{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"kernel security update", "category":"general", "title":"Synopsis" }, { "text":"An update for kernel is now available for openEuler-20.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: fix wild-memory-access in proto_unregister There's issue as follows: KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f] CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W RIP: 0010:proto_unregister+0xee/0x400 Call Trace: __do_sys_delete_module+0x318/0x580 do_syscall_64+0xc1/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f As bnep_init() ignore bnep_sock_init()'s return value, and bnep_sock_init() will cleanup all resource. Then when remove bnep module will call bnep_sock_cleanup() to cleanup sock's resource. To solve above issue just return bnep_sock_init()'s return value in bnep_exit().(CVE-2024-50148)\n\nIn the Linux kernel, the following vulnerability has been resolved: nilfs2: fix kernel bug due to missing clearing of checked flag Syzbot reported that in directory operations after nilfs2 detects filesystem corruption and degrades to read-only, __block_write_begin_int(), which is called to prepare block writes, may fail the BUG_ON check for accesses exceeding the folio/page size, triggering a kernel bug. This was found to be because the \"checked\" flag of a page/folio was not cleared when it was discarded by nilfs2's own routine, which causes the sanity check of directory entries to be skipped when the directory page/folio is reloaded. So, fix that. This was necessary when the use of nilfs2's own page discard routine was applied to more than just metadata files.(CVE-2024-50230)\n\nIn the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Fix memory leak in management tx In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks are seen in the management TX cleanup logic. Kmemleak reports this problem as below, unreferenced object 0xffffff80b64ed250 (size 16): comm \"kworker/u16:7\", pid 148, jiffies 4294687130 (age 714.199s) hex dump (first 16 bytes): 00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00 .+.......t...... backtrace: [] __kmem_cache_alloc_node+0x1e4/0x2d8 [] kmalloc_trace+0x48/0x110 [] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core] [] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core] [] process_scheduled_works+0x1ac/0x400 [] worker_thread+0x208/0x328 [] kthread+0x100/0x1c0 [] ret_from_fork+0x10/0x20 Free the memory during completion and cleanup to fix the leak. Protect the mgmt_pending_tx idr_remove() operation in ath10k_wmi_tlv_op_cleanup_mgmt_tx_send() using ar->data_lock similar to other instances. Tested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1(CVE-2024-50236)\n\nIn the Linux kernel, the following vulnerability has been resolved: bpf: Fix out-of-bounds write in trie_get_next_key() trie_get_next_key() allocates a node stack with size trie->max_prefixlen, while it writes (trie->max_prefixlen + 1) nodes to the stack when it has full paths from the root to leaves. For example, consider a trie with max_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ... 0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with .prefixlen = 8 make 9 nodes be written on the node stack with size 8.(CVE-2024-50262)\n\nIn the Linux kernel, the following vulnerability has been resolved: ocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove() Syzkaller is able to provoke null-ptr-dereference in ocfs2_xa_remove(): [ 57.319872] (a.out,1161,7):ocfs2_xa_remove:2028 ERROR: status = -12 [ 57.320420] (a.out,1161,7):ocfs2_xa_cleanup_value_truncate:1999 ERROR: Partial truncate while removing xattr overlay.upper. Leaking 1 clusters and removing the entry [ 57.321727] BUG: kernel NULL pointer dereference, address: 0000000000000004 [...] [ 57.325727] RIP: 0010:ocfs2_xa_block_wipe_namevalue+0x2a/0xc0 [...] [ 57.331328] Call Trace: [ 57.331477] [...] [ 57.333511] ? do_user_addr_fault+0x3e5/0x740 [ 57.333778] ? exc_page_fault+0x70/0x170 [ 57.334016] ? asm_exc_page_fault+0x2b/0x30 [ 57.334263] ? __pfx_ocfs2_xa_block_wipe_namevalue+0x10/0x10 [ 57.334596] ? ocfs2_xa_block_wipe_namevalue+0x2a/0xc0 [ 57.334913] ocfs2_xa_remove_entry+0x23/0xc0 [ 57.335164] ocfs2_xa_set+0x704/0xcf0 [ 57.335381] ? _raw_spin_unlock+0x1a/0x40 [ 57.335620] ? ocfs2_inode_cache_unlock+0x16/0x20 [ 57.335915] ? trace_preempt_on+0x1e/0x70 [ 57.336153] ? start_this_handle+0x16c/0x500 [ 57.336410] ? preempt_count_sub+0x50/0x80 [ 57.336656] ? _raw_read_unlock+0x20/0x40 [ 57.336906] ? start_this_handle+0x16c/0x500 [ 57.337162] ocfs2_xattr_block_set+0xa6/0x1e0 [ 57.337424] __ocfs2_xattr_set_handle+0x1fd/0x5d0 [ 57.337706] ? ocfs2_start_trans+0x13d/0x290 [ 57.337971] ocfs2_xattr_set+0xb13/0xfb0 [ 57.338207] ? dput+0x46/0x1c0 [ 57.338393] ocfs2_xattr_trusted_set+0x28/0x30 [ 57.338665] ? ocfs2_xattr_trusted_set+0x28/0x30 [ 57.338948] __vfs_removexattr+0x92/0xc0 [ 57.339182] __vfs_removexattr_locked+0xd5/0x190 [ 57.339456] ? preempt_count_sub+0x50/0x80 [ 57.339705] vfs_removexattr+0x5f/0x100 [...] Reproducer uses faultinject facility to fail ocfs2_xa_remove() -> ocfs2_xa_value_truncate() with -ENOMEM. In this case the comment mentions that we can return 0 if ocfs2_xa_cleanup_value_truncate() is going to wipe the entry anyway. But the following 'rc' check is wrong and execution flow do 'ocfs2_xa_remove_entry(loc);' twice: * 1st: in ocfs2_xa_cleanup_value_truncate(); * 2nd: returning back to ocfs2_xa_remove() instead of going to 'out'. Fix this by skipping the 2nd removal of the same entry and making syzkaller repro happy.(CVE-2024-50265)\n\nIn the Linux kernel, the following vulnerability has been resolved: sctp: properly validate chunk size in sctp_sf_ootb() A size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add size validation when walking chunks\") is also required in sctp_sf_ootb() to address a crash reported by syzbot: BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712 sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166 sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407 sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88 sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243 sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159 ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205 ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233(CVE-2024-50299)\n\nIn the Linux kernel, the following vulnerability has been resolved: io_uring/rw: fix missing NOWAIT check for O_DIRECT start write When io_uring starts a write, it'll call kiocb_start_write() to bump the super block rwsem, preventing any freezes from happening while that write is in-flight. The freeze side will grab that rwsem for writing, excluding any new writers from happening and waiting for existing writes to finish. But io_uring unconditionally uses kiocb_start_write(), which will block if someone is currently attempting to freeze the mount point. This causes a deadlock where freeze is waiting for previous writes to complete, but the previous writes cannot complete, as the task that is supposed to complete them is blocked waiting on starting a new write. This results in the following stuck trace showing that dependency with the write blocked starting a new write: task:fio state:D stack:0 pid:886 tgid:886 ppid:876 Call trace: __switch_to+0x1d8/0x348 __schedule+0x8e8/0x2248 schedule+0x110/0x3f0 percpu_rwsem_wait+0x1e8/0x3f8 __percpu_down_read+0xe8/0x500 io_write+0xbb8/0xff8 io_issue_sqe+0x10c/0x1020 io_submit_sqes+0x614/0x2110 __arm64_sys_io_uring_enter+0x524/0x1038 invoke_syscall+0x74/0x268 el0_svc_common.constprop.0+0x160/0x238 do_el0_svc+0x44/0x60 el0_svc+0x44/0xb0 el0t_64_sync_handler+0x118/0x128 el0t_64_sync+0x168/0x170 INFO: task fsfreeze:7364 blocked for more than 15 seconds. Not tainted 6.12.0-rc5-00063-g76aaf945701c #7963 with the attempting freezer stuck trying to grab the rwsem: task:fsfreeze state:D stack:0 pid:7364 tgid:7364 ppid:995 Call trace: __switch_to+0x1d8/0x348 __schedule+0x8e8/0x2248 schedule+0x110/0x3f0 percpu_down_write+0x2b0/0x680 freeze_super+0x248/0x8a8 do_vfs_ioctl+0x149c/0x1b18 __arm64_sys_ioctl+0xd0/0x1a0 invoke_syscall+0x74/0x268 el0_svc_common.constprop.0+0x160/0x238 do_el0_svc+0x44/0x60 el0_svc+0x44/0xb0 el0t_64_sync_handler+0x118/0x128 el0t_64_sync+0x168/0x170 Fix this by having the io_uring side honor IOCB_NOWAIT, and only attempt a blocking grab of the super block rwsem if it isn't set. For normal issue where IOCB_NOWAIT would always be set, this returns -EAGAIN which will have io_uring core issue a blocking attempt of the write. That will in turn also get completions run, ensuring forward progress. Since freezing requires CAP_SYS_ADMIN in the first place, this isn't something that can be triggered by a regular user.(CVE-2024-53052)\n\nIn the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent NULL pointer dereference if ATIF is not supported acpi_evaluate_object() may return AE_NOT_FOUND (failure), which would result in dereferencing buffer.pointer (obj) while being NULL. Although this case may be unrealistic for the current code, it is still better to protect against possible bugs. Bail out also when status is AE_NOT_FOUND. This fixes 1 FORWARD_NULL issue reported by Coverity Report: CID 1600951: Null pointer dereferences (FORWARD_NULL) (cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)(CVE-2024-53060)\n\nIn the Linux kernel, the following vulnerability has been resolved: fs: Fix uninitialized value issue in from_kuid and from_kgid ocfs2_setattr() uses attr->ia_mode, attr->ia_uid and attr->ia_gid in a trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set. Initialize all fields of newattrs to avoid uninitialized variables, by checking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.(CVE-2024-53101)", "category":"general", "title":"Description" }, { "text":"An update for kernel is now available for openEuler-20.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"kernel", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2024-2520", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" }, { "summary":"CVE-2024-50148", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50148&packageName=kernel" }, { "summary":"CVE-2024-50230", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50230&packageName=kernel" }, { "summary":"CVE-2024-50236", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50236&packageName=kernel" }, { "summary":"CVE-2024-50262", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50262&packageName=kernel" }, { "summary":"CVE-2024-50265", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50265&packageName=kernel" }, { "summary":"CVE-2024-50299", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-50299&packageName=kernel" }, { "summary":"CVE-2024-53052", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-53052&packageName=kernel" }, { "summary":"CVE-2024-53060", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-53060&packageName=kernel" }, { "summary":"CVE-2024-53101", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-53101&packageName=kernel" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50148" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50230" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50236" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50262" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50265" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50299" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53052" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53060" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2024-53101" }, { "summary":"openEuler-SA-2024-2520 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2024/csaf-openeuler-sa-2024-2520.json" } ], "title":"An update for kernel is now available for openEuler-20.03-LTS-SP4", "tracking":{ "initial_release_date":"2024-12-06T23:24:00+08:00", "revision_history":[ { "date":"2024-12-06T23:24:00+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2024-12-06T23:24:00+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2024-12-06T23:24:00+08:00", "id":"openEuler-SA-2024-2520", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm" }, "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm" }, "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.src.rpm", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.src.rpm" }, "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "name":"python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src", "name":"kernel-4.19.90-2412.1.0.0306.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2024-50148", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: bnep: fix wild-memory-access in proto_unregister\n\nThere's issue as follows:\n KASAN: maybe wild-memory-access in range [0xdead...108-0xdead...10f]\n CPU: 3 UID: 0 PID: 2805 Comm: rmmod Tainted: G W\n RIP: 0010:proto_unregister+0xee/0x400\n Call Trace:\n \n __do_sys_delete_module+0x318/0x580\n do_syscall_64+0xc1/0x1d0\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nAs bnep_init() ignore bnep_sock_init()'s return value, and bnep_sock_init()\nwill cleanup all resource. Then when remove bnep module will call\nbnep_sock_cleanup() to cleanup sock's resource.\nTo solve above issue just return bnep_sock_init()'s return value in\nbnep_exit().", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-50148" }, { "cve":"CVE-2024-50230", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: fix kernel bug due to missing clearing of checked flag\n\nSyzbot reported that in directory operations after nilfs2 detects\nfilesystem corruption and degrades to read-only,\n__block_write_begin_int(), which is called to prepare block writes, may\nfail the BUG_ON check for accesses exceeding the folio/page size,\ntriggering a kernel bug.\n\nThis was found to be because the \"checked\" flag of a page/folio was not\ncleared when it was discarded by nilfs2's own routine, which causes the\nsanity check of directory entries to be skipped when the directory\npage/folio is reloaded. So, fix that.\n\nThis was necessary when the use of nilfs2's own page discard routine was\napplied to more than just metadata files.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2024-50230" }, { "cve":"CVE-2024-50236", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath10k: Fix memory leak in management tx\n\nIn the current logic, memory is allocated for storing the MSDU context\nduring management packet TX but this memory is not being freed during\nmanagement TX completion. Similar leaks are seen in the management TX\ncleanup logic.\n\nKmemleak reports this problem as below,\n\nunreferenced object 0xffffff80b64ed250 (size 16):\n comm \"kworker/u16:7\", pid 148, jiffies 4294687130 (age 714.199s)\n hex dump (first 16 bytes):\n 00 2b d8 d8 80 ff ff ff c4 74 e9 fd 07 00 00 00 .+.......t......\n backtrace:\n [] __kmem_cache_alloc_node+0x1e4/0x2d8\n [] kmalloc_trace+0x48/0x110\n [] ath10k_wmi_tlv_op_gen_mgmt_tx_send+0xd4/0x1d8 [ath10k_core]\n [] ath10k_mgmt_over_wmi_tx_work+0x134/0x298 [ath10k_core]\n [] process_scheduled_works+0x1ac/0x400\n [] worker_thread+0x208/0x328\n [] kthread+0x100/0x1c0\n [] ret_from_fork+0x10/0x20\n\nFree the memory during completion and cleanup to fix the leak.\n\nProtect the mgmt_pending_tx idr_remove() operation in\nath10k_wmi_tlv_op_cleanup_mgmt_tx_send() using ar->data_lock similar to\nother instances.\n\nTested-on: WCN3990 hw1.0 SNOC WLAN.HL.2.0-01387-QCAHLSWMTPLZ-1", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-50236" }, { "cve":"CVE-2024-50262", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix out-of-bounds write in trie_get_next_key()\n\ntrie_get_next_key() allocates a node stack with size trie->max_prefixlen,\nwhile it writes (trie->max_prefixlen + 1) nodes to the stack when it has\nfull paths from the root to leaves. For example, consider a trie with\nmax_prefixlen is 8, and the nodes with key 0x00/0, 0x00/1, 0x00/2, ...\n0x00/8 inserted. Subsequent calls to trie_get_next_key with _key with\n.prefixlen = 8 make 9 nodes be written on the node stack with size 8.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2024-50262" }, { "cve":"CVE-2024-50265", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: remove entry once instead of null-ptr-dereference in ocfs2_xa_remove()\n\nSyzkaller is able to provoke null-ptr-dereference in ocfs2_xa_remove():\n\n[ 57.319872] (a.out,1161,7):ocfs2_xa_remove:2028 ERROR: status = -12\n[ 57.320420] (a.out,1161,7):ocfs2_xa_cleanup_value_truncate:1999 ERROR: Partial truncate while removing xattr overlay.upper. Leaking 1 clusters and removing the entry\n[ 57.321727] BUG: kernel NULL pointer dereference, address: 0000000000000004\n[...]\n[ 57.325727] RIP: 0010:ocfs2_xa_block_wipe_namevalue+0x2a/0xc0\n[...]\n[ 57.331328] Call Trace:\n[ 57.331477] \n[...]\n[ 57.333511] ? do_user_addr_fault+0x3e5/0x740\n[ 57.333778] ? exc_page_fault+0x70/0x170\n[ 57.334016] ? asm_exc_page_fault+0x2b/0x30\n[ 57.334263] ? __pfx_ocfs2_xa_block_wipe_namevalue+0x10/0x10\n[ 57.334596] ? ocfs2_xa_block_wipe_namevalue+0x2a/0xc0\n[ 57.334913] ocfs2_xa_remove_entry+0x23/0xc0\n[ 57.335164] ocfs2_xa_set+0x704/0xcf0\n[ 57.335381] ? _raw_spin_unlock+0x1a/0x40\n[ 57.335620] ? ocfs2_inode_cache_unlock+0x16/0x20\n[ 57.335915] ? trace_preempt_on+0x1e/0x70\n[ 57.336153] ? start_this_handle+0x16c/0x500\n[ 57.336410] ? preempt_count_sub+0x50/0x80\n[ 57.336656] ? _raw_read_unlock+0x20/0x40\n[ 57.336906] ? start_this_handle+0x16c/0x500\n[ 57.337162] ocfs2_xattr_block_set+0xa6/0x1e0\n[ 57.337424] __ocfs2_xattr_set_handle+0x1fd/0x5d0\n[ 57.337706] ? ocfs2_start_trans+0x13d/0x290\n[ 57.337971] ocfs2_xattr_set+0xb13/0xfb0\n[ 57.338207] ? dput+0x46/0x1c0\n[ 57.338393] ocfs2_xattr_trusted_set+0x28/0x30\n[ 57.338665] ? ocfs2_xattr_trusted_set+0x28/0x30\n[ 57.338948] __vfs_removexattr+0x92/0xc0\n[ 57.339182] __vfs_removexattr_locked+0xd5/0x190\n[ 57.339456] ? preempt_count_sub+0x50/0x80\n[ 57.339705] vfs_removexattr+0x5f/0x100\n[...]\n\nReproducer uses faultinject facility to fail ocfs2_xa_remove() ->\nocfs2_xa_value_truncate() with -ENOMEM.\n\nIn this case the comment mentions that we can return 0 if\nocfs2_xa_cleanup_value_truncate() is going to wipe the entry\nanyway. But the following 'rc' check is wrong and execution flow do\n'ocfs2_xa_remove_entry(loc);' twice:\n* 1st: in ocfs2_xa_cleanup_value_truncate();\n* 2nd: returning back to ocfs2_xa_remove() instead of going to 'out'.\n\nFix this by skipping the 2nd removal of the same entry and making\nsyzkaller repro happy.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-50265" }, { "cve":"CVE-2024-50299", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nsctp: properly validate chunk size in sctp_sf_ootb()\n\nA size validation fix similar to that in Commit 50619dbf8db7 (\"sctp: add\nsize validation when walking chunks\") is also required in sctp_sf_ootb()\nto address a crash reported by syzbot:\n\n BUG: KMSAN: uninit-value in sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_sf_ootb+0x7f5/0xce0 net/sctp/sm_statefuns.c:3712\n sctp_do_sm+0x181/0x93d0 net/sctp/sm_sideeffect.c:1166\n sctp_endpoint_bh_rcv+0xc38/0xf90 net/sctp/endpointola.c:407\n sctp_inq_push+0x2ef/0x380 net/sctp/inqueue.c:88\n sctp_rcv+0x3831/0x3b20 net/sctp/input.c:243\n sctp4_rcv+0x42/0x50 net/sctp/protocol.c:1159\n ip_protocol_deliver_rcu+0xb51/0x13d0 net/ipv4/ip_input.c:205\n ip_local_deliver_finish+0x336/0x500 net/ipv4/ip_input.c:233", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-50299" }, { "cve":"CVE-2024-53052", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nio_uring/rw: fix missing NOWAIT check for O_DIRECT start write\n\nWhen io_uring starts a write, it'll call kiocb_start_write() to bump the\nsuper block rwsem, preventing any freezes from happening while that\nwrite is in-flight. The freeze side will grab that rwsem for writing,\nexcluding any new writers from happening and waiting for existing writes\nto finish. But io_uring unconditionally uses kiocb_start_write(), which\nwill block if someone is currently attempting to freeze the mount point.\nThis causes a deadlock where freeze is waiting for previous writes to\ncomplete, but the previous writes cannot complete, as the task that is\nsupposed to complete them is blocked waiting on starting a new write.\nThis results in the following stuck trace showing that dependency with\nthe write blocked starting a new write:\n\ntask:fio state:D stack:0 pid:886 tgid:886 ppid:876\nCall trace:\n __switch_to+0x1d8/0x348\n __schedule+0x8e8/0x2248\n schedule+0x110/0x3f0\n percpu_rwsem_wait+0x1e8/0x3f8\n __percpu_down_read+0xe8/0x500\n io_write+0xbb8/0xff8\n io_issue_sqe+0x10c/0x1020\n io_submit_sqes+0x614/0x2110\n __arm64_sys_io_uring_enter+0x524/0x1038\n invoke_syscall+0x74/0x268\n el0_svc_common.constprop.0+0x160/0x238\n do_el0_svc+0x44/0x60\n el0_svc+0x44/0xb0\n el0t_64_sync_handler+0x118/0x128\n el0t_64_sync+0x168/0x170\nINFO: task fsfreeze:7364 blocked for more than 15 seconds.\n Not tainted 6.12.0-rc5-00063-g76aaf945701c #7963\n\nwith the attempting freezer stuck trying to grab the rwsem:\n\ntask:fsfreeze state:D stack:0 pid:7364 tgid:7364 ppid:995\nCall trace:\n __switch_to+0x1d8/0x348\n __schedule+0x8e8/0x2248\n schedule+0x110/0x3f0\n percpu_down_write+0x2b0/0x680\n freeze_super+0x248/0x8a8\n do_vfs_ioctl+0x149c/0x1b18\n __arm64_sys_ioctl+0xd0/0x1a0\n invoke_syscall+0x74/0x268\n el0_svc_common.constprop.0+0x160/0x238\n do_el0_svc+0x44/0x60\n el0_svc+0x44/0xb0\n el0t_64_sync_handler+0x118/0x128\n el0t_64_sync+0x168/0x170\n\nFix this by having the io_uring side honor IOCB_NOWAIT, and only attempt a\nblocking grab of the super block rwsem if it isn't set. For normal issue\nwhere IOCB_NOWAIT would always be set, this returns -EAGAIN which will\nhave io_uring core issue a blocking attempt of the write. That will in\nturn also get completions run, ensuring forward progress.\n\nSince freezing requires CAP_SYS_ADMIN in the first place, this isn't\nsomething that can be triggered by a regular user.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.4, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-53052" }, { "cve":"CVE-2024-53060", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: prevent NULL pointer dereference if ATIF is not supported\n\nacpi_evaluate_object() may return AE_NOT_FOUND (failure), which\nwould result in dereferencing buffer.pointer (obj) while being NULL.\n\nAlthough this case may be unrealistic for the current code, it is\nstill better to protect against possible bugs.\n\nBail out also when status is AE_NOT_FOUND.\n\nThis fixes 1 FORWARD_NULL issue reported by Coverity\nReport: CID 1600951: Null pointer dereferences (FORWARD_NULL)\n\n(cherry picked from commit 91c9e221fe2553edf2db71627d8453f083de87a1)", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-53060" }, { "cve":"CVE-2024-53101", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs: Fix uninitialized value issue in from_kuid and from_kgid\n\nocfs2_setattr() uses attr->ia_mode, attr->ia_uid and attr->ia_gid in\na trace point even though ATTR_MODE, ATTR_UID and ATTR_GID aren't set.\n\nInitialize all fields of newattrs to avoid uninitialized variables, by\nchecking if ATTR_MODE, ATTR_UID, ATTR_GID are initialized, otherwise 0.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2520" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2412.1.0.0306.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2412.1.0.0306.oe2003sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2024-53101" } ] }