{
"document":{
"aggregate_severity":{
"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
"text":"High"
},
"category":"csaf_vex",
"csaf_version":"2.0",
"distribution":{
"tlp":{
"label":"WHITE",
"url":"https:/www.first.org/tlp/"
}
},
"lang":"en",
"notes":[
{
"text":"kernel security update",
"category":"general",
"title":"Synopsis"
},
{
"text":"An update for kernel is now available for openEuler-22.03-LTS-SP3",
"category":"general",
"title":"Summary"
},
{
"text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---(CVE-2024-57896)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\next4: ignore xattrs past end\n\nOnce inside 'ext4_xattr_inode_dec_ref_all' we should\nignore xattrs entries past the 'end' entry.\n\nThis fixes the following KASAN reported issue:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\nRead of size 4 at addr ffff888012c120c4 by task repro/2065\n\nCPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \n dump_stack_lvl+0x1fd/0x300\n ? tcp_gro_dev_warn+0x260/0x260\n ? _printk+0xc0/0x100\n ? read_lock_is_recursive+0x10/0x10\n ? irq_work_queue+0x72/0xf0\n ? __virt_addr_valid+0x17b/0x4b0\n print_address_description+0x78/0x390\n print_report+0x107/0x1f0\n ? __virt_addr_valid+0x17b/0x4b0\n ? __virt_addr_valid+0x3ff/0x4b0\n ? __phys_addr+0xb5/0x160\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n kasan_report+0xcc/0x100\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ? ext4_xattr_delete_inode+0xd30/0xd30\n ? __ext4_journal_ensure_credits+0x5f0/0x5f0\n ? __ext4_journal_ensure_credits+0x2b/0x5f0\n ? inode_update_timestamps+0x410/0x410\n ext4_xattr_delete_inode+0xb64/0xd30\n ? ext4_truncate+0xb70/0xdc0\n ? ext4_expand_extra_isize_ea+0x1d20/0x1d20\n ? __ext4_mark_inode_dirty+0x670/0x670\n ? ext4_journal_check_start+0x16f/0x240\n ? ext4_inode_is_fast_symlink+0x2f2/0x3a0\n ext4_evict_inode+0xc8c/0xff0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n ? do_raw_spin_unlock+0x53/0x8a0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n evict+0x4ac/0x950\n ? proc_nr_inodes+0x310/0x310\n ? trace_ext4_drop_inode+0xa2/0x220\n ? _raw_spin_unlock+0x1a/0x30\n ? iput+0x4cb/0x7e0\n do_unlinkat+0x495/0x7c0\n ? try_break_deleg+0x120/0x120\n ? 0xffffffff81000000\n ? __check_object_size+0x15a/0x210\n ? strncpy_from_user+0x13e/0x250\n ? getname_flags+0x1dc/0x530\n __x64_sys_unlinkat+0xc8/0xf0\n do_syscall_64+0x65/0x110\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\nRIP: 0033:0x434ffd\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8\nRSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107\nRAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd\nRDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005\nRBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001\nR13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001\n \n\nThe buggy address belongs to the object at ffff888012c12000\n which belongs to the cache filp of size 360\nThe buggy address is located 196 bytes inside of\n freed 360-byte region [ffff888012c12000, ffff888012c12168)\n\nThe buggy address belongs to the physical page:\npage: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12\nhead: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\nflags: 0x40(head|node=0|zone=0)\npage_type: f5(slab)\nraw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nraw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nhead: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000\nhead: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n> ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc\n ffff888012c12180: fc fc fc fc fc fc fc fc fc\n---truncated---(CVE-2025-37738)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n\nIf dib8000_set_dds()'s call to dib8000_read32() returns zero, the result\nis a divide-by-zero. Prevent that from happening.\n\nFixes the following warning with an UBSAN kernel:\n\n drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()(CVE-2025-37937)",
"category":"general",
"title":"Description"
},
{
"text":"An update for kernel is now available for openEuler-22.03-LTS-SP3.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.",
"category":"general",
"title":"Topic"
},
{
"text":"High",
"category":"general",
"title":"Severity"
},
{
"text":"kernel",
"category":"general",
"title":"Affected Component"
}
],
"publisher":{
"issuing_authority":"openEuler security committee",
"name":"openEuler",
"namespace":"https://www.openeuler.org",
"contact_details":"openeuler-security@openeuler.org",
"category":"vendor"
},
"references":[
{
"summary":"openEuler-SA-2025-1667",
"category":"self",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1667"
},
{
"summary":"CVE-2024-57896",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2024-57896&packageName=kernel"
},
{
"summary":"CVE-2025-37738",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37738&packageName=kernel"
},
{
"summary":"CVE-2025-37937",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37937&packageName=kernel"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57896"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37738"
},
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37937"
},
{
"summary":"openEuler-SA-2025-1667 vex file",
"category":"self",
"url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openeuler-sa-2025-1667.json"
}
],
"title":"An update for kernel is now available for openEuler-22.03-LTS-SP3",
"tracking":{
"initial_release_date":"2025-06-27T21:42:46+08:00",
"revision_history":[
{
"date":"2025-06-27T21:42:46+08:00",
"summary":"Initial",
"number":"1.0.0"
}
],
"generator":{
"date":"2025-06-27T21:42:46+08:00",
"engine":{
"name":"openEuler CSAF Tool V1.0"
}
},
"current_release_date":"2025-06-27T21:42:46+08:00",
"id":"openEuler-SA-2025-1667",
"version":"1.0.0",
"status":"final"
}
},
"product_tree":{
"branches":[
{
"name":"openEuler",
"category":"vendor",
"branches":[
{
"name":"openEuler",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"openEuler-22.03-LTS-SP3",
"name":"openEuler-22.03-LTS-SP3"
},
"name":"openEuler-22.03-LTS-SP3",
"category":"product_version"
}
],
"category":"product_name"
},
{
"name":"aarch64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm"
},
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"src",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-269.0.0.171.oe2203sp3.src.rpm",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.src.rpm"
},
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.src.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"x86_64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP3"
},
"product_id":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm"
},
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"category":"product_version"
}
],
"category":"architecture"
}
]
}
],
"relationships":[
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-269.0.0.171.oe2203sp3.src.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.src as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"perf-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-22.03-LTS-SP3",
"product_reference":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"name":"python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64 as a component of openEuler-22.03-LTS-SP3"
},
"category":"default_component_of"
}
]
},
"vulnerabilities":[
{
"cve":"CVE-2024-57896",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: flush delalloc workers queue before stopping cleaner kthread during unmount\n\nDuring the unmount path, at close_ctree(), we first stop the cleaner\nkthread, using kthread_stop() which frees the associated task_struct, and\nthen stop and destroy all the work queues. However after we stopped the\ncleaner we may still have a worker from the delalloc_workers queue running\ninode.c:submit_compressed_extents(), which calls btrfs_add_delayed_iput(),\nwhich in turn tries to wake up the cleaner kthread - which was already\ndestroyed before, resulting in a use-after-free on the task_struct.\n\nSyzbot reported this with the following stack traces:\n\n BUG: KASAN: slab-use-after-free in __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n Read of size 8 at addr ffff8880259d2818 by task kworker/u8:3/52\n\n CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024\n Workqueue: btrfs-delalloc btrfs_work_helper\n Call Trace:\n \n __dump_stack lib/dump_stack.c:94 [inline]\n dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120\n print_address_description mm/kasan/report.c:378 [inline]\n print_report+0x169/0x550 mm/kasan/report.c:489\n kasan_report+0x143/0x180 mm/kasan/report.c:602\n __lock_acquire+0x78/0x2100 kernel/locking/lockdep.c:5089\n lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849\n __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline]\n _raw_spin_lock_irqsave+0xd5/0x120 kernel/locking/spinlock.c:162\n class_raw_spinlock_irqsave_constructor include/linux/spinlock.h:551 [inline]\n try_to_wake_up+0xc2/0x1470 kernel/sched/core.c:4205\n submit_compressed_extents+0xdf/0x16e0 fs/btrfs/inode.c:1615\n run_ordered_work fs/btrfs/async-thread.c:288 [inline]\n btrfs_work_helper+0x96f/0xc40 fs/btrfs/async-thread.c:324\n process_one_work kernel/workqueue.c:3229 [inline]\n process_scheduled_works+0xa66/0x1840 kernel/workqueue.c:3310\n worker_thread+0x870/0xd30 kernel/workqueue.c:3391\n kthread+0x2f0/0x390 kernel/kthread.c:389\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n \n\n Allocated by task 2:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n unpoison_slab_object mm/kasan/common.c:319 [inline]\n __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:345\n kasan_slab_alloc include/linux/kasan.h:250 [inline]\n slab_post_alloc_hook mm/slub.c:4104 [inline]\n slab_alloc_node mm/slub.c:4153 [inline]\n kmem_cache_alloc_node_noprof+0x1d9/0x380 mm/slub.c:4205\n alloc_task_struct_node kernel/fork.c:180 [inline]\n dup_task_struct+0x57/0x8c0 kernel/fork.c:1113\n copy_process+0x5d1/0x3d50 kernel/fork.c:2225\n kernel_clone+0x223/0x870 kernel/fork.c:2807\n kernel_thread+0x1bc/0x240 kernel/fork.c:2869\n create_kthread kernel/kthread.c:412 [inline]\n kthreadd+0x60d/0x810 kernel/kthread.c:767\n ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147\n ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244\n\n Freed by task 24:\n kasan_save_stack mm/kasan/common.c:47 [inline]\n kasan_save_track+0x3f/0x80 mm/kasan/common.c:68\n kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:582\n poison_slab_object mm/kasan/common.c:247 [inline]\n __kasan_slab_free+0x59/0x70 mm/kasan/common.c:264\n kasan_slab_free include/linux/kasan.h:233 [inline]\n slab_free_hook mm/slub.c:2338 [inline]\n slab_free mm/slub.c:4598 [inline]\n kmem_cache_free+0x195/0x410 mm/slub.c:4700\n put_task_struct include/linux/sched/task.h:144 [inline]\n delayed_put_task_struct+0x125/0x300 kernel/exit.c:227\n rcu_do_batch kernel/rcu/tree.c:2567 [inline]\n rcu_core+0xaaa/0x17a0 kernel/rcu/tree.c:2823\n handle_softirqs+0x2d4/0x9b0 kernel/softirq.c:554\n run_ksoftirqd+0xca/0x130 kernel/softirq.c:943\n \n---truncated---",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1667"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"HIGH",
"baseScore":7.8,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"High",
"category":"impact"
}
],
"title":"CVE-2024-57896"
},
{
"cve":"CVE-2025-37738",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\next4: ignore xattrs past end\n\nOnce inside 'ext4_xattr_inode_dec_ref_all' we should\nignore xattrs entries past the 'end' entry.\n\nThis fixes the following KASAN reported issue:\n\n==================================================================\nBUG: KASAN: slab-use-after-free in ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\nRead of size 4 at addr ffff888012c120c4 by task repro/2065\n\nCPU: 1 UID: 0 PID: 2065 Comm: repro Not tainted 6.13.0-rc2+ #11\nHardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014\nCall Trace:\n \n dump_stack_lvl+0x1fd/0x300\n ? tcp_gro_dev_warn+0x260/0x260\n ? _printk+0xc0/0x100\n ? read_lock_is_recursive+0x10/0x10\n ? irq_work_queue+0x72/0xf0\n ? __virt_addr_valid+0x17b/0x4b0\n print_address_description+0x78/0x390\n print_report+0x107/0x1f0\n ? __virt_addr_valid+0x17b/0x4b0\n ? __virt_addr_valid+0x3ff/0x4b0\n ? __phys_addr+0xb5/0x160\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n kasan_report+0xcc/0x100\n ? ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ext4_xattr_inode_dec_ref_all+0xb8c/0xe90\n ? ext4_xattr_delete_inode+0xd30/0xd30\n ? __ext4_journal_ensure_credits+0x5f0/0x5f0\n ? __ext4_journal_ensure_credits+0x2b/0x5f0\n ? inode_update_timestamps+0x410/0x410\n ext4_xattr_delete_inode+0xb64/0xd30\n ? ext4_truncate+0xb70/0xdc0\n ? ext4_expand_extra_isize_ea+0x1d20/0x1d20\n ? __ext4_mark_inode_dirty+0x670/0x670\n ? ext4_journal_check_start+0x16f/0x240\n ? ext4_inode_is_fast_symlink+0x2f2/0x3a0\n ext4_evict_inode+0xc8c/0xff0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n ? do_raw_spin_unlock+0x53/0x8a0\n ? ext4_inode_is_fast_symlink+0x3a0/0x3a0\n evict+0x4ac/0x950\n ? proc_nr_inodes+0x310/0x310\n ? trace_ext4_drop_inode+0xa2/0x220\n ? _raw_spin_unlock+0x1a/0x30\n ? iput+0x4cb/0x7e0\n do_unlinkat+0x495/0x7c0\n ? try_break_deleg+0x120/0x120\n ? 0xffffffff81000000\n ? __check_object_size+0x15a/0x210\n ? strncpy_from_user+0x13e/0x250\n ? getname_flags+0x1dc/0x530\n __x64_sys_unlinkat+0xc8/0xf0\n do_syscall_64+0x65/0x110\n entry_SYSCALL_64_after_hwframe+0x67/0x6f\nRIP: 0033:0x434ffd\nCode: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 8\nRSP: 002b:00007ffc50fa7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000107\nRAX: ffffffffffffffda RBX: 00007ffc50fa7e18 RCX: 0000000000434ffd\nRDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005\nRBP: 00007ffc50fa7be0 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001\nR13: 00007ffc50fa7e08 R14: 00000000004bbf30 R15: 0000000000000001\n \n\nThe buggy address belongs to the object at ffff888012c12000\n which belongs to the cache filp of size 360\nThe buggy address is located 196 bytes inside of\n freed 360-byte region [ffff888012c12000, ffff888012c12168)\n\nThe buggy address belongs to the physical page:\npage: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c12\nhead: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0\nflags: 0x40(head|node=0|zone=0)\npage_type: f5(slab)\nraw: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nraw: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000040 ffff888000ad7640 ffffea0000497a00 dead000000000004\nhead: 0000000000000000 0000000000100010 00000001f5000000 0000000000000000\nhead: 0000000000000001 ffffea00004b0481 ffffffffffffffff 0000000000000000\nhead: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000\npage dumped because: kasan: bad access detected\n\nMemory state around the buggy address:\n ffff888012c11f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n ffff888012c12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n> ffff888012c12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb\n ^\n ffff888012c12100: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc\n ffff888012c12180: fc fc fc fc fc fc fc fc fc\n---truncated---",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1667"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2025-37738"
},
{
"cve":"CVE-2025-37937",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nobjtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()\n\nIf dib8000_set_dds()'s call to dib8000_read32() returns zero, the result\nis a divide-by-zero. Prevent that from happening.\n\nFixes the following warning with an UBSAN kernel:\n\n drivers/media/dvb-frontends/dib8000.o: warning: objtool: dib8000_tune() falls through to next function dib8096p_cfg_DibRx()",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
},
"remediations":[
{
"product_ids":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
],
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1667"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":[
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.aarch64",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.src",
"openEuler-22.03-LTS-SP3:kernel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-debugsource-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-headers-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-source-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:kernel-tools-devel-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-5.10.0-269.0.0.171.oe2203sp3.x86_64",
"openEuler-22.03-LTS-SP3:python3-perf-debuginfo-5.10.0-269.0.0.171.oe2203sp3.x86_64"
]
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2025-37937"
}
]
}