{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Medium" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"kernel security update", "category":"general", "title":"Synopsis" }, { "text":"An update for kernel is now available for openEuler-22.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nIn the Linux kernel, the following vulnerability has been resolved:ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_transThere is a kernel API ntb_mw_clear_trans() would pass 0 to both addr andsize. This would make xlate_pos negative.[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000[ 23.734158] ================================================================================[ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7[ 23.734418] shift exponent -1 is negativeEnsuring xlate_pos is a positive or zero before BIT.(CVE-2023-53034)\n\nIn the Linux kernel, the following vulnerability has been resolved:slimbus: messaging: Free transaction ID in delayed interrupt scenarioIn case of interrupt delay for any reason, slim_do_transfer()returns timeout error but the transaction ID (TID) is not freed.This results into invalid memory access insideqcom_slim_ngd_rx_msgq_cb() due to invalid TID.Fix the issue by freeing the TID in slim_do_transfer() beforereturning timeout error to avoid invalid memory access.Call trace:__memcpy_fromio+0x20/0x190qcom_slim_ngd_rx_msgq_cb+0x130/0x290 [slim_qcom_ngd_ctrl]vchan_complete+0x2a0/0x4a0tasklet_action_common+0x274/0x700tasklet_action+0x28/0x3c_stext+0x188/0x620run_ksoftirqd+0x34/0x74smpboot_thread_fn+0x1d8/0x464kthread+0x178/0x238ret_from_fork+0x10/0x20Code: aa0003e8 91000429 f100044a 3940002b (3800150b)---[ end trace 0fe00bec2b975c99 ]---Kernel panic - not syncing: Oops: Fatal exception in interrupt.(CVE-2025-21914)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: check that event count does not exceed event buffer length\n\nThe event count is read from register DWC3_GEVNTCOUNT.\nThere is a check for the count being zero, but not for exceeding the\nevent buffer length.\nCheck that event count does not exceed event buffer length,\navoiding an out-of-bounds access when memcpy'ing the event.\nCrash log:\nUnable to handle kernel paging request at virtual address ffffffc0129be000\npc : __memcpy+0x114/0x180\nlr : dwc3_check_event_buf+0xec/0x348\nx3 : 0000000000000030 x2 : 000000000000dfc4\nx1 : ffffffc0129be000 x0 : ffffff87aad60080\nCall trace:\n__memcpy+0x114/0x180\ndwc3_interrupt+0x24/0x34(CVE-2025-37810)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Validate UAC3 cluster segment descriptors\n\nUAC3 class segment descriptors need to be verified whether their sizes\nmatch with the declared lengths and whether they fit with the\nallocated buffer sizes, too. Otherwise malicious firmware may lead to\nthe unexpected OOB accesses.(CVE-2025-39757)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix crash in transport port remove by using ioc_info()\n\nDuring mpt3sas_transport_port_remove(), messages were logged with\ndev_printk() against &mpt3sas_port->port->dev. At this point the SAS\ntransport device may already be partially unregistered or freed, leading\nto a crash when accessing its struct device.\n\nUsing ioc_info(), which logs via the PCI device (ioc->pdev->dev),\nguaranteed to remain valid until driver removal.\n\n[83428.295776] Oops: general protection fault, probably for non-canonical address 0x6f702f323a33312d: 0000 [#1] SMP NOPTI\n[83428.295785] CPU: 145 UID: 0 PID: 113296 Comm: rmmod Kdump: loaded Tainted: G OE 6.16.0-rc1+ #1 PREEMPT(voluntary)\n[83428.295792] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\n[83428.295795] Hardware name: Dell Inc. Precision 7875 Tower/, BIOS 89.1.67 02/23/2024\n[83428.295799] RIP: 0010:__dev_printk+0x1f/0x70\n[83428.295805] Code: 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 49 89 d1 48 85 f6 74 52 4c 8b 46 50 4d 85 c0 74 1f 48 8b 46 68 48 85 c0 74 22 <48> 8b 08 0f b6 7f 01 48 c7 c2 db e8 42 ad 83 ef 30 e9 7b f8 ff ff\n[83428.295813] RSP: 0018:ff85aeafc3137bb0 EFLAGS: 00010206\n[83428.295817] RAX: 6f702f323a33312d RBX: ff4290ee81292860 RCX: 5000cca25103be32\n[83428.295820] RDX: ff85aeafc3137bb8 RSI: ff4290eeb1966c00 RDI: ffffffffc1560845\n[83428.295823] RBP: ff85aeafc3137c18 R08: 74726f702f303a33 R09: ff85aeafc3137bb8\n[83428.295826] R10: ff85aeafc3137b18 R11: ff4290f5bd60fe68 R12: ff4290ee81290000\n[83428.295830] R13: ff4290ee6e345de0 R14: ff4290ee81290000 R15: ff4290ee6e345e30\n[83428.295833] FS: 00007fd9472a6740(0000) GS:ff4290f5ce96b000(0000) knlGS:0000000000000000\n[83428.295837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[83428.295840] CR2: 00007f242b4db238 CR3: 00000002372b8006 CR4: 0000000000771ef0\n[83428.295844] PKRU: 55555554\n[83428.295846] Call Trace:\n[83428.295848] \n[83428.295850] _dev_printk+0x5c/0x80\n[83428.295857] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.295863] mpt3sas_transport_port_remove+0x1c7/0x420 [mpt3sas]\n[83428.295882] _scsih_remove_device+0x21b/0x280 [mpt3sas]\n[83428.295894] ? _scsih_expander_node_remove+0x108/0x140 [mpt3sas]\n[83428.295906] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.295910] mpt3sas_device_remove_by_sas_address.part.0+0x8f/0x110 [mpt3sas]\n[83428.295921] _scsih_expander_node_remove+0x129/0x140 [mpt3sas]\n[83428.295933] _scsih_expander_node_remove+0x6a/0x140 [mpt3sas]\n[83428.295944] scsih_remove+0x3f0/0x4a0 [mpt3sas]\n[83428.295957] pci_device_remove+0x3b/0xb0\n[83428.295962] device_release_driver_internal+0x193/0x200\n[83428.295968] driver_detach+0x44/0x90\n[83428.295971] bus_remove_driver+0x69/0xf0\n[83428.295975] pci_unregister_driver+0x2a/0xb0\n[83428.295979] _mpt3sas_exit+0x1f/0x300 [mpt3sas]\n[83428.295991] __do_sys_delete_module.constprop.0+0x174/0x310\n[83428.295997] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296000] ? __x64_sys_getdents64+0x9a/0x110\n[83428.296005] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296009] ? syscall_trace_enter+0xf6/0x1b0\n[83428.296014] do_syscall_64+0x7b/0x2c0\n[83428.296019] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296023] entry_SYSCALL_64_after_hwframe+0x76/0x7e(CVE-2025-40115)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Enforce expected_attach_type for tailcall compatibility\n\nYinhao et al. recently reported:\n\n Our fuzzer tool discovered an uninitialized pointer issue in the\n bpf_prog_test_run_xdp() function within the Linux kernel's BPF subsystem.\n This leads to a NULL pointer dereference when a BPF program attempts to\n deference the txq member of struct xdp_buff object.\n\nThe test initializes two programs of BPF_PROG_TYPE_XDP: progA acts as the\nentry point for bpf_prog_test_run_xdp() and its expected_attach_type can\nneither be of be BPF_XDP_DEVMAP nor BPF_XDP_CPUMAP. progA calls into a slot\nof a tailcall map it owns. progB's expected_attach_type must be BPF_XDP_DEVMAP\nto pass xdp_is_valid_access() validation. The program returns struct xdp_md's\negress_ifindex, and the latter is only allowed to be accessed under mentioned\nexpected_attach_type. progB is then inserted into the tailcall which progA\ncalls.\n\nThe underlying issue goes beyond XDP though. Another example are programs\nof type BPF_PROG_TYPE_CGROUP_SOCK_ADDR. sock_addr_is_valid_access() as well\nas sock_addr_func_proto() have different logic depending on the programs'\nexpected_attach_type. Similarly, a program attached to BPF_CGROUP_INET4_GETPEERNAME\nshould not be allowed doing a tailcall into a program which calls bpf_bind()\nout of BPF which is only enabled for BPF_CGROUP_INET4_CONNECT.\n\nIn short, specifying expected_attach_type allows to open up additional\nfunctionality or restrictions beyond what the basic bpf_prog_type enables.\nThe use of tailcalls must not violate these constraints. Fix it by enforcing\nexpected_attach_type in __bpf_prog_map_compatible().\n\nNote that we only enforce this for tailcall maps, but not for BPF devmaps or\ncpumaps: There, the programs are invoked through dev_map_bpf_prog_run*() and\ncpu_map_bpf_prog_run*() which set up a new environment / context and therefore\nthese situations are not prone to this issue.(CVE-2025-40123)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/i10nm: Skip DIMM enumeration on a disabled memory controller\n\nWhen loading the i10nm_edac driver on some Intel Granite Rapids servers,\na call trace may appear as follows:\n\n UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16\n shift exponent -66 is negative\n ...\n __ubsan_handle_shift_out_of_bounds+0x1e3/0x390\n skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common]\n i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac]\n skx_register_mci+0x159/0x220 [skx_edac_common]\n i10nm_init+0xcb0/0x1ff0 [i10nm_edac]\n ...\n\nThis occurs because some BIOS may disable a memory controller if there\naren't any memory DIMMs populated on this memory controller. The DIMMMTR\nregister of this disabled memory controller contains the invalid value\n~0, resulting in the call trace above.\n\nFix this call trace by skipping DIMM enumeration on a disabled memory\ncontroller.(CVE-2025-40157)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs: quota: create dedicated workqueue for quota_release_work\n\nThere is a kernel panic due to WARN_ONCE when panic_on_warn is set.\n\nThis issue occurs when writeback is triggered due to sync call for an\nopened file(ie, writeback reason is WB_REASON_SYNC). When f2fs balance\nis needed at sync path, flush for quota_release_work is triggered.\nBy default quota_release_work is queued to \"events_unbound\" queue which\ndoes not have WQ_MEM_RECLAIM flag. During f2fs balance \"writeback\"\nworkqueue tries to flush quota_release_work causing kernel panic due to\nMEM_RECLAIM flag mismatch errors.\n\nThis patch creates dedicated workqueue with WQ_MEM_RECLAIM flag\nfor work quota_release_work.\n\n------------[ cut here ]------------\nWARNING: CPU: 4 PID: 14867 at kernel/workqueue.c:3721 check_flush_dependency+0x13c/0x148\nCall trace:\n check_flush_dependency+0x13c/0x148\n __flush_work+0xd0/0x398\n flush_delayed_work+0x44/0x5c\n dquot_writeback_dquots+0x54/0x318\n f2fs_do_quota_sync+0xb8/0x1a8\n f2fs_write_checkpoint+0x3cc/0x99c\n f2fs_gc+0x190/0x750\n f2fs_balance_fs+0x110/0x168\n f2fs_write_single_data_page+0x474/0x7dc\n f2fs_write_data_pages+0x7d0/0xd0c\n do_writepages+0xe0/0x2f4\n __writeback_single_inode+0x44/0x4ac\n writeback_sb_inodes+0x30c/0x538\n wb_writeback+0xf4/0x440\n wb_workfn+0x128/0x5d4\n process_scheduled_works+0x1c4/0x45c\n worker_thread+0x32c/0x3e8\n kthread+0x11c/0x1b0\n ret_from_fork+0x10/0x20\nKernel panic - not syncing: kernel: panic_on_warn set ...(CVE-2025-40196)", "category":"general", "title":"Description" }, { "text":"An update for kernel is now available for openEuler-22.03-LTS-SP4.\n\nopenEuler Security has rated this update as having a security impact of medium. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Medium", "category":"general", "title":"Severity" }, { "text":"kernel", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2025-2699", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" }, { "summary":"CVE-2023-53034", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2023-53034&packageName=kernel" }, { "summary":"CVE-2025-21914", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-21914&packageName=kernel" }, { "summary":"CVE-2025-37810", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-37810&packageName=kernel" }, { "summary":"CVE-2025-39757", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-39757&packageName=kernel" }, { "summary":"CVE-2025-40115", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-40115&packageName=kernel" }, { "summary":"CVE-2025-40123", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-40123&packageName=kernel" }, { "summary":"CVE-2025-40157", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-40157&packageName=kernel" }, { "summary":"CVE-2025-40196", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-40196&packageName=kernel" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2023-53034" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-21914" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-37810" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39757" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40115" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40123" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40157" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-40196" }, { "summary":"openEuler-SA-2025-2699 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2025/csaf-openEuler-SA-2025-2699.json" } ], "title":"An update for kernel is now available for openEuler-22.03-LTS-SP4", "tracking":{ "initial_release_date":"2025-11-24T15:38:12+08:00", "revision_history":[ { "date":"2025-11-24T15:38:12+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2025-11-24T15:38:12+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2025-11-24T15:38:12+08:00", "id":"openEuler-SA-2025-2699", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm" }, "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm" }, "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-291.0.0.194.oe2203sp4.src.rpm", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.src.rpm" }, "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"perf-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"perf-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "name":"python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-291.0.0.194.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src", "name":"kernel-5.10.0-291.0.0.194.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2023-53034", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_transThere is a kernel API ntb_mw_clear_trans() would pass 0 to both addr andsize. This would make xlate_pos negative.[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000[ 23.734158] ================================================================================[ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7[ 23.734418] shift exponent -1 is negativeEnsuring xlate_pos is a positive or zero before BIT.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2023-53034" }, { "cve":"CVE-2025-21914", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:slimbus: messaging: Free transaction ID in delayed interrupt scenarioIn case of interrupt delay for any reason, slim_do_transfer()returns timeout error but the transaction ID (TID) is not freed.This results into invalid memory access insideqcom_slim_ngd_rx_msgq_cb() due to invalid TID.Fix the issue by freeing the TID in slim_do_transfer() beforereturning timeout error to avoid invalid memory access.Call trace:__memcpy_fromio+0x20/0x190qcom_slim_ngd_rx_msgq_cb+0x130/0x290 [slim_qcom_ngd_ctrl]vchan_complete+0x2a0/0x4a0tasklet_action_common+0x274/0x700tasklet_action+0x28/0x3c_stext+0x188/0x620run_ksoftirqd+0x34/0x74smpboot_thread_fn+0x1d8/0x464kthread+0x178/0x238ret_from_fork+0x10/0x20Code: aa0003e8 91000429 f100044a 3940002b (3800150b)---[ end trace 0fe00bec2b975c99 ]---Kernel panic - not syncing: Oops: Fatal exception in interrupt.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-21914" }, { "cve":"CVE-2025-37810", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: dwc3: gadget: check that event count does not exceed event buffer length\n\nThe event count is read from register DWC3_GEVNTCOUNT.\nThere is a check for the count being zero, but not for exceeding the\nevent buffer length.\nCheck that event count does not exceed event buffer length,\navoiding an out-of-bounds access when memcpy'ing the event.\nCrash log:\nUnable to handle kernel paging request at virtual address ffffffc0129be000\npc : __memcpy+0x114/0x180\nlr : dwc3_check_event_buf+0xec/0x348\nx3 : 0000000000000030 x2 : 000000000000dfc4\nx1 : ffffffc0129be000 x0 : ffffff87aad60080\nCall trace:\n__memcpy+0x114/0x180\ndwc3_interrupt+0x24/0x34", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2025-37810" }, { "cve":"CVE-2025-39757", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: usb-audio: Validate UAC3 cluster segment descriptors\n\nUAC3 class segment descriptors need to be verified whether their sizes\nmatch with the declared lengths and whether they fit with the\nallocated buffer sizes, too. Otherwise malicious firmware may lead to\nthe unexpected OOB accesses.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-39757" }, { "cve":"CVE-2025-40115", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix crash in transport port remove by using ioc_info()\n\nDuring mpt3sas_transport_port_remove(), messages were logged with\ndev_printk() against &mpt3sas_port->port->dev. At this point the SAS\ntransport device may already be partially unregistered or freed, leading\nto a crash when accessing its struct device.\n\nUsing ioc_info(), which logs via the PCI device (ioc->pdev->dev),\nguaranteed to remain valid until driver removal.\n\n[83428.295776] Oops: general protection fault, probably for non-canonical address 0x6f702f323a33312d: 0000 [#1] SMP NOPTI\n[83428.295785] CPU: 145 UID: 0 PID: 113296 Comm: rmmod Kdump: loaded Tainted: G OE 6.16.0-rc1+ #1 PREEMPT(voluntary)\n[83428.295792] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE\n[83428.295795] Hardware name: Dell Inc. Precision 7875 Tower/, BIOS 89.1.67 02/23/2024\n[83428.295799] RIP: 0010:__dev_printk+0x1f/0x70\n[83428.295805] Code: 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 49 89 d1 48 85 f6 74 52 4c 8b 46 50 4d 85 c0 74 1f 48 8b 46 68 48 85 c0 74 22 <48> 8b 08 0f b6 7f 01 48 c7 c2 db e8 42 ad 83 ef 30 e9 7b f8 ff ff\n[83428.295813] RSP: 0018:ff85aeafc3137bb0 EFLAGS: 00010206\n[83428.295817] RAX: 6f702f323a33312d RBX: ff4290ee81292860 RCX: 5000cca25103be32\n[83428.295820] RDX: ff85aeafc3137bb8 RSI: ff4290eeb1966c00 RDI: ffffffffc1560845\n[83428.295823] RBP: ff85aeafc3137c18 R08: 74726f702f303a33 R09: ff85aeafc3137bb8\n[83428.295826] R10: ff85aeafc3137b18 R11: ff4290f5bd60fe68 R12: ff4290ee81290000\n[83428.295830] R13: ff4290ee6e345de0 R14: ff4290ee81290000 R15: ff4290ee6e345e30\n[83428.295833] FS: 00007fd9472a6740(0000) GS:ff4290f5ce96b000(0000) knlGS:0000000000000000\n[83428.295837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[83428.295840] CR2: 00007f242b4db238 CR3: 00000002372b8006 CR4: 0000000000771ef0\n[83428.295844] PKRU: 55555554\n[83428.295846] Call Trace:\n[83428.295848] \n[83428.295850] _dev_printk+0x5c/0x80\n[83428.295857] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.295863] mpt3sas_transport_port_remove+0x1c7/0x420 [mpt3sas]\n[83428.295882] _scsih_remove_device+0x21b/0x280 [mpt3sas]\n[83428.295894] ? _scsih_expander_node_remove+0x108/0x140 [mpt3sas]\n[83428.295906] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.295910] mpt3sas_device_remove_by_sas_address.part.0+0x8f/0x110 [mpt3sas]\n[83428.295921] _scsih_expander_node_remove+0x129/0x140 [mpt3sas]\n[83428.295933] _scsih_expander_node_remove+0x6a/0x140 [mpt3sas]\n[83428.295944] scsih_remove+0x3f0/0x4a0 [mpt3sas]\n[83428.295957] pci_device_remove+0x3b/0xb0\n[83428.295962] device_release_driver_internal+0x193/0x200\n[83428.295968] driver_detach+0x44/0x90\n[83428.295971] bus_remove_driver+0x69/0xf0\n[83428.295975] pci_unregister_driver+0x2a/0xb0\n[83428.295979] _mpt3sas_exit+0x1f/0x300 [mpt3sas]\n[83428.295991] __do_sys_delete_module.constprop.0+0x174/0x310\n[83428.295997] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296000] ? __x64_sys_getdents64+0x9a/0x110\n[83428.296005] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296009] ? syscall_trace_enter+0xf6/0x1b0\n[83428.296014] do_syscall_64+0x7b/0x2c0\n[83428.296019] ? srso_alias_return_thunk+0x5/0xfbef5\n[83428.296023] entry_SYSCALL_64_after_hwframe+0x76/0x7e", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-40115" }, { "cve":"CVE-2025-40123", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Enforce expected_attach_type for tailcall compatibility\n\nYinhao et al. recently reported:\n\n Our fuzzer tool discovered an uninitialized pointer issue in the\n bpf_prog_test_run_xdp() function within the Linux kernel's BPF subsystem.\n This leads to a NULL pointer dereference when a BPF program attempts to\n deference the txq member of struct xdp_buff object.\n\nThe test initializes two programs of BPF_PROG_TYPE_XDP: progA acts as the\nentry point for bpf_prog_test_run_xdp() and its expected_attach_type can\nneither be of be BPF_XDP_DEVMAP nor BPF_XDP_CPUMAP. progA calls into a slot\nof a tailcall map it owns. progB's expected_attach_type must be BPF_XDP_DEVMAP\nto pass xdp_is_valid_access() validation. The program returns struct xdp_md's\negress_ifindex, and the latter is only allowed to be accessed under mentioned\nexpected_attach_type. progB is then inserted into the tailcall which progA\ncalls.\n\nThe underlying issue goes beyond XDP though. Another example are programs\nof type BPF_PROG_TYPE_CGROUP_SOCK_ADDR. sock_addr_is_valid_access() as well\nas sock_addr_func_proto() have different logic depending on the programs'\nexpected_attach_type. Similarly, a program attached to BPF_CGROUP_INET4_GETPEERNAME\nshould not be allowed doing a tailcall into a program which calls bpf_bind()\nout of BPF which is only enabled for BPF_CGROUP_INET4_CONNECT.\n\nIn short, specifying expected_attach_type allows to open up additional\nfunctionality or restrictions beyond what the basic bpf_prog_type enables.\nThe use of tailcalls must not violate these constraints. Fix it by enforcing\nexpected_attach_type in __bpf_prog_map_compatible().\n\nNote that we only enforce this for tailcall maps, but not for BPF devmaps or\ncpumaps: There, the programs are invoked through dev_map_bpf_prog_run*() and\ncpu_map_bpf_prog_run*() which set up a new environment / context and therefore\nthese situations are not prone to this issue.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.4, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-40123" }, { "cve":"CVE-2025-40157", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nEDAC/i10nm: Skip DIMM enumeration on a disabled memory controller\n\nWhen loading the i10nm_edac driver on some Intel Granite Rapids servers,\na call trace may appear as follows:\n\n UBSAN: shift-out-of-bounds in drivers/edac/skx_common.c:453:16\n shift exponent -66 is negative\n ...\n __ubsan_handle_shift_out_of_bounds+0x1e3/0x390\n skx_get_dimm_info.cold+0x47/0xd40 [skx_edac_common]\n i10nm_get_dimm_config+0x23e/0x390 [i10nm_edac]\n skx_register_mci+0x159/0x220 [skx_edac_common]\n i10nm_init+0xcb0/0x1ff0 [i10nm_edac]\n ...\n\nThis occurs because some BIOS may disable a memory controller if there\naren't any memory DIMMs populated on this memory controller. The DIMMMTR\nregister of this disabled memory controller contains the invalid value\n~0, resulting in the call trace above.\n\nFix this call trace by skipping DIMM enumeration on a disabled memory\ncontroller.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":4.4, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-40157" }, { "cve":"CVE-2025-40196", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs: quota: create dedicated workqueue for quota_release_work\n\nThere is a kernel panic due to WARN_ONCE when panic_on_warn is set.\n\nThis issue occurs when writeback is triggered due to sync call for an\nopened file(ie, writeback reason is WB_REASON_SYNC). When f2fs balance\nis needed at sync path, flush for quota_release_work is triggered.\nBy default quota_release_work is queued to \"events_unbound\" queue which\ndoes not have WQ_MEM_RECLAIM flag. During f2fs balance \"writeback\"\nworkqueue tries to flush quota_release_work causing kernel panic due to\nMEM_RECLAIM flag mismatch errors.\n\nThis patch creates dedicated workqueue with WQ_MEM_RECLAIM flag\nfor work quota_release_work.\n\n------------[ cut here ]------------\nWARNING: CPU: 4 PID: 14867 at kernel/workqueue.c:3721 check_flush_dependency+0x13c/0x148\nCall trace:\n check_flush_dependency+0x13c/0x148\n __flush_work+0xd0/0x398\n flush_delayed_work+0x44/0x5c\n dquot_writeback_dquots+0x54/0x318\n f2fs_do_quota_sync+0xb8/0x1a8\n f2fs_write_checkpoint+0x3cc/0x99c\n f2fs_gc+0x190/0x750\n f2fs_balance_fs+0x110/0x168\n f2fs_write_single_data_page+0x474/0x7dc\n f2fs_write_data_pages+0x7d0/0xd0c\n do_writepages+0xe0/0x2f4\n __writeback_single_inode+0x44/0x4ac\n writeback_sb_inodes+0x30c/0x538\n wb_writeback+0xf4/0x440\n wb_workfn+0x128/0x5d4\n process_scheduled_works+0x1c4/0x45c\n worker_thread+0x32c/0x3e8\n kthread+0x11c/0x1b0\n ret_from_fork+0x10/0x20\nKernel panic - not syncing: kernel: panic_on_warn set ...", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2699" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-291.0.0.194.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-291.0.0.194.oe2203sp4.src" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2025-40196" } ] }