nlead to OOB read when using kstrtouint. Fix this issue by using\nmemdup_user_nul instead of memdup_user.(CVE-2024-38559)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/perf: hisi: hns3: Fix out-of-bound access when valid event group\n\nThe perf tool allows users to create event groups through following\ncmd [1], but the driver does not check whether the array index is out\nof bounds when writing data to the event_group array. If the number of\nevents in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the\nmemory write overflow of event_group array occurs.\n\nAdd array index check to fix the possible array out of bounds violation,\nand return directly when write new events are written to array bounds.\n\nThere are 9 different events in an event_group.\n[1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}(CVE-2024-38568)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: Fix buffer size for tag 66 packet\n\nThe 'TAG 66 Packet Format' description is missing the cipher code and\nchecksum fields that are packed into the message packet. As a result,\nthe buffer allocated for the packet is 3 bytes too small and\nwrite_tag_66_packet() will write up to 3 bytes past the end of the\nbuffer.\n\nFix this by increasing the size of the allocation so the whole packet\nwill always fit in the buffer.\n\nThis fixes the below kasan slab-out-of-bounds bug:\n\n BUG: KASAN: slab-out-of-bounds in ecryptfs_generate_key_packet_set+0x7d6/0xde0\n Write of size 1 at addr ffff88800afbb2a5 by task touch/181\n\n CPU: 0 PID: 181 Comm: touch Not tainted 6.6.13-gnu #1 4c9534092be820851bb687b82d1f92a426598dc6\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2/GNU Guix 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x4c/0x70\n print_report+0xc5/0x610\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n ? kasan_complete_mode_report_info+0x44/0x210\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n kasan_report+0xc2/0x110\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n __asan_store1+0x62/0x80\n ecryptfs_generate_key_packet_set+0x7d6/0xde0\n ? __pfx_ecryptfs_generate_key_packet_set+0x10/0x10\n ? __alloc_pages+0x2e2/0x540\n ? __pfx_ovl_open+0x10/0x10 [overlay 30837f11141636a8e1793533a02e6e2e885dad1d]\n ? dentry_open+0x8f/0xd0\n ecryptfs_write_metadata+0x30a/0x550\n ? __pfx_ecryptfs_write_metadata+0x10/0x10\n ? ecryptfs_get_lower_file+0x6b/0x190\n ecryptfs_initialize_file+0x77/0x150\n ecryptfs_create+0x1c2/0x2f0\n path_openat+0x17cf/0x1ba0\n ? __pfx_path_openat+0x10/0x10\n do_filp_open+0x15e/0x290\n ? __pfx_do_filp_open+0x10/0x10\n ? __kasan_check_write+0x18/0x30\n ? _raw_spin_lock+0x86/0xf0\n ? __pfx__raw_spin_lock+0x10/0x10\n ? __kasan_check_write+0x18/0x30\n ? alloc_fd+0xf4/0x330\n do_sys_openat2+0x122/0x160\n ? __pfx_do_sys_openat2+0x10/0x10\n __x64_sys_openat+0xef/0x170\n ? __pfx___x64_sys_openat+0x10/0x10\n do_syscall_64+0x60/0xd0\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n RIP: 0033:0x7f00a703fd67\n Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f\n RSP: 002b:00007ffc088e30b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101\n RAX: ffffffffffffffda RBX: 00007ffc088e3368 RCX: 00007f00a703fd67\n RDX: 0000000000000941 RSI: 00007ffc088e48d7 RDI: 00000000ffffff9c\n RBP: 00007ffc088e48d7 R08: 0000000000000001 R09: 0000000000000000\n R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000941\n R13: 0000000000000000 R14: 00007ffc088e48d7 R15: 00007f00a7180040\n \n\n Allocated by task 181:\n kasan_save_stack+0x2f/0x60\n kasan_set_track+0x29/0x40\n kasan_save_alloc_info+0x25/0x40\n __kasan_kmalloc+0xc5/0xd0\n __kmalloc+0x66/0x160\n ecryptfs_generate_key_packet_set+0x6d2/0xde0\n ecryptfs_write_metadata+0x30a/0x550\n ecryptfs_initialize_file+0x77/0x150\n ecryptfs_create+0x1c2/0x2f0\n path_openat+0x17cf/0x1ba0\n do_filp_open+0x15e/0x290\n do_sys_openat2+0x122/0x160\n __x64_sys_openat+0xef/0x170\n do_syscall_64+0x60/0xd0\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8(CVE-2024-38578)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: fix possible dead-lock in nr_rt_ioctl()\n\nsyzbot loves netrom, and found a possible deadlock in nr_rt_ioctl [1]\n\nMake sure we always acquire nr_node_list_lock before nr_node_lock(nr_node)\n\n[1]\nWARNING: possible circular locking dependency detected\n6.9.0-rc7-syzkaller-02147-g654de42f3fc6 #0 Not tainted\n------------------------------------------------------\nsyz-executor350/5129 is trying to acquire lock:\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_node_lock include/net/netrom.h:152 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:464 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x1bb/0x1090 net/netrom/nr_route.c:697\n\nbut task is already holding lock:\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:462 [inline]\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0x10a/0x1090 net/netrom/nr_route.c:697\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #1 (nr_node_list_lock){+...}-{2:2}:\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754\n __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]\n _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178\n spin_lock_bh include/linux/spinlock.h:356 [inline]\n nr_remove_node net/netrom/nr_route.c:299 [inline]\n nr_del_node+0x4b4/0x820 net/netrom/nr_route.c:355\n nr_rt_ioctl+0xa95/0x1090 net/netrom/nr_route.c:683\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n-> #0 (&nr_node->node_lock){+...}-{2:2}:\n check_prev_add kernel/locking/lockdep.c:3134 [inline]\n check_prevs_add kernel/locking/lockdep.c:3253 [inline]\n validate_chain+0x18cb/0x58e0 kernel/locking/lockdep.c:3869\n __lock_acquire+0x1346/0x1fd0 kernel/locking/lockdep.c:5137\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754\n __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]\n _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178\n spin_lock_bh include/linux/spinlock.h:356 [inline]\n nr_node_lock include/net/netrom.h:152 [inline]\n nr_dec_obs net/netrom/nr_route.c:464 [inline]\n nr_rt_ioctl+0x1bb/0x1090 net/netrom/nr_route.c:697\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(nr_node_list_lock);\n lock(&nr_node->node_lock);\n lock(nr_node_list_lock);\n lock(&nr_node->node_lock);\n\n *** DEADLOCK ***\n\n1 lock held by syz-executor350/5129:\n #0: ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n #0: ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:462 [inline]\n #0: ffffffff8f70\n---truncated---(CVE-2024-38589)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: timer: Set lower bound of start tick time\n\nCurrently ALSA timer doesn't have the lower limit of the start tick\ntime, and it allows a very small size, e.g. 1 tick with 1ns resolution\nfor hrtimer. Such a situation may lead to an unexpected RCU stall,\nwhere the callback repeatedly queuing the expire update, as reported\nby fuzzer.\n\nThis patch introduces a sanity check of the timer start tick time, so\nthat the system returns an error when a too small start size is set.\nAs of this patch, the lower limit is hard-coded to 100us, which is\nsmall enough but can still work somehow.(CVE-2024-38618)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb-storage: alauda: Check whether the media is initialized\n\nThe member \"uzonesize\" of struct alauda_info will remain 0\nif alauda_init_media() fails, potentially causing divide errors\nin alauda_read_data() and alauda_write_lba().\n- Add a member \"media_initialized\" to struct alauda_info.\n- Change a condition in alauda_check_media() to ensure the\n first initialization.\n- Add an error check for the return value of alauda_init_media().(CVE-2024-38619)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n\nThe error handling in nilfs_empty_dir() when a directory folio/page read\nfails is incorrect, as in the old ext2 implementation, and if the\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\ndetermine the directory as empty and corrupt the file system.\n\nIn addition, since nilfs_empty_dir() does not immediately return on a\nfailed folio/page read, but continues to loop, this can cause a long loop\nwith I/O if i_size of the directory's inode is also corrupted, causing the\nlog writer thread to wait and hang, as reported by syzbot.\n\nFix these issues by making nilfs_empty_dir() immediately return a false\nvalue (0) if it fails to get a directory folio/page.(CVE-2024-39469)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: fix log recovery buffer allocation for the legacy h_size fixup\n\nCommit a70f9fe52daa (\"xfs: detect and handle invalid iclog size set by\nmkfs\") added a fixup for incorrect h_size values used for the initial\numount record in old xfsprogs versions. Later commit 0c771b99d6c9\n(\"xfs: clean up calculation of LR header blocks\") cleaned up the log\nreover buffer calculation, but stoped using the fixed up h_size value\nto size the log recovery buffer, which can lead to an out of bounds\naccess when the incorrect h_size does not come from the old mkfs\ntool, but a fuzzer.\n\nFix this by open coding xlog_logrec_hblks and taking the fixed h_size\ninto account for this calculation.(CVE-2024-39472)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nima: Fix use-after-free on a dentry's dname.name\n\n->d_name.name can change on rename and the earlier value can be freed;\nthere are conditions sufficient to stabilize it (->d_lock on dentry,\n->d_lock on its parent, ->i_rwsem exclusive on the parent's inode,\nrename_lock), but none of those are met at any of the sites. Take a stable\nsnapshot of the name instead.(CVE-2024-39494)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvmci: prevent speculation leaks by sanitizing event in event_deliver()\n\nCoverity spotted that event_msg is controlled by user-space,\nevent_msg->event_data.event is passed to event_deliver() and used\nas an index without sanitization.\n\nThis change ensures that the event index is sanitized to mitigate any\npossibility of speculative information leaks.\n\nThis bug was discovered and resolved using Coverity Static Analysis\nSecurity Testing (SAST) by Synopsys, Inc.\n\nOnly compile tested, no access to HW.(CVE-2024-39499)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/komeda: check for error-valued pointer\n\nkomeda_pipeline_get_state() may return an error-valued pointer, thus\ncheck the pointer for negative or null value before dereferencing.(CVE-2024-39505)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages\n\nThe syzbot fuzzer found that the interrupt-URB completion callback in\nthe cdc-wdm driver was taking too long, and the driver's immediate\nresubmission of interrupt URBs with -EPROTO status combined with the\ndummy-hcd emulation to cause a CPU lockup:\n\ncdc_wdm 1-1:1.0: nonzero urb status received: -71\ncdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes\nwatchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor782:6625]\nCPU#0 Utilization every 4s during lockup:\n\t#1: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#2: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#3: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#4: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#5: 98% system,\t 1% softirq,\t 3% hardirq,\t 0% idle\nModules linked in:\nirq event stamp: 73096\nhardirqs last enabled at (73095): [] console_emit_next_record kernel/printk/printk.c:2935 [inline]\nhardirqs last enabled at (73095): [] console_flush_all+0x650/0xb74 kernel/printk/printk.c:2994\nhardirqs last disabled at (73096): [] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]\nhardirqs last disabled at (73096): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551\nsoftirqs last enabled at (73048): [] softirq_handle_end kernel/softirq.c:400 [inline]\nsoftirqs last enabled at (73048): [] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582\nsoftirqs last disabled at (73043): [] __do_softirq+0x14/0x20 kernel/softirq.c:588\nCPU: 0 PID: 6625 Comm: syz-executor782 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\n\nTesting showed that the problem did not occur if the two error\nmessages -- the first two lines above -- were removed; apparently adding\nmaterial to the kernel log takes a surprisingly large amount of time.\n\nIn any case, the best approach for preventing these lockups and to\navoid spamming the log with thousands of error messages per second is\nto ratelimit the two dev_err() calls. Therefore we replace them with\ndev_err_ratelimited().(CVE-2024-40904)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix possible race in __fib6_drop_pcpu_from()\n\nsyzbot found a race in __fib6_drop_pcpu_from() [1]\n\nIf compiler reads more than once (*ppcpu_rt),\nsecond read could read NULL, if another cpu clears\nthe value in rt6_get_pcpu_route().\n\nAdd a READ_ONCE() to prevent this race.\n\nAlso add rcu_read_lock()/rcu_read_unlock() because\nwe rely on RCU protection while dereferencing pcpu_rt.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097]\nCPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\nWorkqueue: netns cleanup_net\n RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984\nCode: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48\nRSP: 0018:ffffc900040df070 EFLAGS: 00010206\nRAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16\nRDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091\nRBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007\nR10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8\nR13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001\nFS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline]\n fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline]\n fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038\n fib6_del_route net/ipv6/ip6_fib.c:1998 [inline]\n fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043\n fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205\n fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127\n fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175\n fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255\n __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271\n rt6_sync_down_dev net/ipv6/route.c:4906 [inline]\n rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911\n addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855\n addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778\n notifier_call_chain+0xb9/0x410 kernel/notifier.c:93\n call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992\n call_netdevice_notifiers_extack net/core/dev.c:2030 [inline]\n call_netdevice_notifiers net/core/dev.c:2044 [inline]\n dev_close_many+0x333/0x6a0 net/core/dev.c:1585\n unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193\n unregister_netdevice_many net/core/dev.c:11276 [inline]\n default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759\n ops_exit_list+0x128/0x180 net/core/net_namespace.c:178\n cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n process_scheduled_works kernel/workqueue.c:3312 [inline]\n worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393\n kthread+0x2c1/0x3a0 kernel/kthread.c:389\n ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244(CVE-2024-40905)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()\n\nThe ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to\nsynchronizes with ieee80211_tx_h_unicast_ps_buf() which is called from\nsoftirq context. However using only spin_lock() to get sta->ps_lock in\nieee80211_sta_ps_deliver_wakeup() does not prevent softirq to execute\non this same CPU, to run ieee80211_tx_h_unicast_ps_buf() and try to\ntake this same lock ending in deadlock. Below is an example of rcu stall\nthat arises in such situation.\n\n rcu: INFO: rcu_sched self-detected stall on CPU\n rcu: 2-....: (42413413 ticks this GP) idle=b154/1/0x4000000000000000 softirq=1763/1765 fqs=21206996\n rcu: (t=42586894 jiffies g=2057 q=362405 ncpus=4)\n CPU: 2 PID: 719 Comm: wpa_supplicant Tainted: G W 6.4.0-02158-g1b062f552873 #742\n Hardware name: RPT (r1) (DT)\n pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : queued_spin_lock_slowpath+0x58/0x2d0\n lr : invoke_tx_handlers_early+0x5b4/0x5c0\n sp : ffff00001ef64660\n x29: ffff00001ef64660 x28: ffff000009bc1070 x27: ffff000009bc0ad8\n x26: ffff000009bc0900 x25: ffff00001ef647a8 x24: 0000000000000000\n x23: ffff000009bc0900 x22: ffff000009bc0900 x21: ffff00000ac0e000\n x20: ffff00000a279e00 x19: ffff00001ef646e8 x18: 0000000000000000\n x17: ffff800016468000 x16: ffff00001ef608c0 x15: 0010533c93f64f80\n x14: 0010395c9faa3946 x13: 0000000000000000 x12: 00000000fa83b2da\n x11: 000000012edeceea x10: ffff0000010fbe00 x9 : 0000000000895440\n x8 : 000000000010533c x7 : ffff00000ad8b740 x6 : ffff00000c350880\n x5 : 0000000000000007 x4 : 0000000000000001 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff00000ac0e0e8\n Call trace:\n queued_spin_lock_slowpath+0x58/0x2d0\n ieee80211_tx+0x80/0x12c\n ieee80211_tx_pending+0x110/0x278\n tasklet_action_common.constprop.0+0x10c/0x144\n tasklet_action+0x20/0x28\n _stext+0x11c/0x284\n ____do_softirq+0xc/0x14\n call_on_irq_stack+0x24/0x34\n do_softirq_own_stack+0x18/0x20\n do_softirq+0x74/0x7c\n __local_bh_enable_ip+0xa0/0xa4\n _ieee80211_wake_txqs+0x3b0/0x4b8\n __ieee80211_wake_queue+0x12c/0x168\n ieee80211_add_pending_skbs+0xec/0x138\n ieee80211_sta_ps_deliver_wakeup+0x2a4/0x480\n ieee80211_mps_sta_status_update.part.0+0xd8/0x11c\n ieee80211_mps_sta_status_update+0x18/0x24\n sta_apply_parameters+0x3bc/0x4c0\n ieee80211_change_station+0x1b8/0x2dc\n nl80211_set_station+0x444/0x49c\n genl_family_rcv_msg_doit.isra.0+0xa4/0xfc\n genl_rcv_msg+0x1b0/0x244\n netlink_rcv_skb+0x38/0x10c\n genl_rcv+0x34/0x48\n netlink_unicast+0x254/0x2bc\n netlink_sendmsg+0x190/0x3b4\n ____sys_sendmsg+0x1e8/0x218\n ___sys_sendmsg+0x68/0x8c\n __sys_sendmsg+0x44/0x84\n __arm64_sys_sendmsg+0x20/0x28\n do_el0_svc+0x6c/0xe8\n el0_svc+0x14/0x48\n el0t_64_sync_handler+0xb0/0xb4\n el0t_64_sync+0x14c/0x150\n\nUsing spin_lock_bh()/spin_unlock_bh() instead prevents softirq to raise\non the same CPU that is holding the lock.(CVE-2024-40912)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: check n_ssids before accessing the ssids\n\nIn some versions of cfg80211, the ssids poinet might be a valid one even\nthough n_ssids is 0. Accessing the pointer in this case will cuase an\nout-of-bound access. Fix this by checking n_ssids first.(CVE-2024-40929)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/exynos/vidi: fix memory leak in .get_modes()\n\nThe duplicated EDID is never freed. Fix it.(CVE-2024-40932)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: don't read past the mfuart notifcation\n\nIn case the firmware sends a notification that claims it has more data\nthan it has, we will read past that was allocated for the notification.\nRemove the print of the buffer, we won't see it by default. If needed,\nwe can see the content with tracing.\n\nThis was reported by KFENCE.(CVE-2024-40941)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix races between hole punching and AIO+DIO\n\nAfter commit \"ocfs2: return real error code in ocfs2_dio_wr_get_block\",\nfstests/generic/300 become from always failed to sometimes failed:\n\n========================================================================\n[ 473.293420 ] run fstests generic/300\n\n[ 475.296983 ] JBD2: Ignoring recovery information on journal\n[ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode.\n[ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found\n[ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.\n[ 494.292018 ] OCFS2: File system is now read-only.\n[ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30\n[ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3\nfio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072\n=========================================================================\n\nIn __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten\nextents to a list. extents are also inserted into extent tree in\nocfs2_write_begin_nolock. Then another thread call fallocate to puch a\nhole at one of the unwritten extent. The extent at cpos was removed by\nocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list\nfound there is no such extent at the cpos.\n\n T1 T2 T3\n inode lock\n ...\n insert extents\n ...\n inode unlock\nocfs2_fallocate\n __ocfs2_change_file_space\n inode lock\n lock ip_alloc_sem\n ocfs2_remove_inode_range inode\n ocfs2_remove_btree_range\n ocfs2_remove_extent\n ^---remove the extent at cpos 78723\n ...\n unlock ip_alloc_sem\n inode unlock\n ocfs2_dio_end_io\n ocfs2_dio_end_io_write\n lock ip_alloc_sem\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_search_extent_list\n ^---failed to find extent\n ...\n unlock ip_alloc_sem\n\nIn most filesystems, fallocate is not compatible with racing with AIO+DIO,\nso fix it by adding to wait for all dio before fallocate/punch_hole like\next4.(CVE-2024-40943)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nMIPS: Octeon: Add PCIe link status check\n\nThe standard PCIe configuration read-write interface is used to\naccess the configuration space of the peripheral PCIe devices\nof the mips processor after the PCIe link surprise down, it can\ngenerate kernel panic caused by \"Data bus error\". So it is\nnecessary to add PCIe link status check for system protection.\nWhen the PCIe link is down or in training, assigning a value\nof 0 to the configuration address can prevent read-write behavior\nto the configuration space of peripheral PCIe devices, thereby\npreventing kernel panic.(CVE-2024-40968)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Enforce hcall result buffer validity and size\n\nplpar_hcall(), plpar_hcall9(), and related functions expect callers to\nprovide valid result buffers of certain minimum size. Currently this\nis communicated only through comments in the code and the compiler has\nno idea.\n\nFor example, if I write a bug like this:\n\n long retbuf[PLPAR_HCALL_BUFSIZE]; // should be PLPAR_HCALL9_BUFSIZE\n plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, ...);\n\nThis compiles with no diagnostics emitted, but likely results in stack\ncorruption at runtime when plpar_hcall9() stores results past the end\nof the array. (To be clear this is a contrived example and I have not\nfound a real instance yet.)\n\nTo make this class of error less likely, we can use explicitly-sized\narray parameters instead of pointers in the declarations for the hcall\nAPIs. When compiled with -Warray-bounds[1], the code above now\nprovokes a diagnostic like this:\n\nerror: array argument is too small;\nis of size 32, callee requires at least 72 [-Werror,-Warray-bounds]\n 60 | plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf,\n | ^ ~~~~~~\n\n[1] Enabled for LLVM builds but not GCC for now. See commit\n 0da6e5fd6c37 (\"gcc: disable '-Warray-bounds' for gcc-13 too\") and\n related changes.(CVE-2024-40974)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntipc: force a dst refcount before doing decryption\n\nAs it says in commit 3bc07321ccc2 (\"xfrm: Force a dst refcount before\nentering the xfrm type handlers\"):\n\n\"Crypto requests might return asynchronous. In this case we leave the\n rcu protected region, so force a refcount on the skb's destination\n entry before we enter the xfrm type input/output handlers.\"\n\nOn TIPC decryption path it has the same problem, and skb_dst_force()\nshould be called before doing decryption to avoid a possible crash.\n\nShuang reported this issue when this warning is triggered:\n\n [] WARNING: include/net/dst.h:337 tipc_sk_rcv+0x1055/0x1ea0 [tipc]\n [] Kdump: loaded Tainted: G W --------- - - 4.18.0-496.el8.x86_64+debug\n [] Workqueue: crypto cryptd_queue_worker\n [] RIP: 0010:tipc_sk_rcv+0x1055/0x1ea0 [tipc]\n [] Call Trace:\n [] tipc_sk_mcast_rcv+0x548/0xea0 [tipc]\n [] tipc_rcv+0xcf5/0x1060 [tipc]\n [] tipc_aead_decrypt_done+0x215/0x2e0 [tipc]\n [] cryptd_aead_crypt+0xdb/0x190\n [] cryptd_queue_worker+0xed/0x190\n [] process_one_work+0x93d/0x17e0(CVE-2024-40983)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Revert \"ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.\"\n\nUndo the modifications made in commit d410ee5109a1 (\"ACPICA: avoid\n\"Info: mapping multiple BARs. Your kernel is fine.\"\"). The initial\npurpose of this commit was to stop memory mappings for operation\nregions from overlapping page boundaries, as it can trigger warnings\nif different page attributes are present.\n\nHowever, it was found that when this situation arises, mapping\ncontinues until the boundary's end, but there is still an attempt to\nread/write the entire length of the map, leading to a NULL pointer\ndeference. For example, if a four-byte mapping request is made but\nonly one byte is mapped because it hits the current page boundary's\nend, a four-byte read/write attempt is still made, resulting in a NULL\npointer deference.\n\nInstead, map the entire length, as the ACPI specification does not\nmandate that it must be within the same page boundary. It is\npermissible for it to be mapped across different regions.(CVE-2024-40984)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix UBSAN warning in kv_dpm.c\n\nAdds bounds check for sumo_vid_mapping_entry.(CVE-2024-40987)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Build event generation tests only as modules\n\nThe kprobes and synth event generation test modules add events and lock\n(get a reference) those event file reference in module init function,\nand unlock and delete it in module exit function. This is because those\nare designed for playing as modules.\n\nIf we make those modules as built-in, those events are left locked in the\nkernel, and never be removed. This causes kprobe event self-test failure\nas below.\n\n[ 97.349708] ------------[ cut here ]------------\n[ 97.353453] WARNING: CPU: 3 PID: 1 at kernel/trace/trace_kprobe.c:2133 kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.357106] Modules linked in:\n[ 97.358488] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.9.0-g699646734ab5-dirty #14\n[ 97.361556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 97.363880] RIP: 0010:kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.365538] Code: a8 24 08 82 e9 ae fd ff ff 90 0f 0b 90 48 c7 c7 e5 aa 0b 82 e9 ee fc ff ff 90 0f 0b 90 48 c7 c7 2d 61 06 82 e9 8e fd ff ff 90 <0f> 0b 90 48 c7 c7 33 0b 0c 82 89 c6 e8 6e 03 1f ff 41 ff c7 e9 90\n[ 97.370429] RSP: 0000:ffffc90000013b50 EFLAGS: 00010286\n[ 97.371852] RAX: 00000000fffffff0 RBX: ffff888005919c00 RCX: 0000000000000000\n[ 97.373829] RDX: ffff888003f40000 RSI: ffffffff8236a598 RDI: ffff888003f40a68\n[ 97.375715] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\n[ 97.377675] R10: ffffffff811c9ae5 R11: ffffffff8120c4e0 R12: 0000000000000000\n[ 97.379591] R13: 0000000000000001 R14: 0000000000000015 R15: 0000000000000000\n[ 97.381536] FS: 0000000000000000(0000) GS:ffff88807dcc0000(0000) knlGS:0000000000000000\n[ 97.383813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 97.385449] CR2: 0000000000000000 CR3: 0000000002244000 CR4: 00000000000006b0\n[ 97.387347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 97.389277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 97.391196] Call Trace:\n[ 97.391967] \n[ 97.392647] ? __warn+0xcc/0x180\n[ 97.393640] ? kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.395181] ? report_bug+0xbd/0x150\n[ 97.396234] ? handle_bug+0x3e/0x60\n[ 97.397311] ? exc_invalid_op+0x1a/0x50\n[ 97.398434] ? asm_exc_invalid_op+0x1a/0x20\n[ 97.399652] ? trace_kprobe_is_busy+0x20/0x20\n[ 97.400904] ? tracing_reset_all_online_cpus+0x15/0x90\n[ 97.402304] ? kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.403773] ? init_kprobe_trace+0x50/0x50\n[ 97.404972] do_one_initcall+0x112/0x240\n[ 97.406113] do_initcall_level+0x95/0xb0\n[ 97.407286] ? kernel_init+0x1a/0x1a0\n[ 97.408401] do_initcalls+0x3f/0x70\n[ 97.409452] kernel_init_freeable+0x16f/0x1e0\n[ 97.410662] ? rest_init+0x1f0/0x1f0\n[ 97.411738] kernel_init+0x1a/0x1a0\n[ 97.412788] ret_from_fork+0x39/0x50\n[ 97.413817] ? rest_init+0x1f0/0x1f0\n[ 97.414844] ret_from_fork_asm+0x11/0x20\n[ 97.416285] \n[ 97.417134] irq event stamp: 13437323\n[ 97.418376] hardirqs last enabled at (13437337): [] console_unlock+0x11c/0x150\n[ 97.421285] hardirqs last disabled at (13437370): [] console_unlock+0x101/0x150\n[ 97.423838] softirqs last enabled at (13437366): [] handle_softirqs+0x23f/0x2a0\n[ 97.426450] softirqs last disabled at (13437393): [] __irq_exit_rcu+0x66/0xd0\n[ 97.428850] ---[ end trace 0000000000000000 ]---\n\nAnd also, since we can not cleanup dynamic_event file, ftracetest are\nfailed too.\n\nTo avoid these issues, build these tests only as modules.(CVE-2024-41004)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: Fix race condition in netpoll_owner_active\n\nKCSAN detected a race condition in netpoll:\n\n\tBUG: KCSAN: data-race in net_rx_action / netpoll_send_skb\n\twrite (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10:\n\tnet_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822)\n\n\tread to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2:\n\tnetpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393)\n\tnetpoll_send_udp (net/core/netpoll.c:?)\n\n\tvalue changed: 0x0000000a -> 0xffffffff\n\nThis happens because netpoll_owner_active() needs to check if the\ncurrent CPU is the owner of the lock, touching napi->poll_owner\nnon atomically. The ->poll_owner field contains the current CPU holding\nthe lock.\n\nUse an atomic read to check if the poll owner is the current CPU.(CVE-2024-41005)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntcp: avoid too many retransmit packets\n\nIf a TCP socket is using TCP_USER_TIMEOUT, and the other peer\nretracted its window to zero, tcp_retransmit_timer() can\nretransmit a packet every two jiffies (2 ms for HZ=1000),\nfor about 4 minutes after TCP_USER_TIMEOUT has 'expired'.\n\nThe fix is to make sure tcp_rtx_probe0_timed_out() takes\nicsk->icsk_user_timeout into account.\n\nBefore blamed commit, the socket would not timeout after\nicsk->icsk_user_timeout, but would use standard exponential\nbackoff for the retransmits.\n\nAlso worth noting that before commit e89688e3e978 (\"net: tcp:\nfix unexcepted socket die when snd_wnd is 0\"), the issue\nwould last 2 minutes instead of 4.(CVE-2024-41007)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix overrunning reservations in ringbuf\n\nThe BPF ring buffer internally is implemented as a power-of-2 sized circular\nbuffer, with two logical and ever-increasing counters: consumer_pos is the\nconsumer counter to show which logical position the consumer consumed the\ndata, and producer_pos which is the producer counter denoting the amount of\ndata reserved by all producers.\n\nEach time a record is reserved, the producer that \"owns\" the record will\nsuccessfully advance producer counter. In user space each time a record is\nread, the consumer of the data advanced the consumer counter once it finished\nprocessing. Both counters are stored in separate pages so that from user\nspace, the producer counter is read-only and the consumer counter is read-write.\n\nOne aspect that simplifies and thus speeds up the implementation of both\nproducers and consumers is how the data area is mapped twice contiguously\nback-to-back in the virtual memory, allowing to not take any special measures\nfor samples that have to wrap around at the end of the circular buffer data\narea, because the next page after the last data page would be first data page\nagain, and thus the sample will still appear completely contiguous in virtual\nmemory.\n\nEach record has a struct bpf_ringbuf_hdr { u32 len; u32 pg_off; } header for\nbook-keeping the length and offset, and is inaccessible to the BPF program.\nHelpers like bpf_ringbuf_reserve() return `(void *)hdr + BPF_RINGBUF_HDR_SZ`\nfor the BPF program to use. Bing-Jhong and Muhammad reported that it is however\npossible to make a second allocated memory chunk overlapping with the first\nchunk and as a result, the BPF program is now able to edit first chunk's\nheader.\n\nFor example, consider the creation of a BPF_MAP_TYPE_RINGBUF map with size\nof 0x4000. Next, the consumer_pos is modified to 0x3000 /before/ a call to\nbpf_ringbuf_reserve() is made. This will allocate a chunk A, which is in\n[0x0,0x3008], and the BPF program is able to edit [0x8,0x3008]. Now, lets\nallocate a chunk B with size 0x3000. This will succeed because consumer_pos\nwas edited ahead of time to pass the `new_prod_pos - cons_pos > rb->mask`\ncheck. Chunk B will be in range [0x3008,0x6010], and the BPF program is able\nto edit [0x3010,0x6010]. Due to the ring buffer memory layout mentioned\nearlier, the ranges [0x0,0x4000] and [0x4000,0x8000] point to the same data\npages. This means that chunk B at [0x4000,0x4008] is chunk A's header.\nbpf_ringbuf_submit() / bpf_ringbuf_discard() use the header's pg_off to then\nlocate the bpf_ringbuf itself via bpf_ringbuf_restore_from_rec(). Once chunk\nB modified chunk A's header, then bpf_ringbuf_commit() refers to the wrong\npage and could cause a crash.\n\nFix it by calculating the oldest pending_pos and check whether the range\nfrom the oldest outstanding record to the newest would span beyond the ring\nbuffer size. If that is the case, then reject the request. We've tested with\nthe ring buffer benchmark in BPF selftests (./benchs/run_bench_ringbufs.sh)\nbefore/after the fix and while it seems a bit slower on some benchmarks, it\nis still not significantly enough to matter.(CVE-2024-41009)",
"category":"general",
"title":"Description"
},
{
"text":"An update for kernel is now available for openEuler-22.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
"category":"general",
"title":"Topic"
},
{
"text":"Critical",
"category":"general",
"title":"Severity"
},
{
"text":"kernel",
"category":"general",
"title":"Affected Component"
}
],
"publisher":{
"issuing_authority":"openEuler security committee",
"name":"openEuler",
"namespace":"https://www.openeuler.org",
"contact_details":"openeuler-security@openeuler.org",
"category":"vendor"
},
"references":[
{
"summary":"openEuler-SA-2024-1894",
"category":"self",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
},
{
"summary":"CVE-2021-47432",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2021-47432&packageName=kernel"
},
{
"summary":"CVE-2021-47622",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2021-47622&packageName=kernel"
},
{
"summary":"CVE-2022-48814",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-48814&packageName=kernel"
},
{
"summary":"CVE-2022-48816",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-48816&packageName=kernel"
},
{
"summary":"CVE-2022-48844",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2022-48844&packageName=kernel"
},
{
"summary":"CVE-2023-52757",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-52757&packageName=kernel"
},
{
"summary":"CVE-2023-52781",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-52781&packageName=kernel"
},
{
"summary":"CVE-2024-36031",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-36031&packageName=kernel"
},
{
"summary":"CVE-2024-36939",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-36939&packageName=kernel"
},
{
"summary":"CVE-2024-38559",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38559&packageName=kernel"
},
{
"summary":"CVE-2024-38568",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38568&packageName=kernel"
},
{
"summary":"CVE-2024-38578",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38578&packageName=kernel"
},
{
"summary":"CVE-2024-38589",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38589&packageName=kernel"
},
{
"summary":"CVE-2024-38618",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38618&packageName=kernel"
},
{
"summary":"CVE-2024-38619",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-38619&packageName=kernel"
},
{
"summary":"CVE-2024-39469",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-39469&packageName=kernel"
},
{
"summary":"CVE-2024-39472",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-39472&packageName=kernel"
},
{
"summary":"CVE-2024-39494",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-39494&packageName=kernel"
},
{
"summary":"CVE-2024-39499",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-39499&packageName=kernel"
},
{
"summary":"CVE-2024-39505",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-39505&packageName=kernel"
},
{
"summary":"CVE-2024-40904",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40904&packageName=kernel"
},
{
"summary":"CVE-2024-40905",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40905&packageName=kernel"
},
{
"summary":"CVE-2024-40912",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40912&packageName=kernel"
},
{
"summary":"CVE-2024-40929",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40929&packageName=kernel"
},
{
"summary":"CVE-2024-40932",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40932&packageName=kernel"
},
{
"summary":"CVE-2024-40941",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40941&packageName=kernel"
},
{
"summary":"CVE-2024-40943",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40943&packageName=kernel"
},
{
"summary":"CVE-2024-40968",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40968&packageName=kernel"
},
{
"summary":"CVE-2024-40974",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40974&packageName=kernel"
},
{
"summary":"CVE-2024-40983",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40983&packageName=kernel"
},
{
"summary":"CVE-2024-40984",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40984&packageName=kernel"
},
{
"summary":"CVE-2024-40987",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-40987&packageName=kernel"
},
{
"summary":"CVE-2024-41004",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41004&packageName=kernel"
},
{
"summary":"CVE-2024-41005",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41005&packageName=kernel"
},
{
"summary":"CVE-2024-41007",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41007&packageName=kernel"
},
{
"summary":"CVE-2024-41009",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-41009&packageName=kernel"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47432"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-47622"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48814"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48816"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48844"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52757"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52781"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36031"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-36939"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38559"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38568"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38578"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38589"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38618"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-38619"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39469"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39472"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39494"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39499"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39505"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40904"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40905"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40912"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40929"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40932"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40941"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40943"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40968"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40974"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40983"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40984"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40987"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41004"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41005"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41007"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-41009"
},
{
"summary":"openEuler-SA-2024-1894 vex file",
"category":"self",
"url":"https://repo.openeuler.org/security/data/csaf/advisories/2024/csaf-openeuler-sa-2024-1894.json"
}
],
"title":"An update for kernel is now available for openEuler-22.03-LTS-SP3",
"tracking":{
"initial_release_date":"2024-07-26T20:58:40+08:00",
"revision_history":[
{
"date":"2024-07-26T20:58:40+08:00",
"summary":"Initial",
"number":"1.0.0"
},
{
"date":"2024-07-27T10:35:00+08:00",
"summary":"Current version",
"number":"2.0.0"
},
{
"date":"2024-08-19T17:35:45+08:00",
"summary":"final",
"number":"3.0.0"
}
],
"generator":{
"date":"2024-08-19T17:35:45+08:00",
"engine":{
"name":"openEuler CSAF Tool V1.0"
}
},
"current_release_date":"2024-08-19T17:35:45+08:00",
"id":"openEuler-SA-2024-1894",
"version":"3.0.0",
"status":"final"
}
},
"product_tree":{
"branches":[
{
"name":"openEuler",
"category":"vendor",
"branches":[
{
"name":"openEuler",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"openEuler-22.03-LTS-SP3",
"name":"openEuler-22.03-LTS-SP3"
},
"name":"openEuler-22.03-LTS-SP3",
"category":"product_version"
}
],
"category":"product_name"
},
{
"name":"aarch64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm"
},
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"src",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-220.0.0.123.oe2203sp3.src.rpm",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.src.rpm"
},
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.src.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"x86_64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm"
},
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"category":"product_version"
}
],
"category":"architecture"
}
]
}
],
"relationships":[
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-220.0.0.123.oe2203sp3.src.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.src as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"perf-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"name":"python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
}
]
},
"vulnerabilities":[
{
"cve":"CVE-2021-47432",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nlib/generic-radix-tree.c: Don't overflow in peek()\n\nWhen we started spreading new inode numbers throughout most of the 64\nbit inode space, that triggered some corner case bugs, in particular\nsome integer overflows related to the radix tree code. Oops.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2021-47432"
},
{
"cve":"CVE-2021-47622",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: ufs: Fix a deadlock in the error handler\n\nThe following deadlock has been observed on a test setup:\n\n - All tags allocated\n\n - The SCSI error handler calls ufshcd_eh_host_reset_handler()\n\n - ufshcd_eh_host_reset_handler() queues work that calls\n ufshcd_err_handler()\n\n - ufshcd_err_handler() locks up as follows:\n\nWorkqueue: ufs_eh_wq_0 ufshcd_err_handler.cfi_jt\nCall trace:\n __switch_to+0x298/0x5d8\n __schedule+0x6cc/0xa94\n schedule+0x12c/0x298\n blk_mq_get_tag+0x210/0x480\n __blk_mq_alloc_request+0x1c8/0x284\n blk_get_request+0x74/0x134\n ufshcd_exec_dev_cmd+0x68/0x640\n ufshcd_verify_dev_init+0x68/0x35c\n ufshcd_probe_hba+0x12c/0x1cb8\n ufshcd_host_reset_and_restore+0x88/0x254\n ufshcd_reset_and_restore+0xd0/0x354\n ufshcd_err_handler+0x408/0xc58\n process_one_work+0x24c/0x66c\n worker_thread+0x3e8/0xa4c\n kthread+0x150/0x1b4\n ret_from_fork+0x10/0x30\n\nFix this lockup by making ufshcd_exec_dev_cmd() allocate a reserved\nrequest.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.7,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2021-47622"
},
{
"cve":"CVE-2022-48814",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: seville: register the mdiobus under devres\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe Seville VSC9959 switch is a platform device, so the initial set of\nconstraints that I thought would cause this (I2C or SPI buses which call\n->remove on ->shutdown) do not apply. But there is one more which\napplies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the seville switch driver on shutdown.\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe seville driver has a code structure that could accommodate both the\nmdiobus_unregister and mdiobus_free calls, but it has an external\ndependency upon mscc_miim_setup() from mdio-mscc-miim.c, which calls\ndevm_mdiobus_alloc_size() on its behalf. So rather than restructuring\nthat, and exporting yet one more symbol mscc_miim_teardown(), let's work\nwith devres and replace of_mdiobus_register with the devres variant.\nWhen we use all-devres, we can ensure that devres doesn't free a\nstill-registered bus (it either runs both callbacks, or none).",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2022-48814"
},
{
"cve":"CVE-2022-48816",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: lock against ->sock changing during sysfs read\n\n->sock can be set to NULL asynchronously unless ->recv_mutex is held.\nSo it is important to hold that mutex. Otherwise a sysfs read can\ntrigger an oops.\nCommit 17f09d3f619a (\"SUNRPC: Check if the xprt is connected before\nhandling sysfs reads\") appears to attempt to fix this problem, but it\nonly narrows the race window.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.7,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2022-48816"
},
{
"cve":"CVE-2022-48844",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: hci_core: Fix leaking sent_cmd skb\n\nsent_cmd memory is not freed before freeing hci_dev causing it to leak\nit contents.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"LOW",
"baseScore":3.3,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Low",
"category":"impact"
}
],
"title":"CVE-2022-48844"
},
{
"cve":"CVE-2023-52757",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nsmb: client: fix potential deadlock when releasing mids\n\nAll release_mid() callers seem to hold a reference of @mid so there is\nno need to call kref_put(&mid->refcount, __release_mid) under\n@server->mid_lock spinlock. If they don't, then an use-after-free bug\nwould have occurred anyways.\n\nBy getting rid of such spinlock also fixes a potential deadlock as\nshown below\n\nCPU 0 CPU 1\n------------------------------------------------------------------\ncifs_demultiplex_thread() cifs_debug_data_proc_show()\n release_mid()\n spin_lock(&server->mid_lock);\n spin_lock(&cifs_tcp_ses_lock)\n\t\t\t\t spin_lock(&server->mid_lock)\n __release_mid()\n smb2_find_smb_tcon()\n spin_lock(&cifs_tcp_ses_lock) *deadlock*",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2023-52757"
},
{
"cve":"CVE-2023-52781",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: config: fix iteration issue in 'usb_get_bos_descriptor()'\n\nThe BOS descriptor defines a root descriptor and is the base descriptor for\naccessing a family of related descriptors.\n\nFunction 'usb_get_bos_descriptor()' encounters an iteration issue when\nskipping the 'USB_DT_DEVICE_CAPABILITY' descriptor type. This results in\nthe same descriptor being read repeatedly.\n\nTo address this issue, a 'goto' statement is introduced to ensure that the\npointer and the amount read is updated correctly. This ensures that the\nfunction iterates to the next descriptor instead of reading the same\ndescriptor repeatedly.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.3,
"vectorString":"CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2023-52781"
},
{
"cve":"CVE-2024-36031",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:keys: Fix overwrite of key expiration on instantiationThe expiry time of a key is unconditionally overwritten duringinstantiation, defaulting to turn it permanent. This causes a problemfor DNS resolution as the expiration set by user-space is overwritten toTIME64_MAX, disabling further DNS updates. Fix this by restoring thecondition that key_set_expiry is only called when the pre-parser sets aspecific expiry.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"CRITICAL",
"baseScore":9.8,
"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Critical",
"category":"impact"
}
],
"title":"CVE-2024-36031"
},
{
"cve":"CVE-2024-36939",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: Handle error of rpc_proc_register() in nfs_net_init().\n\nsyzkaller reported a warning [0] triggered while destroying immature\nnetns.\n\nrpc_proc_register() was called in init_nfs_fs(), but its error\nhas been ignored since at least the initial commit 1da177e4c3f4\n(\"Linux-2.6.12-rc2\").\n\nRecently, commit d47151b79e32 (\"nfs: expose /proc/net/sunrpc/nfs\nin net namespaces\") converted the procfs to per-netns and made\nthe problem more visible.\n\nEven when rpc_proc_register() fails, nfs_net_init() could succeed,\nand thus nfs_net_exit() will be called while destroying the netns.\n\nThen, remove_proc_entry() will be called for non-existing proc\ndirectory and trigger the warning below.\n\nLet's handle the error of rpc_proc_register() properly in nfs_net_init().\n\n[0]:\nname 'nfs'\nWARNING: CPU: 1 PID: 1710 at fs/proc/generic.c:711 remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711\nModules linked in:\nCPU: 1 PID: 1710 Comm: syz-executor.2 Not tainted 6.8.0-12822-gcd51db110a7e #12\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014\nRIP: 0010:remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711\nCode: 41 5d 41 5e c3 e8 85 09 b5 ff 48 c7 c7 88 58 64 86 e8 09 0e 71 02 e8 74 09 b5 ff 4c 89 e6 48 c7 c7 de 1b 80 84 e8 c5 ad 97 ff <0f> 0b eb b1 e8 5c 09 b5 ff 48 c7 c7 88 58 64 86 e8 e0 0d 71 02 eb\nRSP: 0018:ffffc9000c6d7ce0 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: ffff8880422b8b00 RCX: ffffffff8110503c\nRDX: ffff888030652f00 RSI: ffffffff81105045 RDI: 0000000000000001\nRBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000001 R11: ffffffff81bb62cb R12: ffffffff84807ffc\nR13: ffff88804ad6fcc0 R14: ffffffff84807ffc R15: ffffffff85741ff8\nFS: 00007f30cfba8640(0000) GS:ffff88807dd00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007ff51afe8000 CR3: 000000005a60a005 CR4: 0000000000770ef0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n \n rpc_proc_unregister+0x64/0x70 net/sunrpc/stats.c:310\n nfs_net_exit+0x1c/0x30 fs/nfs/inode.c:2438\n ops_exit_list+0x62/0xb0 net/core/net_namespace.c:170\n setup_net+0x46c/0x660 net/core/net_namespace.c:372\n copy_net_ns+0x244/0x590 net/core/net_namespace.c:505\n create_new_namespaces+0x2ed/0x770 kernel/nsproxy.c:110\n unshare_nsproxy_namespaces+0xae/0x160 kernel/nsproxy.c:228\n ksys_unshare+0x342/0x760 kernel/fork.c:3322\n __do_sys_unshare kernel/fork.c:3393 [inline]\n __se_sys_unshare kernel/fork.c:3391 [inline]\n __x64_sys_unshare+0x1f/0x30 kernel/fork.c:3391\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0x4f/0x110 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x46/0x4e\nRIP: 0033:0x7f30d0febe5d\nCode: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48\nRSP: 002b:00007f30cfba7cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110\nRAX: ffffffffffffffda RBX: 00000000004bbf80 RCX: 00007f30d0febe5d\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c020600\nRBP: 00000000004bbf80 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002\nR13: 000000000000000b R14: 00007f30d104c530 R15: 0000000000000000\n ",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.6,
"vectorString":"CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-36939"
},
{
"cve":"CVE-2024-38559",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Ensure the copied buf is NUL terminated\n\nCurrently, we allocate a count-sized kernel buffer and copy count from\nuserspace to that buffer. Later, we use kstrtouint on this buffer but we\ndon't ensure that the string is terminated inside the buffer, this can\nlead to OOB read when using kstrtouint. Fix this issue by using\nmemdup_user_nul instead of memdup_user.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"HIGH",
"baseScore":7.8,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"High",
"category":"impact"
}
],
"title":"CVE-2024-38559"
},
{
"cve":"CVE-2024-38568",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/perf: hisi: hns3: Fix out-of-bound access when valid event group\n\nThe perf tool allows users to create event groups through following\ncmd [1], but the driver does not check whether the array index is out\nof bounds when writing data to the event_group array. If the number of\nevents in an event_group is greater than HNS3_PMU_MAX_HW_EVENTS, the\nmemory write overflow of event_group array occurs.\n\nAdd array index check to fix the possible array out of bounds violation,\nand return directly when write new events are written to array bounds.\n\nThere are 9 different events in an event_group.\n[1] perf stat -e '{pmu/event1/, ... ,pmu/event9/}",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":6.1,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-38568"
},
{
"cve":"CVE-2024-38578",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: Fix buffer size for tag 66 packet\n\nThe 'TAG 66 Packet Format' description is missing the cipher code and\nchecksum fields that are packed into the message packet. As a result,\nthe buffer allocated for the packet is 3 bytes too small and\nwrite_tag_66_packet() will write up to 3 bytes past the end of the\nbuffer.\n\nFix this by increasing the size of the allocation so the whole packet\nwill always fit in the buffer.\n\nThis fixes the below kasan slab-out-of-bounds bug:\n\n BUG: KASAN: slab-out-of-bounds in ecryptfs_generate_key_packet_set+0x7d6/0xde0\n Write of size 1 at addr ffff88800afbb2a5 by task touch/181\n\n CPU: 0 PID: 181 Comm: touch Not tainted 6.6.13-gnu #1 4c9534092be820851bb687b82d1f92a426598dc6\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2/GNU Guix 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x4c/0x70\n print_report+0xc5/0x610\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n ? kasan_complete_mode_report_info+0x44/0x210\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n kasan_report+0xc2/0x110\n ? ecryptfs_generate_key_packet_set+0x7d6/0xde0\n __asan_store1+0x62/0x80\n ecryptfs_generate_key_packet_set+0x7d6/0xde0\n ? __pfx_ecryptfs_generate_key_packet_set+0x10/0x10\n ? __alloc_pages+0x2e2/0x540\n ? __pfx_ovl_open+0x10/0x10 [overlay 30837f11141636a8e1793533a02e6e2e885dad1d]\n ? dentry_open+0x8f/0xd0\n ecryptfs_write_metadata+0x30a/0x550\n ? __pfx_ecryptfs_write_metadata+0x10/0x10\n ? ecryptfs_get_lower_file+0x6b/0x190\n ecryptfs_initialize_file+0x77/0x150\n ecryptfs_create+0x1c2/0x2f0\n path_openat+0x17cf/0x1ba0\n ? __pfx_path_openat+0x10/0x10\n do_filp_open+0x15e/0x290\n ? __pfx_do_filp_open+0x10/0x10\n ? __kasan_check_write+0x18/0x30\n ? _raw_spin_lock+0x86/0xf0\n ? __pfx__raw_spin_lock+0x10/0x10\n ? __kasan_check_write+0x18/0x30\n ? alloc_fd+0xf4/0x330\n do_sys_openat2+0x122/0x160\n ? __pfx_do_sys_openat2+0x10/0x10\n __x64_sys_openat+0xef/0x170\n ? __pfx___x64_sys_openat+0x10/0x10\n do_syscall_64+0x60/0xd0\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8\n RIP: 0033:0x7f00a703fd67\n Code: 25 00 00 41 00 3d 00 00 41 00 74 37 64 8b 04 25 18 00 00 00 85 c0 75 5b 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 0f 87 85 00 00 00 48 83 c4 68 5d 41 5c c3 0f 1f\n RSP: 002b:00007ffc088e30b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101\n RAX: ffffffffffffffda RBX: 00007ffc088e3368 RCX: 00007f00a703fd67\n RDX: 0000000000000941 RSI: 00007ffc088e48d7 RDI: 00000000ffffff9c\n RBP: 00007ffc088e48d7 R08: 0000000000000001 R09: 0000000000000000\n R10: 00000000000001b6 R11: 0000000000000246 R12: 0000000000000941\n R13: 0000000000000000 R14: 00007ffc088e48d7 R15: 00007f00a7180040\n \n\n Allocated by task 181:\n kasan_save_stack+0x2f/0x60\n kasan_set_track+0x29/0x40\n kasan_save_alloc_info+0x25/0x40\n __kasan_kmalloc+0xc5/0xd0\n __kmalloc+0x66/0x160\n ecryptfs_generate_key_packet_set+0x6d2/0xde0\n ecryptfs_write_metadata+0x30a/0x550\n ecryptfs_initialize_file+0x77/0x150\n ecryptfs_create+0x1c2/0x2f0\n path_openat+0x17cf/0x1ba0\n do_filp_open+0x15e/0x290\n do_sys_openat2+0x122/0x160\n __x64_sys_openat+0xef/0x170\n do_syscall_64+0x60/0xd0\n entry_SYSCALL_64_after_hwframe+0x6e/0xd8",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"LOW",
"baseScore":3.9,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Low",
"category":"impact"
}
],
"title":"CVE-2024-38578"
},
{
"cve":"CVE-2024-38589",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetrom: fix possible dead-lock in nr_rt_ioctl()\n\nsyzbot loves netrom, and found a possible deadlock in nr_rt_ioctl [1]\n\nMake sure we always acquire nr_node_list_lock before nr_node_lock(nr_node)\n\n[1]\nWARNING: possible circular locking dependency detected\n6.9.0-rc7-syzkaller-02147-g654de42f3fc6 #0 Not tainted\n------------------------------------------------------\nsyz-executor350/5129 is trying to acquire lock:\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_node_lock include/net/netrom.h:152 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:464 [inline]\n ffff8880186e2070 (&nr_node->node_lock){+...}-{2:2}, at: nr_rt_ioctl+0x1bb/0x1090 net/netrom/nr_route.c:697\n\nbut task is already holding lock:\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:462 [inline]\n ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_rt_ioctl+0x10a/0x1090 net/netrom/nr_route.c:697\n\nwhich lock already depends on the new lock.\n\nthe existing dependency chain (in reverse order) is:\n\n-> #1 (nr_node_list_lock){+...}-{2:2}:\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754\n __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]\n _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178\n spin_lock_bh include/linux/spinlock.h:356 [inline]\n nr_remove_node net/netrom/nr_route.c:299 [inline]\n nr_del_node+0x4b4/0x820 net/netrom/nr_route.c:355\n nr_rt_ioctl+0xa95/0x1090 net/netrom/nr_route.c:683\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\n-> #0 (&nr_node->node_lock){+...}-{2:2}:\n check_prev_add kernel/locking/lockdep.c:3134 [inline]\n check_prevs_add kernel/locking/lockdep.c:3253 [inline]\n validate_chain+0x18cb/0x58e0 kernel/locking/lockdep.c:3869\n __lock_acquire+0x1346/0x1fd0 kernel/locking/lockdep.c:5137\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5754\n __raw_spin_lock_bh include/linux/spinlock_api_smp.h:126 [inline]\n _raw_spin_lock_bh+0x35/0x50 kernel/locking/spinlock.c:178\n spin_lock_bh include/linux/spinlock.h:356 [inline]\n nr_node_lock include/net/netrom.h:152 [inline]\n nr_dec_obs net/netrom/nr_route.c:464 [inline]\n nr_rt_ioctl+0x1bb/0x1090 net/netrom/nr_route.c:697\n sock_do_ioctl+0x158/0x460 net/socket.c:1222\n sock_ioctl+0x629/0x8e0 net/socket.c:1341\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:904 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nother info that might help us debug this:\n\n Possible unsafe locking scenario:\n\n CPU0 CPU1\n ---- ----\n lock(nr_node_list_lock);\n lock(&nr_node->node_lock);\n lock(nr_node_list_lock);\n lock(&nr_node->node_lock);\n\n *** DEADLOCK ***\n\n1 lock held by syz-executor350/5129:\n #0: ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: spin_lock_bh include/linux/spinlock.h:356 [inline]\n #0: ffffffff8f7053b8 (nr_node_list_lock){+...}-{2:2}, at: nr_dec_obs net/netrom/nr_route.c:462 [inline]\n #0: ffffffff8f70\n---truncated---",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-38589"
},
{
"cve":"CVE-2024-38618",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: timer: Set lower bound of start tick time\n\nCurrently ALSA timer doesn't have the lower limit of the start tick\ntime, and it allows a very small size, e.g. 1 tick with 1ns resolution\nfor hrtimer. Such a situation may lead to an unexpected RCU stall,\nwhere the callback repeatedly queuing the expire update, as reported\nby fuzzer.\n\nThis patch introduces a sanity check of the timer start tick time, so\nthat the system returns an error when a too small start size is set.\nAs of this patch, the lower limit is hard-coded to 100us, which is\nsmall enough but can still work somehow.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.7,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-38618"
},
{
"cve":"CVE-2024-38619",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb-storage: alauda: Check whether the media is initialized\n\nThe member \"uzonesize\" of struct alauda_info will remain 0\nif alauda_init_media() fails, potentially causing divide errors\nin alauda_read_data() and alauda_write_lba().\n- Add a member \"media_initialized\" to struct alauda_info.\n- Change a condition in alauda_check_media() to ensure the\n first initialization.\n- Add an error check for the return value of alauda_init_media().",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-38619"
},
{
"cve":"CVE-2024-39469",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors\n\nThe error handling in nilfs_empty_dir() when a directory folio/page read\nfails is incorrect, as in the old ext2 implementation, and if the\nfolio/page cannot be read or nilfs_check_folio() fails, it will falsely\ndetermine the directory as empty and corrupt the file system.\n\nIn addition, since nilfs_empty_dir() does not immediately return on a\nfailed folio/page read, but continues to loop, this can cause a long loop\nwith I/O if i_size of the directory's inode is also corrupted, causing the\nlog writer thread to wait and hang, as reported by syzbot.\n\nFix these issues by making nilfs_empty_dir() immediately return a false\nvalue (0) if it fails to get a directory folio/page.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":4.7,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-39469"
},
{
"cve":"CVE-2024-39472",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:xfs: fix log recovery buffer allocation for the legacy h_size fixupCommit a70f9fe52daa ( xfs: detect and handle invalid iclog size set bymkfs ) added a fixup for incorrect h_size values used for the initialumount record in old xfsprogs versions. Later commit 0c771b99d6c9( xfs: clean up calculation of LR header blocks ) cleaned up the logreover buffer calculation, but stoped using the fixed up h_size valueto size the log recovery buffer, which can lead to an out of boundsaccess when the incorrect h_size does not come from the old mkfstool, but a fuzzer.Fix this by open coding xlog_logrec_hblks and taking the fixed h_sizeinto account for this calculation.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-39472"
},
{
"cve":"CVE-2024-39494",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nima: Fix use-after-free on a dentry's dname.name\n\n->d_name.name can change on rename and the earlier value can be freed;\nthere are conditions sufficient to stabilize it (->d_lock on dentry,\n->d_lock on its parent, ->i_rwsem exclusive on the parent's inode,\nrename_lock), but none of those are met at any of the sites. Take a stable\nsnapshot of the name instead.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"HIGH",
"baseScore":7.8,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"High",
"category":"impact"
}
],
"title":"CVE-2024-39494"
},
{
"cve":"CVE-2024-39499",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nvmci: prevent speculation leaks by sanitizing event in event_deliver()\n\nCoverity spotted that event_msg is controlled by user-space,\nevent_msg->event_data.event is passed to event_deliver() and used\nas an index without sanitization.\n\nThis change ensures that the event index is sanitized to mitigate any\npossibility of speculative information leaks.\n\nThis bug was discovered and resolved using Coverity Static Analysis\nSecurity Testing (SAST) by Synopsys, Inc.\n\nOnly compile tested, no access to HW.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-39499"
},
{
"cve":"CVE-2024-39505",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/komeda: check for error-valued pointer\n\nkomeda_pipeline_get_state() may return an error-valued pointer, thus\ncheck the pointer for negative or null value before dereferencing.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-39505"
},
{
"cve":"CVE-2024-40904",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages\n\nThe syzbot fuzzer found that the interrupt-URB completion callback in\nthe cdc-wdm driver was taking too long, and the driver's immediate\nresubmission of interrupt URBs with -EPROTO status combined with the\ndummy-hcd emulation to cause a CPU lockup:\n\ncdc_wdm 1-1:1.0: nonzero urb status received: -71\ncdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes\nwatchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor782:6625]\nCPU#0 Utilization every 4s during lockup:\n\t#1: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#2: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#3: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#4: 98% system,\t 0% softirq,\t 3% hardirq,\t 0% idle\n\t#5: 98% system,\t 1% softirq,\t 3% hardirq,\t 0% idle\nModules linked in:\nirq event stamp: 73096\nhardirqs last enabled at (73095): [] console_emit_next_record kernel/printk/printk.c:2935 [inline]\nhardirqs last enabled at (73095): [] console_flush_all+0x650/0xb74 kernel/printk/printk.c:2994\nhardirqs last disabled at (73096): [] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline]\nhardirqs last disabled at (73096): [] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551\nsoftirqs last enabled at (73048): [] softirq_handle_end kernel/softirq.c:400 [inline]\nsoftirqs last enabled at (73048): [] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582\nsoftirqs last disabled at (73043): [] __do_softirq+0x14/0x20 kernel/softirq.c:588\nCPU: 0 PID: 6625 Comm: syz-executor782 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\n\nTesting showed that the problem did not occur if the two error\nmessages -- the first two lines above -- were removed; apparently adding\nmaterial to the kernel log takes a surprisingly large amount of time.\n\nIn any case, the best approach for preventing these lockups and to\navoid spamming the log with thousands of error messages per second is\nto ratelimit the two dev_err() calls. Therefore we replace them with\ndev_err_ratelimited().",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40904"
},
{
"cve":"CVE-2024-40905",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: fix possible race in __fib6_drop_pcpu_from()\n\nsyzbot found a race in __fib6_drop_pcpu_from() [1]\n\nIf compiler reads more than once (*ppcpu_rt),\nsecond read could read NULL, if another cpu clears\nthe value in rt6_get_pcpu_route().\n\nAdd a READ_ONCE() to prevent this race.\n\nAlso add rcu_read_lock()/rcu_read_unlock() because\nwe rely on RCU protection while dereferencing pcpu_rt.\n\n[1]\n\nOops: general protection fault, probably for non-canonical address 0xdffffc0000000012: 0000 [#1] PREEMPT SMP KASAN PTI\nKASAN: null-ptr-deref in range [0x0000000000000090-0x0000000000000097]\nCPU: 0 PID: 7543 Comm: kworker/u8:17 Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024\nWorkqueue: netns cleanup_net\n RIP: 0010:__fib6_drop_pcpu_from.part.0+0x10a/0x370 net/ipv6/ip6_fib.c:984\nCode: f8 48 c1 e8 03 80 3c 28 00 0f 85 16 02 00 00 4d 8b 3f 4d 85 ff 74 31 e8 74 a7 fa f7 49 8d bf 90 00 00 00 48 89 f8 48 c1 e8 03 <80> 3c 28 00 0f 85 1e 02 00 00 49 8b 87 90 00 00 00 48 8b 0c 24 48\nRSP: 0018:ffffc900040df070 EFLAGS: 00010206\nRAX: 0000000000000012 RBX: 0000000000000001 RCX: ffffffff89932e16\nRDX: ffff888049dd1e00 RSI: ffffffff89932d7c RDI: 0000000000000091\nRBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000007\nR10: 0000000000000001 R11: 0000000000000006 R12: ffff88807fa080b8\nR13: fffffbfff1a9a07d R14: ffffed100ff41022 R15: 0000000000000001\nFS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000001b32c26000 CR3: 000000005d56e000 CR4: 00000000003526f0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n __fib6_drop_pcpu_from net/ipv6/ip6_fib.c:966 [inline]\n fib6_drop_pcpu_from net/ipv6/ip6_fib.c:1027 [inline]\n fib6_purge_rt+0x7f2/0x9f0 net/ipv6/ip6_fib.c:1038\n fib6_del_route net/ipv6/ip6_fib.c:1998 [inline]\n fib6_del+0xa70/0x17b0 net/ipv6/ip6_fib.c:2043\n fib6_clean_node+0x426/0x5b0 net/ipv6/ip6_fib.c:2205\n fib6_walk_continue+0x44f/0x8d0 net/ipv6/ip6_fib.c:2127\n fib6_walk+0x182/0x370 net/ipv6/ip6_fib.c:2175\n fib6_clean_tree+0xd7/0x120 net/ipv6/ip6_fib.c:2255\n __fib6_clean_all+0x100/0x2d0 net/ipv6/ip6_fib.c:2271\n rt6_sync_down_dev net/ipv6/route.c:4906 [inline]\n rt6_disable_ip+0x7ed/0xa00 net/ipv6/route.c:4911\n addrconf_ifdown.isra.0+0x117/0x1b40 net/ipv6/addrconf.c:3855\n addrconf_notify+0x223/0x19e0 net/ipv6/addrconf.c:3778\n notifier_call_chain+0xb9/0x410 kernel/notifier.c:93\n call_netdevice_notifiers_info+0xbe/0x140 net/core/dev.c:1992\n call_netdevice_notifiers_extack net/core/dev.c:2030 [inline]\n call_netdevice_notifiers net/core/dev.c:2044 [inline]\n dev_close_many+0x333/0x6a0 net/core/dev.c:1585\n unregister_netdevice_many_notify+0x46d/0x19f0 net/core/dev.c:11193\n unregister_netdevice_many net/core/dev.c:11276 [inline]\n default_device_exit_batch+0x85b/0xae0 net/core/dev.c:11759\n ops_exit_list+0x128/0x180 net/core/net_namespace.c:178\n cleanup_net+0x5b7/0xbf0 net/core/net_namespace.c:640\n process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231\n process_scheduled_works kernel/workqueue.c:3312 [inline]\n worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393\n kthread+0x2c1/0x3a0 kernel/kthread.c:389\n ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40905"
},
{
"cve":"CVE-2024-40912",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()\n\nThe ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to\nsynchronizes with ieee80211_tx_h_unicast_ps_buf() which is called from\nsoftirq context. However using only spin_lock() to get sta->ps_lock in\nieee80211_sta_ps_deliver_wakeup() does not prevent softirq to execute\non this same CPU, to run ieee80211_tx_h_unicast_ps_buf() and try to\ntake this same lock ending in deadlock. Below is an example of rcu stall\nthat arises in such situation.\n\n rcu: INFO: rcu_sched self-detected stall on CPU\n rcu: 2-....: (42413413 ticks this GP) idle=b154/1/0x4000000000000000 softirq=1763/1765 fqs=21206996\n rcu: (t=42586894 jiffies g=2057 q=362405 ncpus=4)\n CPU: 2 PID: 719 Comm: wpa_supplicant Tainted: G W 6.4.0-02158-g1b062f552873 #742\n Hardware name: RPT (r1) (DT)\n pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n pc : queued_spin_lock_slowpath+0x58/0x2d0\n lr : invoke_tx_handlers_early+0x5b4/0x5c0\n sp : ffff00001ef64660\n x29: ffff00001ef64660 x28: ffff000009bc1070 x27: ffff000009bc0ad8\n x26: ffff000009bc0900 x25: ffff00001ef647a8 x24: 0000000000000000\n x23: ffff000009bc0900 x22: ffff000009bc0900 x21: ffff00000ac0e000\n x20: ffff00000a279e00 x19: ffff00001ef646e8 x18: 0000000000000000\n x17: ffff800016468000 x16: ffff00001ef608c0 x15: 0010533c93f64f80\n x14: 0010395c9faa3946 x13: 0000000000000000 x12: 00000000fa83b2da\n x11: 000000012edeceea x10: ffff0000010fbe00 x9 : 0000000000895440\n x8 : 000000000010533c x7 : ffff00000ad8b740 x6 : ffff00000c350880\n x5 : 0000000000000007 x4 : 0000000000000001 x3 : 0000000000000000\n x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff00000ac0e0e8\n Call trace:\n queued_spin_lock_slowpath+0x58/0x2d0\n ieee80211_tx+0x80/0x12c\n ieee80211_tx_pending+0x110/0x278\n tasklet_action_common.constprop.0+0x10c/0x144\n tasklet_action+0x20/0x28\n _stext+0x11c/0x284\n ____do_softirq+0xc/0x14\n call_on_irq_stack+0x24/0x34\n do_softirq_own_stack+0x18/0x20\n do_softirq+0x74/0x7c\n __local_bh_enable_ip+0xa0/0xa4\n _ieee80211_wake_txqs+0x3b0/0x4b8\n __ieee80211_wake_queue+0x12c/0x168\n ieee80211_add_pending_skbs+0xec/0x138\n ieee80211_sta_ps_deliver_wakeup+0x2a4/0x480\n ieee80211_mps_sta_status_update.part.0+0xd8/0x11c\n ieee80211_mps_sta_status_update+0x18/0x24\n sta_apply_parameters+0x3bc/0x4c0\n ieee80211_change_station+0x1b8/0x2dc\n nl80211_set_station+0x444/0x49c\n genl_family_rcv_msg_doit.isra.0+0xa4/0xfc\n genl_rcv_msg+0x1b0/0x244\n netlink_rcv_skb+0x38/0x10c\n genl_rcv+0x34/0x48\n netlink_unicast+0x254/0x2bc\n netlink_sendmsg+0x190/0x3b4\n ____sys_sendmsg+0x1e8/0x218\n ___sys_sendmsg+0x68/0x8c\n __sys_sendmsg+0x44/0x84\n __arm64_sys_sendmsg+0x20/0x28\n do_el0_svc+0x6c/0xe8\n el0_svc+0x14/0x48\n el0t_64_sync_handler+0xb0/0xb4\n el0t_64_sync+0x14c/0x150\n\nUsing spin_lock_bh()/spin_unlock_bh() instead prevents softirq to raise\non the same CPU that is holding the lock.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40912"
},
{
"cve":"CVE-2024-40929",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: check n_ssids before accessing the ssids\n\nIn some versions of cfg80211, the ssids poinet might be a valid one even\nthough n_ssids is 0. Accessing the pointer in this case will cuase an\nout-of-bound access. Fix this by checking n_ssids first.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40929"
},
{
"cve":"CVE-2024-40932",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/exynos/vidi: fix memory leak in .get_modes()\n\nThe duplicated EDID is never freed. Fix it.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"LOW",
"baseScore":3.9,
"vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Low",
"category":"impact"
}
],
"title":"CVE-2024-40932"
},
{
"cve":"CVE-2024-40941",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: iwlwifi: mvm: don't read past the mfuart notifcation\n\nIn case the firmware sends a notification that claims it has more data\nthan it has, we will read past that was allocated for the notification.\nRemove the print of the buffer, we won't see it by default. If needed,\nwe can see the content with tracing.\n\nThis was reported by KFENCE.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40941"
},
{
"cve":"CVE-2024-40943",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix races between hole punching and AIO+DIO\n\nAfter commit \"ocfs2: return real error code in ocfs2_dio_wr_get_block\",\nfstests/generic/300 become from always failed to sometimes failed:\n\n========================================================================\n[ 473.293420 ] run fstests generic/300\n\n[ 475.296983 ] JBD2: Ignoring recovery information on journal\n[ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode.\n[ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found\n[ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.\n[ 494.292018 ] OCFS2: File system is now read-only.\n[ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30\n[ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3\nfio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072\n=========================================================================\n\nIn __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten\nextents to a list. extents are also inserted into extent tree in\nocfs2_write_begin_nolock. Then another thread call fallocate to puch a\nhole at one of the unwritten extent. The extent at cpos was removed by\nocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list\nfound there is no such extent at the cpos.\n\n T1 T2 T3\n inode lock\n ...\n insert extents\n ...\n inode unlock\nocfs2_fallocate\n __ocfs2_change_file_space\n inode lock\n lock ip_alloc_sem\n ocfs2_remove_inode_range inode\n ocfs2_remove_btree_range\n ocfs2_remove_extent\n ^---remove the extent at cpos 78723\n ...\n unlock ip_alloc_sem\n inode unlock\n ocfs2_dio_end_io\n ocfs2_dio_end_io_write\n lock ip_alloc_sem\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_search_extent_list\n ^---failed to find extent\n ...\n unlock ip_alloc_sem\n\nIn most filesystems, fallocate is not compatible with racing with AIO+DIO,\nso fix it by adding to wait for all dio before fallocate/punch_hole like\next4.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40943"
},
{
"cve":"CVE-2024-40968",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nMIPS: Octeon: Add PCIe link status check\n\nThe standard PCIe configuration read-write interface is used to\naccess the configuration space of the peripheral PCIe devices\nof the mips processor after the PCIe link surprise down, it can\ngenerate kernel panic caused by \"Data bus error\". So it is\nnecessary to add PCIe link status check for system protection.\nWhen the PCIe link is down or in training, assigning a value\nof 0 to the configuration address can prevent read-write behavior\nto the configuration space of peripheral PCIe devices, thereby\npreventing kernel panic.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40968"
},
{
"cve":"CVE-2024-40974",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries: Enforce hcall result buffer validity and size\n\nplpar_hcall(), plpar_hcall9(), and related functions expect callers to\nprovide valid result buffers of certain minimum size. Currently this\nis communicated only through comments in the code and the compiler has\nno idea.\n\nFor example, if I write a bug like this:\n\n long retbuf[PLPAR_HCALL_BUFSIZE]; // should be PLPAR_HCALL9_BUFSIZE\n plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf, ...);\n\nThis compiles with no diagnostics emitted, but likely results in stack\ncorruption at runtime when plpar_hcall9() stores results past the end\nof the array. (To be clear this is a contrived example and I have not\nfound a real instance yet.)\n\nTo make this class of error less likely, we can use explicitly-sized\narray parameters instead of pointers in the declarations for the hcall\nAPIs. When compiled with -Warray-bounds[1], the code above now\nprovokes a diagnostic like this:\n\nerror: array argument is too small;\nis of size 32, callee requires at least 72 [-Werror,-Warray-bounds]\n 60 | plpar_hcall9(H_ALLOCATE_VAS_WINDOW, retbuf,\n | ^ ~~~~~~\n\n[1] Enabled for LLVM builds but not GCC for now. See commit\n 0da6e5fd6c37 (\"gcc: disable '-Warray-bounds' for gcc-13 too\") and\n related changes.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40974"
},
{
"cve":"CVE-2024-40983",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: force a dst refcount before doing decryption\n\nAs it says in commit 3bc07321ccc2 (\"xfrm: Force a dst refcount before\nentering the xfrm type handlers\"):\n\n\"Crypto requests might return asynchronous. In this case we leave the\n rcu protected region, so force a refcount on the skb's destination\n entry before we enter the xfrm type input/output handlers.\"\n\nOn TIPC decryption path it has the same problem, and skb_dst_force()\nshould be called before doing decryption to avoid a possible crash.\n\nShuang reported this issue when this warning is triggered:\n\n [] WARNING: include/net/dst.h:337 tipc_sk_rcv+0x1055/0x1ea0 [tipc]\n [] Kdump: loaded Tainted: G W --------- - - 4.18.0-496.el8.x86_64+debug\n [] Workqueue: crypto cryptd_queue_worker\n [] RIP: 0010:tipc_sk_rcv+0x1055/0x1ea0 [tipc]\n [] Call Trace:\n [] tipc_sk_mcast_rcv+0x548/0xea0 [tipc]\n [] tipc_rcv+0xcf5/0x1060 [tipc]\n [] tipc_aead_decrypt_done+0x215/0x2e0 [tipc]\n [] cryptd_aead_crypt+0xdb/0x190\n [] cryptd_queue_worker+0xed/0x190\n [] process_one_work+0x93d/0x17e0",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40983"
},
{
"cve":"CVE-2024-40984",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nACPICA: Revert \"ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine.\"\n\nUndo the modifications made in commit d410ee5109a1 (\"ACPICA: avoid\n\"Info: mapping multiple BARs. Your kernel is fine.\"\"). The initial\npurpose of this commit was to stop memory mappings for operation\nregions from overlapping page boundaries, as it can trigger warnings\nif different page attributes are present.\n\nHowever, it was found that when this situation arises, mapping\ncontinues until the boundary's end, but there is still an attempt to\nread/write the entire length of the map, leading to a NULL pointer\ndeference. For example, if a four-byte mapping request is made but\nonly one byte is mapped because it hits the current page boundary's\nend, a four-byte read/write attempt is still made, resulting in a NULL\npointer deference.\n\nInstead, map the entire length, as the ACPI specification does not\nmandate that it must be within the same page boundary. It is\npermissible for it to be mapped across different regions.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40984"
},
{
"cve":"CVE-2024-40987",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix UBSAN warning in kv_dpm.c\n\nAdds bounds check for sumo_vid_mapping_entry.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-40987"
},
{
"cve":"CVE-2024-41004",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Build event generation tests only as modules\n\nThe kprobes and synth event generation test modules add events and lock\n(get a reference) those event file reference in module init function,\nand unlock and delete it in module exit function. This is because those\nare designed for playing as modules.\n\nIf we make those modules as built-in, those events are left locked in the\nkernel, and never be removed. This causes kprobe event self-test failure\nas below.\n\n[ 97.349708] ------------[ cut here ]------------\n[ 97.353453] WARNING: CPU: 3 PID: 1 at kernel/trace/trace_kprobe.c:2133 kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.357106] Modules linked in:\n[ 97.358488] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.9.0-g699646734ab5-dirty #14\n[ 97.361556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014\n[ 97.363880] RIP: 0010:kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.365538] Code: a8 24 08 82 e9 ae fd ff ff 90 0f 0b 90 48 c7 c7 e5 aa 0b 82 e9 ee fc ff ff 90 0f 0b 90 48 c7 c7 2d 61 06 82 e9 8e fd ff ff 90 <0f> 0b 90 48 c7 c7 33 0b 0c 82 89 c6 e8 6e 03 1f ff 41 ff c7 e9 90\n[ 97.370429] RSP: 0000:ffffc90000013b50 EFLAGS: 00010286\n[ 97.371852] RAX: 00000000fffffff0 RBX: ffff888005919c00 RCX: 0000000000000000\n[ 97.373829] RDX: ffff888003f40000 RSI: ffffffff8236a598 RDI: ffff888003f40a68\n[ 97.375715] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000\n[ 97.377675] R10: ffffffff811c9ae5 R11: ffffffff8120c4e0 R12: 0000000000000000\n[ 97.379591] R13: 0000000000000001 R14: 0000000000000015 R15: 0000000000000000\n[ 97.381536] FS: 0000000000000000(0000) GS:ffff88807dcc0000(0000) knlGS:0000000000000000\n[ 97.383813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 97.385449] CR2: 0000000000000000 CR3: 0000000002244000 CR4: 00000000000006b0\n[ 97.387347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 97.389277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[ 97.391196] Call Trace:\n[ 97.391967] \n[ 97.392647] ? __warn+0xcc/0x180\n[ 97.393640] ? kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.395181] ? report_bug+0xbd/0x150\n[ 97.396234] ? handle_bug+0x3e/0x60\n[ 97.397311] ? exc_invalid_op+0x1a/0x50\n[ 97.398434] ? asm_exc_invalid_op+0x1a/0x20\n[ 97.399652] ? trace_kprobe_is_busy+0x20/0x20\n[ 97.400904] ? tracing_reset_all_online_cpus+0x15/0x90\n[ 97.402304] ? kprobe_trace_self_tests_init+0x3f1/0x480\n[ 97.403773] ? init_kprobe_trace+0x50/0x50\n[ 97.404972] do_one_initcall+0x112/0x240\n[ 97.406113] do_initcall_level+0x95/0xb0\n[ 97.407286] ? kernel_init+0x1a/0x1a0\n[ 97.408401] do_initcalls+0x3f/0x70\n[ 97.409452] kernel_init_freeable+0x16f/0x1e0\n[ 97.410662] ? rest_init+0x1f0/0x1f0\n[ 97.411738] kernel_init+0x1a/0x1a0\n[ 97.412788] ret_from_fork+0x39/0x50\n[ 97.413817] ? rest_init+0x1f0/0x1f0\n[ 97.414844] ret_from_fork_asm+0x11/0x20\n[ 97.416285] \n[ 97.417134] irq event stamp: 13437323\n[ 97.418376] hardirqs last enabled at (13437337): [] console_unlock+0x11c/0x150\n[ 97.421285] hardirqs last disabled at (13437370): [] console_unlock+0x101/0x150\n[ 97.423838] softirqs last enabled at (13437366): [] handle_softirqs+0x23f/0x2a0\n[ 97.426450] softirqs last disabled at (13437393): [] __irq_exit_rcu+0x66/0xd0\n[ 97.428850] ---[ end trace 0000000000000000 ]---\n\nAnd also, since we can not cleanup dynamic_event file, ftracetest are\nfailed too.\n\nTo avoid these issues, build these tests only as modules.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-41004"
},
{
"cve":"CVE-2024-41005",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetpoll: Fix race condition in netpoll_owner_active\n\nKCSAN detected a race condition in netpoll:\n\n\tBUG: KCSAN: data-race in net_rx_action / netpoll_send_skb\n\twrite (marked) to 0xffff8881164168b0 of 4 bytes by interrupt on cpu 10:\n\tnet_rx_action (./include/linux/netpoll.h:90 net/core/dev.c:6712 net/core/dev.c:6822)\n\n\tread to 0xffff8881164168b0 of 4 bytes by task 1 on cpu 2:\n\tnetpoll_send_skb (net/core/netpoll.c:319 net/core/netpoll.c:345 net/core/netpoll.c:393)\n\tnetpoll_send_udp (net/core/netpoll.c:?)\n\n\tvalue changed: 0x0000000a -> 0xffffffff\n\nThis happens because netpoll_owner_active() needs to check if the\ncurrent CPU is the owner of the lock, touching napi->poll_owner\nnon atomically. The ->poll_owner field contains the current CPU holding\nthe lock.\n\nUse an atomic read to check if the poll owner is the current CPU.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-41005"
},
{
"cve":"CVE-2024-41007",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: avoid too many retransmit packets\n\nIf a TCP socket is using TCP_USER_TIMEOUT, and the other peer\nretracted its window to zero, tcp_retransmit_timer() can\nretransmit a packet every two jiffies (2 ms for HZ=1000),\nfor about 4 minutes after TCP_USER_TIMEOUT has 'expired'.\n\nThe fix is to make sure tcp_rtx_probe0_timed_out() takes\nicsk->icsk_user_timeout into account.\n\nBefore blamed commit, the socket would not timeout after\nicsk->icsk_user_timeout, but would use standard exponential\nbackoff for the retransmits.\n\nAlso worth noting that before commit e89688e3e978 (\"net: tcp:\nfix unexcepted socket die when snd_wnd is 0\"), the issue\nwould last 2 minutes instead of 4.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"LOW",
"baseScore":3.3,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Low",
"category":"impact"
}
],
"title":"CVE-2024-41007"
},
{
"cve":"CVE-2024-41009",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:bpf: Fix overrunning reservations in ringbufThe BPF ring buffer internally is implemented as a power-of-2 sized circularbuffer, with two logical and ever-increasing counters: consumer_pos is theconsumer counter to show which logical position the consumer consumed thedata, and producer_pos which is the producer counter denoting the amount ofdata reserved by all producers.Each time a record is reserved, the producer that owns the record willsuccessfully advance producer counter. In user space each time a record isread, the consumer of the data advanced the consumer counter once it finishedprocessing. Both counters are stored in separate pages so that from userspace, the producer counter is read-only and the consumer counter is read-write.One aspect that simplifies and thus speeds up the implementation of bothproducers and consumers is how the data area is mapped twice contiguouslyback-to-back in the virtual memory, allowing to not take any special measuresfor samples that have to wrap around at the end of the circular buffer dataarea, because the next page after the last data page would be first data pageagain, and thus the sample will still appear completely contiguous in virtualmemory.Each record has a struct bpf_ringbuf_hdr { u32 len; u32 pg_off; } header forbook-keeping the length and offset, and is inaccessible to the BPF program.Helpers like bpf_ringbuf_reserve() return `(void *)hdr + BPF_RINGBUF_HDR_SZ`for the BPF program to use. Bing-Jhong and Muhammad reported that it is howeverpossible to make a second allocated memory chunk overlapping with the firstchunk and as a result, the BPF program is now able to edit first chunk sheader.For example, consider the creation of a BPF_MAP_TYPE_RINGBUF map with sizeof 0x4000. Next, the consumer_pos is modified to 0x3000 /before/ a call tobpf_ringbuf_reserve() is made. This will allocate a chunk A, which is in[0x0,0x3008], and the BPF program is able to edit [0x8,0x3008]. Now, letsallocate a chunk B with size 0x3000. This will succeed because consumer_poswas edited ahead of time to pass the `new_prod_pos - cons_pos > rb->mask`check. Chunk B will be in range [0x3008,0x6010], and the BPF program is ableto edit [0x3010,0x6010]. Due to the ring buffer memory layout mentionedearlier, the ranges [0x0,0x4000] and [0x4000,0x8000] point to the same datapages. This means that chunk B at [0x4000,0x4008] is chunk A s header.bpf_ringbuf_submit() / bpf_ringbuf_discard() use the header s pg_off to thenlocate the bpf_ringbuf itself via bpf_ringbuf_restore_from_rec(). Once chunkB modified chunk A s header, then bpf_ringbuf_commit() refers to the wrongpage and could cause a crash.Fix it by calculating the oldest pending_pos and check whether the rangefrom the oldest outstanding record to the newest would span beyond the ringbuffer size. If that is the case, then reject the request. We ve tested withthe ring buffer benchmark in BPF selftests (./benchs/run_bench_ringbufs.sh)before/after the fix and while it seems a bit slower on some benchmarks, itis still not significantly enough to matter.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-1894"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-220.0.0.123.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-220.0.0.123.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2024-41009"
}
]
}