openEuler 24.03 LTS update for kernel

1) Out-of-bounds read

EUVDB-ID: #VU107691

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-53034

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the switchtec_ntb_mw_set_trans() function in drivers/ntb/hw/mscc/ntb_hw_switchtec.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Input validation error

EUVDB-ID: #VU102995

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41935

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the __grab_extent_tree(), __destroy_extent_node(), __update_extent_tree_range(), write_unlock(), __shrink_extent_tree(), f2fs_shrink_age_extent_tree(), f2fs_destroy_extent_node() and __drop_extent_tree() functions in fs/f2fs/extent_cache.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper locking

EUVDB-ID: #VU99014

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49980

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the vrf_finish_direct() function in drivers/net/vrf.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Integer overflow

EUVDB-ID: #VU105046

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-52559

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the msm_ioctl_gem_submit() function in drivers/gpu/drm/msm/msm_gem_submit.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Input validation error

EUVDB-ID: #VU105086

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-52560

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the compare_attr(), mi_new_attt_id(), mi_enum_attr(), mi_format_new() and mi_insert_attr() functions in fs/ntfs3/record.c, within the ni_std(), ni_std5(), ni_find_attr(), ni_enum_attr_ex(), ni_load_attr(), ni_remove_attr(), al_remove_le(), ni_ins_new_attr(), ni_try_remove_attr_list(), ni_create_attr_list(), ni_ins_attr_ext(), ni_insert_attr(), ni_expand_mft_list(), ni_expand_list() and ni_write_inode() functions in fs/ntfs3/frecord.c, within the mi_find_attr() and attr_collapse_range() functions in fs/ntfs3/attrib.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Out-of-bounds read

EUVDB-ID: #VU101912

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53162

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the uof_get_name() function in drivers/crypto/intel/qat/qat_4xxx/adf_4xxx_hw_data.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU102057

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53174

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the c_show() function in net/sunrpc/cache.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Improper locking

EUVDB-ID: #VU102174

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53176

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the cifs_dentry_needs_reval() function in fs/smb/client/inode.c, within the init_cifs() and cifs_destroy_netfs() functions in fs/smb/client/cifsfs.c, within the free_cached_dir(), close_all_cached_dirs(), invalidate_all_cached_dirs(), cached_dir_lease_break(), init_cached_dir(), cfids_laundromat_worker(), init_cached_dirs() and free_cached_dirs() functions in fs/smb/client/cached_dir.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU102056

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53177

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the SMB2_query_info_free(), invalidate_all_cached_dirs(), smb2_cached_lease_break(), cached_dir_lease_break() and cfids_laundromat_worker() functions in fs/smb/client/cached_dir.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Memory leak

EUVDB-ID: #VU102007

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53178

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the find_or_create_cached_dir() and smb2_set_related() functions in fs/smb/client/cached_dir.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Use-after-free

EUVDB-ID: #VU102054

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53179

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the smb2_get_sign_key(), smb2_find_smb_ses_unlocked(), smb2_calc_signature() and smb3_calc_signature() functions in fs/smb/client/smb2transport.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Resource management error

EUVDB-ID: #VU102231

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53181

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the vector_device_release() function in arch/um/drivers/vector_kern.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Memory leak

EUVDB-ID: #VU102004

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53210

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the iucv_sock_recvmsg() function in net/iucv/af_iucv.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Use-after-free

EUVDB-ID: #VU102356

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53216

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in fs/nfsd/export.c. A local user can execute arbitrary code with elevated privileges.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper error handling

EUVDB-ID: #VU102207

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53233

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the utf8_load() function in fs/unicode/utf8-core.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) NULL pointer dereference

EUVDB-ID: #VU102928

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53680

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ip_vs_protocol_net_cleanup() and ip_vs_protocol_init() functions in net/netfilter/ipvs/ip_vs_proto.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Use-after-free

EUVDB-ID: #VU104956

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-54458

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ufs_bsg_remove() function in drivers/ufs/core/ufs_bsg.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Resource management error

EUVDB-ID: #VU102984

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-55881

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the complete_hypercall_exit() function in arch/x86/kvm/x86.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Improper locking

EUVDB-ID: #VU102182

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56533

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the snd_usx2y_disconnect() function in sound/usb/usx2y/usbusx2y.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Resource management error

EUVDB-ID: #VU102253

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56545

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the mousevsc_hid_raw_request(), HID_DEVICE(), mousevsc_probe() and mousevsc_init() functions in drivers/hid/hid-hyperv.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Use-after-free

EUVDB-ID: #VU102042

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56558

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the e_show() function in fs/nfsd/export.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Improper locking

EUVDB-ID: #VU102170

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56566

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the check_slab(), slab_fix() and alloc_single_from_partial() functions in mm/slub.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Double free

EUVDB-ID: #VU102193

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56573

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a double free error within the efi_handle_cmdline() function in drivers/firmware/efi/libstub/efi-stub.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) NULL pointer dereference

EUVDB-ID: #VU102125

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56574

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ts2020_regmap_unlock() function in drivers/media/dvb-frontends/ts2020.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Resource management error

EUVDB-ID: #VU102229

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56576

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the tc358743_probe() function in drivers/media/i2c/tc358743.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) NULL pointer dereference

EUVDB-ID: #VU102123

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56577

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mtk_jpegdec_hw_init_irq() and mtk_jpegdec_hw_probe() functions in drivers/media/platform/mediatek/jpeg/mtk_jpeg_dec_hw.c, within the mtk_jpeg_single_core_init() and mtk_jpeg_probe() functions in drivers/media/platform/mediatek/jpeg/mtk_jpeg_core.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Improper error handling

EUVDB-ID: #VU102205

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56579

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the vpu_add_func() function in drivers/media/platform/amphion/vpu_v4l2.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) NULL pointer dereference

EUVDB-ID: #VU102104

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56587

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the brightness_show() and max_brightness_show() functions in drivers/leds/led-class.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) NULL pointer dereference

EUVDB-ID: #VU102107

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56593

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the brcmf_sdiod_sgtable_alloc() function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Use-after-free

EUVDB-ID: #VU102016

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56600

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the htons() function in net/ipv6/af_inet6.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Use-after-free

EUVDB-ID: #VU102017

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56602

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ieee802154_create() function in net/ieee802154/socket.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Out-of-bounds read

EUVDB-ID: #VU102082

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56616

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the drm_dp_decode_sideband_msg_hdr() function in drivers/gpu/drm/display/drm_dp_mst_topology.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Resource management error

EUVDB-ID: #VU102244

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56625

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the can_set_termination() function in drivers/net/can/dev/dev.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) Improper locking

EUVDB-ID: #VU102162

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56628

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the arch/loongarch/include/asm/hugetlb.h. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Use-after-free

EUVDB-ID: #VU102026

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56635

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the default_operstate() function in net/core/link_watch.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Resource management error

EUVDB-ID: #VU102245

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56636

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the geneve_xmit_skb() function in drivers/net/geneve.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Memory leak

EUVDB-ID: #VU101989

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56643

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the dccp_feat_change_recv() function in net/dccp/feat.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Memory leak

EUVDB-ID: #VU101992

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56644

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ip6_negative_advice() function in net/ipv6/route.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Integer underflow

EUVDB-ID: #VU102210

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56645

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer underflow within the j1939_session_new() function in net/can/j1939/transport.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Use-after-free

EUVDB-ID: #VU102030

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56651

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the hi3110_can_ist() function in drivers/net/can/spi/hi311x.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Use-after-free

EUVDB-ID: #VU102034

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56664

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sock_map_lookup_sys() function in net/core/sock_map.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Use-after-free

EUVDB-ID: #VU102012

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56678

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ___do_page_fault() function in arch/powerpc/mm/fault.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) NULL pointer dereference

EUVDB-ID: #VU102097

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56689

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the pci_epf_mhi_bind() function in drivers/pci/endpoint/functions/pci-epf-mhi.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Improper locking

EUVDB-ID: #VU102157

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56694

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the sk_psock_strp_data_ready() function in net/core/skmsg.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Input validation error

EUVDB-ID: #VU102275

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56707

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the otx2_dmacflt_do_add() and otx2_dmacflt_update() functions in drivers/net/ethernet/marvell/octeontx2/nic/otx2_dmac_flt.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Memory leak

EUVDB-ID: #VU101988

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56710

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the __ceph_sync_read() and ceph_direct_read_write() functions in fs/ceph/file.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Resource management error

EUVDB-ID: #VU102225

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56723

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ARRAY_SIZE() and bxtwc_probe() functions in drivers/mfd/intel_soc_pmic_bxtwc.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Resource management error

EUVDB-ID: #VU102224

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56724

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the bxt_wcove_tmu_irq_handler() and bxt_wcove_tmu_probe() functions in drivers/platform/x86/intel/bxtwc_tmu.c, within the ARRAY_SIZE() and bxtwc_probe() functions in drivers/mfd/intel_soc_pmic_bxtwc.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Input validation error

EUVDB-ID: #VU102269

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56725

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the otx2_config_priority_flow_ctrl() function in drivers/net/ethernet/marvell/octeontx2/nic/otx2_dcbnl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) Input validation error

EUVDB-ID: #VU102271

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56727

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the otx2_alloc_mcam_entries() and otx2_mcam_entry_init() functions in drivers/net/ethernet/marvell/octeontx2/nic/otx2_flows.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) Improper locking

EUVDB-ID: #VU102152

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56751

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the ip6_dst_ifdown(), DEFINE_SPINLOCK() and rt6_remove_exception() functions in net/ipv6/route.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Input validation error

EUVDB-ID: #VU102273

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56754

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the caam_qi_init() function in drivers/crypto/caam/qi.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) NULL pointer dereference

EUVDB-ID: #VU102483

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-56774

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the btrfs_search_slot() function in fs/btrfs/ctree.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) Use-after-free

EUVDB-ID: #VU102906

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57795

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the rxe_query_port(), rxe_enable_driver(), INIT_RDMA_OBJ_SIZE() and rxe_register_device() functions in drivers/infiniband/sw/rxe/rxe_verbs.c, within the rxe_parent_name(), rxe_net_add() and rxe_port_down() functions in drivers/infiniband/sw/rxe/rxe_net.c, within the rxe_mcast_add() function in drivers/infiniband/sw/rxe/rxe_mcast.c, within the rxe_dealloc(), rxe_init_device_param(), rxe_init_port_param() and rxe_set_mtu() functions in drivers/infiniband/sw/rxe/rxe.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

55) Use-after-free

EUVDB-ID: #VU102910

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57857

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the siw_query_device(), siw_query_port() and siw_query_qp() functions in drivers/infiniband/sw/siw/siw_verbs.c, within the siw_device_create(), siw_netdev_event() and siw_newlink() functions in drivers/infiniband/sw/siw/siw_main.c, within the siw_create_listen() and siw_cep_set_free_and_put() functions in drivers/infiniband/sw/siw/siw_cm.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

56) Memory leak

EUVDB-ID: #VU103004

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57908

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the kmx61_trigger_handler() function in drivers/iio/imu/kmx61.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

57) Memory leak

EUVDB-ID: #VU103007

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57911

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the iio_simple_dummy_trigger_h() function in drivers/iio/dummy/iio_simple_dummy_buffer.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

58) Memory leak

EUVDB-ID: #VU103008

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57912

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the zpa2326_fill_sample_buffer() function in drivers/iio/pressure/zpa2326.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

59) NULL pointer dereference

EUVDB-ID: #VU103021

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57929

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the load_ablock() function in drivers/md/persistent-data/dm-array.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

60) Buffer overflow

EUVDB-ID: #VU103924

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:U/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57952

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the simple_offset_destroy(), offset_dir_open(), offset_dir_llseek(), offset_dir_emit() and offset_iterate_dir() functions in fs/libfs.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

61) Out-of-bounds read

EUVDB-ID: #VU104987

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57996

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the sfq_change() function in net/sched/sch_sfq.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

62) Improper locking

EUVDB-ID: #VU105029

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-57999

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the enable_ddw() and spapr_tce_create_table() functions in arch/powerpc/platforms/pseries/iommu.c, within the iommu_table_clear() function in arch/powerpc/kernel/iommu.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

63) Resource management error

EUVDB-ID: #VU105071

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58002

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the uvc_v4l2_release() function in drivers/media/usb/uvc/uvc_v4l2.c, within the uvc_ctrl_send_slave_event(), uvc_ctrl_status_event(), uvc_ctrl_commit_entity() and uvc_ctrl_init_device() functions in drivers/media/usb/uvc/uvc_ctrl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

64) Buffer overflow

EUVDB-ID: #VU105062

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58003

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the ub953_subdev_uninit() function in drivers/media/i2c/ds90ub953.c, within the ub913_subdev_uninit() function in drivers/media/i2c/ds90ub913.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

65) Out-of-bounds read

EUVDB-ID: #VU104973

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58007

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the qcom_socinfo_probe() function in drivers/soc/qcom/socinfo.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

66) NULL pointer dereference

EUVDB-ID: #VU105007

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58009

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the l2cap_sock_alloc() function in net/bluetooth/l2cap_sock.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

67) NULL pointer dereference

EUVDB-ID: #VU105006

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58011

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the skl_int3472_tps68470_probe() function in drivers/platform/x86/intel/int3472/tps68470.c, within the skl_int3472_discrete_probe() function in drivers/platform/x86/intel/int3472/discrete.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

68) Use-after-free

EUVDB-ID: #VU104958

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58013

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mgmt_remove_adv_monitor_complete() function in net/bluetooth/mgmt.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

69) Out-of-bounds read

EUVDB-ID: #VU104974

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58014

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the wlc_phy_iqcal_gainparams_nphy() function in drivers/net/wireless/broadcom/brcm80211/brcmsmac/phy/phy_n.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

70) Resource management error

EUVDB-ID: #VU105073

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58016

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the handle_policy_update() function in security/safesetid/securityfs.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

71) Integer overflow

EUVDB-ID: #VU105048

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58017

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the __alignof__() function in kernel/printk/printk.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

72) NULL pointer dereference

EUVDB-ID: #VU105400

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58076

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the &() function in drivers/clk/qcom/gcc-sm6350.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

73) Use-after-free

EUVDB-ID: #VU105390

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58079

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the uvc_gpio_parse() and uvc_unregister_video() functions in drivers/media/usb/uvc/uvc_driver.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

74) Use-after-free

EUVDB-ID: #VU105391

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58083

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the include/linux/kvm_host.h. A local user can escalate privileges on the system.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

75) Input validation error

EUVDB-ID: #VU105431

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58086

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the v3d_perfmon_destroy_ioctl() function in drivers/gpu/drm/v3d/v3d_perfmon.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

76) NULL pointer dereference

EUVDB-ID: #VU105657

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58088

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the cgroup_storage_map_alloc() function in kernel/bpf/bpf_cgrp_storage.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

77) Infinite loop

EUVDB-ID: #VU106127

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-58090

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the !defined() function in kernel/sched/core.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

78) NULL pointer dereference

EUVDB-ID: #VU103023

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21636

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the proc_sctp_do_udp_port() function in net/sctp/sysctl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

79) NULL pointer dereference

EUVDB-ID: #VU103024

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21637

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the proc_sctp_do_auth() function in net/sctp/sysctl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

80) NULL pointer dereference

EUVDB-ID: #VU103025

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21638

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the proc_sctp_do_alpha_beta() function in net/sctp/sysctl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

81) NULL pointer dereference

EUVDB-ID: #VU103027

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-21640

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the proc_sctp_do_hmac_alg() function in net/sctp/sysctl.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

openEuler: 24.03 LTS

python3-perf-debuginfo: before 6.6.0-87.0.0.82

python3-perf: before 6.6.0-87.0.0.82

perf-debuginfo: before 6.6.0-87.0.0.82

perf: before 6.6.0-87.0.0.82

kernel-tools-devel: before 6.6.0-87.0.0.82

kernel-tools-debuginfo: before 6.6.0-87.0.0.82

kernel-tools: before 6.6.0-87.0.0.82

kernel-source: before 6.6.0-87.0.0.82

kernel-headers: before 6.6.0-87.0.0.82

kernel-devel: before 6.6.0-87.0.0.82

kernel-debugsource: before 6.6.0-87.0.0.82

kernel-debuginfo: before 6.6.0-87.0.0.82

bpftool-debuginfo: before 6.6.0-87.0.0.82

bpftool: before 6.6.0-87.0.0.82

kernel: before 6.6.0-87.0.0.82

• cpe:2.3:o:openeuler:openeuler:24.03:LTS:*:*:*:*:*:*
• cpe:2.3:a:openeuler:python3-perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:python3-perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:perf:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-tools:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-source:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-headers:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-devel:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debugsource:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool-debuginfo:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:bpftool:*:*:*:*:*:openeuler:*:*
• cpe:2.3:a:openeuler:kernel:*:*:*:*:*:openeuler:*:*

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-1450

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?