{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"High" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"kernel security update", "category":"general", "title":"Synopsis" }, { "text":"An update for kernel is now available for openEuler-20.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nLinux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States.\n There is a security vulnerability in Linux kernel, which originates from a qlen count error in sch_hfsc, which may cause inconsistent queue statistics.(CVE-2025-38000)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cxusb: no longer judge rbuf when the write fails\n\nsyzbot reported a uninit-value in cxusb_i2c_xfer. [1]\n\nOnly when the write operation of usb_bulk_msg() in dvb_usb_generic_rw()\nsucceeds and rlen is greater than 0, the read operation of usb_bulk_msg()\nwill be executed to read rlen bytes of data from the dvb device into the\nrbuf.\n\nIn this case, although rlen is 1, the write operation failed which resulted\nin the dvb read operation not being executed, and ultimately variable i was\nnot initialized.\n\n[1]\nBUG: KMSAN: uninit-value in cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\nBUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\n cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n __i2c_transfer+0xe25/0x3150 drivers/i2c/i2c-core-base.c:-1\n i2c_transfer+0x317/0x4a0 drivers/i2c/i2c-core-base.c:2315\n i2c_transfer_buffer_flags+0x125/0x1e0 drivers/i2c/i2c-core-base.c:2343\n i2c_master_send include/linux/i2c.h:109 [inline]\n i2cdev_write+0x210/0x280 drivers/i2c/i2c-dev.c:183\n do_loop_readv_writev fs/read_write.c:848 [inline]\n vfs_writev+0x963/0x14e0 fs/read_write.c:1057\n do_writev+0x247/0x5c0 fs/read_write.c:1101\n __do_sys_writev fs/read_write.c:1169 [inline]\n __se_sys_writev fs/read_write.c:1166 [inline]\n __x64_sys_writev+0x98/0xe0 fs/read_write.c:1166\n x64_sys_call+0x2229/0x3c80 arch/x86/include/generated/asm/syscalls_64.h:21\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f(CVE-2025-38229)\n\nA vulnerability has been found in Linux Kernel up to 6.15.2 (Operating System) and classified as critical.The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 44ebe361abb322d2afd77930fa767a99f271c4d1/147ea936fc6fa8fe0c93f0df918803a5375ca535/ee90be48edb3dac612e0b7f5332482a9e8be2696/e167414beabb1e941fe563a96becc98627d5bdf6/6d8f39875a10a194051c3eaefebc7ac06a34aaf3/c98cdf6795a36bca163ebb40411fef1687b9eb13/18e8cbbae79cb35bdce8a01c889827b9799c762e/3880cdbed1c4607e378f58fa924c5d6df900d1d3 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38285)\n\nA vulnerability was found in Linux Kernel up to 6.16-rc2 (Operating System). It has been declared as problematic.The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.As an impact it is known to affect confidentiality.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 64773b3ea09235168a549a195cba43bb867c4a17/67abac27d806e8f9d4226ec1528540cf73af673a/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38/01f91d415a8375d85e0c7d3615cd4a168308bb7c/21da6d3561f373898349ca7167c9811c020da695/22f935bc86bdfbde04009f05eee191d220cd8c89/422e565b7889ebfd9c8705a3fc786642afe61fca/39dfc971e42d886e7df01371cd1bef505076d84c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-20926).(CVE-2025-38320)\n\nA vulnerability was found in Linux Kernel up to 6.15.3 (Operating System). It has been declared as critical.The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch d064c68781c19f378af1ae741d9132d35d24b2bb/8690cd3258455bbae64f809e1d3ee0f043661c71/6805582abb720681dd1c87ff677f155dcf4e86c9/03a162933c4a03b9f1a84f7d8482903c7e1e11bb/83a692a9792aa86249d68a8ac0b9d55ecdd255fa/8e89c17dc8970c5f71a3a991f5724d4c8de42d8c/f78a786ad9a5443a29eef4dae60cde85b7375129/f914b52c379c12288b7623bb814d0508dbe7481d is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.(CVE-2025-38346)", "category":"general", "title":"Description" }, { "text":"An update for kernel is now available for openEuler-20.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of high. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"High", "category":"general", "title":"Severity" }, { "text":"kernel", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2025-1871", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" }, { "summary":"CVE-2025-38000", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-38000&packageName=kernel" }, { "summary":"CVE-2025-38229", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-38229&packageName=kernel" }, { "summary":"CVE-2025-38285", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-38285&packageName=kernel" }, { "summary":"CVE-2025-38320", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-38320&packageName=kernel" }, { "summary":"CVE-2025-38346", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-38346&packageName=kernel" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38000" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38229" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38285" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38320" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-38346" }, { "summary":"openEuler-SA-2025-1871 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openeuler-sa-2025-1871.json" } ], "title":"An update for kernel is now available for openEuler-20.03-LTS-SP4", "tracking":{ "initial_release_date":"2025-07-18T22:50:40+08:00", "revision_history":[ { "date":"2025-07-18T22:50:40+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2025-07-18T22:50:40+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2025-07-18T22:50:40+08:00", "id":"openEuler-SA-2025-1871", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"openEuler-20.03-LTS-SP4", "name":"openEuler-20.03-LTS-SP4" }, "name":"openEuler-20.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm" }, "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm" }, "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:20.03-LTS-SP4" }, "product_id":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.src.rpm", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.src.rpm" }, "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "name":"python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64 as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-20.03-LTS-SP4", "product_reference":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src", "name":"kernel-4.19.90-2507.3.0.0336.oe2003sp4.src as a component of openEuler-20.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-38000", "notes":[ { "text":"Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States.\n There is a security vulnerability in Linux kernel, which originates from a qlen count error in sch_hfsc, which may cause inconsistent queue statistics.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-38000" }, { "cve":"CVE-2025-38229", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: cxusb: no longer judge rbuf when the write fails\n\nsyzbot reported a uninit-value in cxusb_i2c_xfer. [1]\n\nOnly when the write operation of usb_bulk_msg() in dvb_usb_generic_rw()\nsucceeds and rlen is greater than 0, the read operation of usb_bulk_msg()\nwill be executed to read rlen bytes of data from the dvb device into the\nrbuf.\n\nIn this case, although rlen is 1, the write operation failed which resulted\nin the dvb read operation not being executed, and ultimately variable i was\nnot initialized.\n\n[1]\nBUG: KMSAN: uninit-value in cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\nBUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n cxusb_gpio_tuner drivers/media/usb/dvb-usb/cxusb.c:124 [inline]\n cxusb_i2c_xfer+0x153a/0x1a60 drivers/media/usb/dvb-usb/cxusb.c:196\n __i2c_transfer+0xe25/0x3150 drivers/i2c/i2c-core-base.c:-1\n i2c_transfer+0x317/0x4a0 drivers/i2c/i2c-core-base.c:2315\n i2c_transfer_buffer_flags+0x125/0x1e0 drivers/i2c/i2c-core-base.c:2343\n i2c_master_send include/linux/i2c.h:109 [inline]\n i2cdev_write+0x210/0x280 drivers/i2c/i2c-dev.c:183\n do_loop_readv_writev fs/read_write.c:848 [inline]\n vfs_writev+0x963/0x14e0 fs/read_write.c:1057\n do_writev+0x247/0x5c0 fs/read_write.c:1101\n __do_sys_writev fs/read_write.c:1169 [inline]\n __se_sys_writev fs/read_write.c:1166 [inline]\n __x64_sys_writev+0x98/0xe0 fs/read_write.c:1166\n x64_sys_call+0x2229/0x3c80 arch/x86/include/generated/asm/syscalls_64.h:21\n do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]\n do_syscall_64+0xcd/0x1e0 arch/x86/entry/syscall_64.c:94\n entry_SYSCALL_64_after_hwframe+0x77/0x7f", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-38229" }, { "cve":"CVE-2025-38285", "notes":[ { "text":"A vulnerability has been found in Linux Kernel up to 6.15.2 (Operating System) and classified as critical.The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.94, 6.12.34, 6.15.3 or 6.16-rc1 eliminates this vulnerability. Applying the patch 44ebe361abb322d2afd77930fa767a99f271c4d1/147ea936fc6fa8fe0c93f0df918803a5375ca535/ee90be48edb3dac612e0b7f5332482a9e8be2696/e167414beabb1e941fe563a96becc98627d5bdf6/6d8f39875a10a194051c3eaefebc7ac06a34aaf3/c98cdf6795a36bca163ebb40411fef1687b9eb13/18e8cbbae79cb35bdce8a01c889827b9799c762e/3880cdbed1c4607e378f58fa924c5d6df900d1d3 is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-38285" }, { "cve":"CVE-2025-38320", "notes":[ { "text":"A vulnerability was found in Linux Kernel up to 6.16-rc2 (Operating System). It has been declared as problematic.The CWE definition for the vulnerability is CWE-125. The product reads data past the end, or before the beginning, of the intended buffer.As an impact it is known to affect confidentiality.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc3 eliminates this vulnerability. Applying the patch 64773b3ea09235168a549a195cba43bb867c4a17/67abac27d806e8f9d4226ec1528540cf73af673a/92750bfe7b0d8dbcaf578c091a65eda1c5f9ad38/01f91d415a8375d85e0c7d3615cd4a168308bb7c/21da6d3561f373898349ca7167c9811c020da695/22f935bc86bdfbde04009f05eee191d220cd8c89/422e565b7889ebfd9c8705a3fc786642afe61fca/39dfc971e42d886e7df01371cd1bef505076d84c is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-20926).", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-38320" }, { "cve":"CVE-2025-38346", "notes":[ { "text":"A vulnerability was found in Linux Kernel up to 6.15.3 (Operating System). It has been declared as critical.The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.As an impact it is known to affect confidentiality, integrity, and availability.Upgrading to version 5.4.295, 5.10.239, 5.15.186, 6.1.142, 6.6.95, 6.12.35, 6.15.4 or 6.16-rc1 eliminates this vulnerability. Applying the patch d064c68781c19f378af1ae741d9132d35d24b2bb/8690cd3258455bbae64f809e1d3ee0f043661c71/6805582abb720681dd1c87ff677f155dcf4e86c9/03a162933c4a03b9f1a84f7d8482903c7e1e11bb/83a692a9792aa86249d68a8ac0b9d55ecdd255fa/8e89c17dc8970c5f71a3a991f5724d4c8de42d8c/f78a786ad9a5443a29eef4dae60cde85b7375129/f914b52c379c12288b7623bb814d0508dbe7481d is able to eliminate this problem. The bugfix is ready for download at git.kernel.org. The best possible mitigation is suggested to be upgrading to the latest version.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-1871" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.aarch64", "openEuler-20.03-LTS-SP4:bpftool-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:bpftool-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-debugsource-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-source-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-tools-devel-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python2-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:python3-perf-debuginfo-4.19.90-2507.3.0.0336.oe2003sp4.x86_64", "openEuler-20.03-LTS-SP4:kernel-4.19.90-2507.3.0.0336.oe2003sp4.src" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-38346" } ] }