{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"kernel security update", "category":"general", "title":"Synopsis" }, { "text":"An update for kernel is now available for openEuler-24.03-LTS-SP1", "category":"general", "title":"Summary" }, { "text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: atm: cxacru: fix a flaw in existing endpoint checks\n\nSyzbot once again identified a flaw in usb endpoint checking, see [1].\nThis time the issue stems from a commit authored by me (2eabb655a968\n(\"usb: atm: cxacru: fix endpoint checking in cxacru_bind()\")).\n\nWhile using usb_find_common_endpoints() may usually be enough to\ndiscard devices with wrong endpoints, in this case one needs more\nthan just finding and identifying the sufficient number of endpoints\nof correct types - one needs to check the endpoint's address as well.\n\nSince cxacru_bind() fills URBs with CXACRU_EP_CMD address in mind,\nswitch the endpoint verification approach to usb_check_XXX_endpoints()\ninstead to fix incomplete ep testing.\n\n[1] Syzbot report:\nusb 5-1: BOGUS urb xfer, pipe 3 != type 1\nWARNING: CPU: 0 PID: 1378 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503\n...\nRIP: 0010:usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503\n...\nCall Trace:\n \n cxacru_cm+0x3c8/0xe50 drivers/usb/atm/cxacru.c:649\n cxacru_card_status drivers/usb/atm/cxacru.c:760 [inline]\n cxacru_bind+0xcf9/0x1150 drivers/usb/atm/cxacru.c:1223\n usbatm_usb_probe+0x314/0x1d30 drivers/usb/atm/usbatm.c:1058\n cxacru_usb_probe+0x184/0x220 drivers/usb/atm/cxacru.c:1377\n usb_probe_interface+0x641/0xbb0 drivers/usb/core/driver.c:396\n really_probe+0x2b9/0xad0 drivers/base/dd.c:658\n __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800\n driver_probe_device+0x50/0x430 drivers/base/dd.c:830\n...(CVE-2025-21916)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl\n\nIn the \"pmcmd_ioctl\" function, three memory objects allocated by\nkmalloc are initialized by \"hcall_get_cpu_state\", which are then\ncopied to user space. The initializer is indeed implemented in\n\"acrn_hypercall2\" (arch/x86/include/asm/acrn.h). There is a risk of\ninformation leakage due to uninitialized bytes.(CVE-2025-21950)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbacklight: led_bl: Hold led_access lock when calling led_sysfs_disable()\n\nLockdep detects the following issue on led-backlight removal:\n [ 142.315935] ------------[ cut here ]------------\n [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80\n ...\n [ 142.500725] Call trace:\n [ 142.503176] led_sysfs_enable+0x54/0x80 (P)\n [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl]\n [ 142.511742] platform_remove+0x30/0x58\n [ 142.515501] device_remove+0x54/0x90\n ...\n\nIndeed, led_sysfs_enable() has to be called with the led_access\nlock held.\n\nHold the lock when calling led_sysfs_disable().(CVE-2025-23144)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\njfs: Fix uninit-value access of imap allocated in the diMount() function\n\nsyzbot reports that hex_dump_to_buffer is using uninit-value:\n\n=====================================================\nBUG: KMSAN: uninit-value in hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171\nhex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171\nprint_hex_dump+0x13d/0x3e0 lib/hexdump.c:276\ndiFree+0x5ba/0x4350 fs/jfs/jfs_imap.c:876\njfs_evict_inode+0x510/0x550 fs/jfs/inode.c:156\nevict+0x723/0xd10 fs/inode.c:796\niput_final fs/inode.c:1946 [inline]\niput+0x97b/0xdb0 fs/inode.c:1972\ntxUpdateMap+0xf3e/0x1150 fs/jfs/jfs_txnmgr.c:2367\ntxLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]\njfs_lazycommit+0x627/0x11d0 fs/jfs/jfs_txnmgr.c:2733\nkthread+0x6b9/0xef0 kernel/kthread.c:464\nret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148\nret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\nslab_post_alloc_hook mm/slub.c:4121 [inline]\nslab_alloc_node mm/slub.c:4164 [inline]\n__kmalloc_cache_noprof+0x8e3/0xdf0 mm/slub.c:4320\nkmalloc_noprof include/linux/slab.h:901 [inline]\ndiMount+0x61/0x7f0 fs/jfs/jfs_imap.c:105\njfs_mount+0xa8e/0x11d0 fs/jfs/jfs_mount.c:176\njfs_fill_super+0xa47/0x17c0 fs/jfs/super.c:523\nget_tree_bdev_flags+0x6ec/0x910 fs/super.c:1636\nget_tree_bdev+0x37/0x50 fs/super.c:1659\njfs_get_tree+0x34/0x40 fs/jfs/super.c:635\nvfs_get_tree+0xb1/0x5a0 fs/super.c:1814\ndo_new_mount+0x71f/0x15e0 fs/namespace.c:3560\npath_mount+0x742/0x1f10 fs/namespace.c:3887\ndo_mount fs/namespace.c:3900 [inline]\n__do_sys_mount fs/namespace.c:4111 [inline]\n__se_sys_mount+0x71f/0x800 fs/namespace.c:4088\n__x64_sys_mount+0xe4/0x150 fs/namespace.c:4088\nx64_sys_call+0x39bf/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:166\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\n=====================================================\n\nThe reason is that imap is not properly initialized after memory\nallocation. It will cause the snprintf() function to write uninitialized\ndata into linebuf within hex_dump_to_buffer().\n\nFix this by using kzalloc instead of kmalloc to clear its content at the\nbeginning in diMount().(CVE-2025-37742)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: libwx: handle page_pool_dev_alloc_pages error\n\npage_pool_dev_alloc_pages could return NULL. There was a WARN_ON(!page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis is similar to commit 001ba0902046\n(\"net: fec: handle page_pool_dev_alloc_pages error\").\n\nThis is found by our static analysis tool KNighter.(CVE-2025-37755)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp\n\nvmxnet3 driver's XDP handling is buggy for packet sizes using ring0 (that\nis, packet sizes between 128 - 3k bytes).\n\nWe noticed MTU-related connectivity issues with Cilium's service load-\nbalancing in case of vmxnet3 as NIC underneath. A simple curl to a HTTP\nbackend service where the XDP LB was doing IPIP encap led to overly large\npacket sizes but only for *some* of the packets (e.g. HTTP GET request)\nwhile others (e.g. the prior TCP 3WHS) looked completely fine on the wire.\n\nIn fact, the pcap recording on the backend node actually revealed that the\nnode with the XDP LB was leaking uninitialized kernel data onto the wire\nfor the affected packets, for example, while the packets should have been\n152 bytes their actual size was 1482 bytes, so the remainder after 152 bytes\nwas padded with whatever other data was in that page at the time (e.g. we\nsaw user/payload data from prior processed packets).\n\nWe only noticed this through an MTU issue, e.g. when the XDP LB node and\nthe backend node both had the same MTU (e.g. 1500) then the curl request\ngot dropped on the backend node's NIC given the packet was too large even\nthough the IPIP-encapped packet normally would never even come close to\nthe MTU limit. Lowering the MTU on the XDP LB (e.g. 1480) allowed to let\nthe curl request succeed (which also indicates that the kernel ignored the\npadding, and thus the issue wasn't very user-visible).\n\nCommit e127ce7699c1 (\"vmxnet3: Fix missing reserved tailroom\") was too eager\nto also switch xdp_prepare_buff() from rcd->len to rbi->len. It really needs\nto stick to rcd->len which is the actual packet length from the descriptor.\nThe latter we also feed into vmxnet3_process_xdp_small(), by the way, and\nit indicates the correct length needed to initialize the xdp->{data,data_end}\nparts. For e127ce7699c1 (\"vmxnet3: Fix missing reserved tailroom\") the\nrelevant part was adapting xdp_init_buff() to address the warning given the\nxdp_data_hard_end() depends on xdp->frame_sz. With that fixed, traffic on\nthe wire looks good again.(CVE-2025-37799)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: chipidea: ci_hdrc_imx: fix usbmisc handling\n\nusbmisc is an optional device property so it is totally valid for the\ncorresponding data->usbmisc_data to have a NULL value.\n\nCheck that before dereferencing the pointer.\n\nFound by Linux Verification Center (linuxtesting.org) with Svace static\nanalysis tool.(CVE-2025-37811)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix NULL dereferences in ef100_process_design_param()\n\nSince cited commit, ef100_probe_main() and hence also\n ef100_check_design_params() run before efx->net_dev is created;\n consequently, we cannot netif_set_tso_max_size() or _segs() at this\n point.\nMove those netif calls to ef100_probe_netdev(), and also replace\n netif_err within the design params code with pci_err.(CVE-2025-37860)", "category":"general", "title":"Description" }, { "text":"An update for kernel is now available for openEuler-24.03-LTS-SP1.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"kernel", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2025-1512", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" }, { "summary":"CVE-2025-21916", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-21916&packageName=kernel" }, { "summary":"CVE-2025-21950", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-21950&packageName=kernel" }, { "summary":"CVE-2025-23144", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-23144&packageName=kernel" }, { "summary":"CVE-2025-37742", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37742&packageName=kernel" }, { "summary":"CVE-2025-37755", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37755&packageName=kernel" }, { "summary":"CVE-2025-37799", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37799&packageName=kernel" }, { "summary":"CVE-2025-37811", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37811&packageName=kernel" }, { "summary":"CVE-2025-37860", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37860&packageName=kernel" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21916" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21950" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-23144" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37742" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37755" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37799" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37811" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37860" }, { "summary":"openEuler-SA-2025-1512 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openeuler-sa-2025-1512.json" } ], "title":"An update for kernel is now available for openEuler-24.03-LTS-SP1", "tracking":{ "initial_release_date":"2025-05-16T21:24:46+08:00", "revision_history":[ { "date":"2025-05-16T21:24:46+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2025-05-16T21:24:46+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2025-05-16T21:24:46+08:00", "id":"openEuler-SA-2025-1512", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"openEuler-24.03-LTS-SP1", "name":"openEuler-24.03-LTS-SP1" }, "name":"openEuler-24.03-LTS-SP1", "category":"product_version" } ], "category":"product_name" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-90.0.0.95.oe2403sp1.src.rpm", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.src.rpm" }, "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-90.0.0.95.oe2403sp1.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"perf-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"perf-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "name":"python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-21916", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: atm: cxacru: fix a flaw in existing endpoint checks\n\nSyzbot once again identified a flaw in usb endpoint checking, see [1].\nThis time the issue stems from a commit authored by me (2eabb655a968\n(\"usb: atm: cxacru: fix endpoint checking in cxacru_bind()\")).\n\nWhile using usb_find_common_endpoints() may usually be enough to\ndiscard devices with wrong endpoints, in this case one needs more\nthan just finding and identifying the sufficient number of endpoints\nof correct types - one needs to check the endpoint's address as well.\n\nSince cxacru_bind() fills URBs with CXACRU_EP_CMD address in mind,\nswitch the endpoint verification approach to usb_check_XXX_endpoints()\ninstead to fix incomplete ep testing.\n\n[1] Syzbot report:\nusb 5-1: BOGUS urb xfer, pipe 3 != type 1\nWARNING: CPU: 0 PID: 1378 at drivers/usb/core/urb.c:504 usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503\n...\nRIP: 0010:usb_submit_urb+0xc4e/0x18c0 drivers/usb/core/urb.c:503\n...\nCall Trace:\n \n cxacru_cm+0x3c8/0xe50 drivers/usb/atm/cxacru.c:649\n cxacru_card_status drivers/usb/atm/cxacru.c:760 [inline]\n cxacru_bind+0xcf9/0x1150 drivers/usb/atm/cxacru.c:1223\n usbatm_usb_probe+0x314/0x1d30 drivers/usb/atm/usbatm.c:1058\n cxacru_usb_probe+0x184/0x220 drivers/usb/atm/cxacru.c:1377\n usb_probe_interface+0x641/0xbb0 drivers/usb/core/driver.c:396\n really_probe+0x2b9/0xad0 drivers/base/dd.c:658\n __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:800\n driver_probe_device+0x50/0x430 drivers/base/dd.c:830\n...", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-21916" }, { "cve":"CVE-2025-21950", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl\n\nIn the \"pmcmd_ioctl\" function, three memory objects allocated by\nkmalloc are initialized by \"hcall_get_cpu_state\", which are then\ncopied to user space. The initializer is indeed implemented in\n\"acrn_hypercall2\" (arch/x86/include/asm/acrn.h). There is a risk of\ninformation leakage due to uninitialized bytes.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-21950" }, { "cve":"CVE-2025-23144", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nbacklight: led_bl: Hold led_access lock when calling led_sysfs_disable()\n\nLockdep detects the following issue on led-backlight removal:\n [ 142.315935] ------------[ cut here ]------------\n [ 142.315954] WARNING: CPU: 2 PID: 292 at drivers/leds/led-core.c:455 led_sysfs_enable+0x54/0x80\n ...\n [ 142.500725] Call trace:\n [ 142.503176] led_sysfs_enable+0x54/0x80 (P)\n [ 142.507370] led_bl_remove+0x80/0xa8 [led_bl]\n [ 142.511742] platform_remove+0x30/0x58\n [ 142.515501] device_remove+0x54/0x90\n ...\n\nIndeed, led_sysfs_enable() has to be called with the led_access\nlock held.\n\nHold the lock when calling led_sysfs_disable().", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-23144" }, { "cve":"CVE-2025-37742", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\njfs: Fix uninit-value access of imap allocated in the diMount() function\n\nsyzbot reports that hex_dump_to_buffer is using uninit-value:\n\n=====================================================\nBUG: KMSAN: uninit-value in hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171\nhex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171\nprint_hex_dump+0x13d/0x3e0 lib/hexdump.c:276\ndiFree+0x5ba/0x4350 fs/jfs/jfs_imap.c:876\njfs_evict_inode+0x510/0x550 fs/jfs/inode.c:156\nevict+0x723/0xd10 fs/inode.c:796\niput_final fs/inode.c:1946 [inline]\niput+0x97b/0xdb0 fs/inode.c:1972\ntxUpdateMap+0xf3e/0x1150 fs/jfs/jfs_txnmgr.c:2367\ntxLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline]\njfs_lazycommit+0x627/0x11d0 fs/jfs/jfs_txnmgr.c:2733\nkthread+0x6b9/0xef0 kernel/kthread.c:464\nret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148\nret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\nUninit was created at:\nslab_post_alloc_hook mm/slub.c:4121 [inline]\nslab_alloc_node mm/slub.c:4164 [inline]\n__kmalloc_cache_noprof+0x8e3/0xdf0 mm/slub.c:4320\nkmalloc_noprof include/linux/slab.h:901 [inline]\ndiMount+0x61/0x7f0 fs/jfs/jfs_imap.c:105\njfs_mount+0xa8e/0x11d0 fs/jfs/jfs_mount.c:176\njfs_fill_super+0xa47/0x17c0 fs/jfs/super.c:523\nget_tree_bdev_flags+0x6ec/0x910 fs/super.c:1636\nget_tree_bdev+0x37/0x50 fs/super.c:1659\njfs_get_tree+0x34/0x40 fs/jfs/super.c:635\nvfs_get_tree+0xb1/0x5a0 fs/super.c:1814\ndo_new_mount+0x71f/0x15e0 fs/namespace.c:3560\npath_mount+0x742/0x1f10 fs/namespace.c:3887\ndo_mount fs/namespace.c:3900 [inline]\n__do_sys_mount fs/namespace.c:4111 [inline]\n__se_sys_mount+0x71f/0x800 fs/namespace.c:4088\n__x64_sys_mount+0xe4/0x150 fs/namespace.c:4088\nx64_sys_call+0x39bf/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:166\ndo_syscall_x64 arch/x86/entry/common.c:52 [inline]\ndo_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83\nentry_SYSCALL_64_after_hwframe+0x77/0x7f\n=====================================================\n\nThe reason is that imap is not properly initialized after memory\nallocation. It will cause the snprintf() function to write uninitialized\ndata into linebuf within hex_dump_to_buffer().\n\nFix this by using kzalloc instead of kmalloc to clear its content at the\nbeginning in diMount().", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-37742" }, { "cve":"CVE-2025-37755", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: libwx: handle page_pool_dev_alloc_pages error\n\npage_pool_dev_alloc_pages could return NULL. There was a WARN_ON(!page)\nbut it would still proceed to use the NULL pointer and then crash.\n\nThis is similar to commit 001ba0902046\n(\"net: fec: handle page_pool_dev_alloc_pages error\").\n\nThis is found by our static analysis tool KNighter.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-37755" }, { "cve":"CVE-2025-37799", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix malformed packet sizing in vmxnet3_process_xdp\n\nvmxnet3 driver's XDP handling is buggy for packet sizes using ring0 (that\nis, packet sizes between 128 - 3k bytes).\n\nWe noticed MTU-related connectivity issues with Cilium's service load-\nbalancing in case of vmxnet3 as NIC underneath. A simple curl to a HTTP\nbackend service where the XDP LB was doing IPIP encap led to overly large\npacket sizes but only for *some* of the packets (e.g. HTTP GET request)\nwhile others (e.g. the prior TCP 3WHS) looked completely fine on the wire.\n\nIn fact, the pcap recording on the backend node actually revealed that the\nnode with the XDP LB was leaking uninitialized kernel data onto the wire\nfor the affected packets, for example, while the packets should have been\n152 bytes their actual size was 1482 bytes, so the remainder after 152 bytes\nwas padded with whatever other data was in that page at the time (e.g. we\nsaw user/payload data from prior processed packets).\n\nWe only noticed this through an MTU issue, e.g. when the XDP LB node and\nthe backend node both had the same MTU (e.g. 1500) then the curl request\ngot dropped on the backend node's NIC given the packet was too large even\nthough the IPIP-encapped packet normally would never even come close to\nthe MTU limit. Lowering the MTU on the XDP LB (e.g. 1480) allowed to let\nthe curl request succeed (which also indicates that the kernel ignored the\npadding, and thus the issue wasn't very user-visible).\n\nCommit e127ce7699c1 (\"vmxnet3: Fix missing reserved tailroom\") was too eager\nto also switch xdp_prepare_buff() from rcd->len to rbi->len. It really needs\nto stick to rcd->len which is the actual packet length from the descriptor.\nThe latter we also feed into vmxnet3_process_xdp_small(), by the way, and\nit indicates the correct length needed to initialize the xdp->{data,data_end}\nparts. For e127ce7699c1 (\"vmxnet3: Fix missing reserved tailroom\") the\nrelevant part was adapting xdp_init_buff() to address the warning given the\nxdp_data_hard_end() depends on xdp->frame_sz. With that fixed, traffic on\nthe wire looks good again.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-37799" }, { "cve":"CVE-2025-37811", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: chipidea: ci_hdrc_imx: fix usbmisc handling\n\nusbmisc is an optional device property so it is totally valid for the\ncorresponding data->usbmisc_data to have a NULL value.\n\nCheck that before dereferencing the pointer.\n\nFound by Linux Verification Center (linuxtesting.org) with Svace static\nanalysis tool.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-37811" }, { "cve":"CVE-2025-37860", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nsfc: fix NULL dereferences in ef100_process_design_param()\n\nSince cited commit, ef100_probe_main() and hence also\n ef100_check_design_params() run before efx->net_dev is created;\n consequently, we cannot netif_set_tso_max_size() or _segs() at this\n point.\nMove those netif calls to ef100_probe_netdev(), and also replace\n netif_err within the design params code with pci_err.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1512" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.src", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.aarch64", "openEuler-24.03-LTS-SP1:bpftool-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-source-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-6.6.0-90.0.0.95.oe2403sp1.x86_64", "openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-90.0.0.95.oe2403sp1.x86_64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-37860" } ] }