Anolis OS update for kernel:5.10

1) Infinite loop

EUVDB-ID: #VU91414

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48635

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the dax_iomap_rw() function in fs/dax.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Information disclosure

EUVDB-ID: #VU91361

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48639

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to information disclosure within the net/sched/cls_api.c. A local user can gain access to sensitive information.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Improper locking

EUVDB-ID: #VU91452

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48644

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the taprio_enable_offload() and taprio_disable_offload() functions in net/sched/sch_taprio.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Out-of-bounds read

EUVDB-ID: #VU89680

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-48651

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in drivers/net/ipvlan/ipvlan_core.c. A remote attacker on the local network can send specially crafted packets to the system, trigger an out-of-bounds read error and read contents of memory on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Improper locking

EUVDB-ID: #VU90762

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48675

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the mmput_async() function in kernel/fork.c, within the mutex_unlock() function in drivers/infiniband/core/umem_odp.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Integer underflow

EUVDB-ID: #VU94466

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48828

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer underflow within the nfsd_setattr() function in fs/nfsd/vfs.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Buffer overflow

EUVDB-ID: #VU99094

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48946

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the udf_truncate_tail_extent() function in fs/udf/truncate.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Double free

EUVDB-ID: #VU99051

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48981

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a double free error within the drm_gem_shmem_mmap() function in drivers/gpu/drm/drm_gem_shmem_helper.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use of uninitialized resource

EUVDB-ID: #VU99081

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48993

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the fbcon_prepare_logo() function in drivers/video/fbdev/core/fbcon.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Incorrect calculation

EUVDB-ID: #VU99182

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49014

CWE-ID: CWE-682 - Incorrect Calculation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to incorrect calculation within the __tun_detach() and tun_detach() functions in drivers/net/tun.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) NULL pointer dereference

EUVDB-ID: #VU104619

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49046

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the i2cdev_attach_adapter() function in drivers/i2c/i2c-dev.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Memory leak

EUVDB-ID: #VU104390

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49190

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the DEFINE_RWLOCK() and __initcall() functions in kernel/resource.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Memory leak

EUVDB-ID: #VU104400

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49219

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the vfio_pci_set_power_state() function in drivers/vfio/pci/vfio_pci_core.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Improper locking

EUVDB-ID: #VU104665

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49398

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the dwc3_gadget_ep_skip_trbs(), dwc3_gadget_ep_cleanup_cancelled_requests() and dwc3_gadget_ep_cleanup_completed_requests() functions in drivers/usb/dwc3/gadget.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper locking

EUVDB-ID: #VU104657

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49443

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the include/linux/list.h. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Out-of-bounds read

EUVDB-ID: #VU104508

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49444

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the elf_validity_check() function in kernel/module.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Input validation error

EUVDB-ID: #VU104923

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49562

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the arch/x86/kvm/mmu/paging_tmpl.h. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Use-after-free

EUVDB-ID: #VU104439

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-49711

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the fsl_mc_bus_remove() function in drivers/bus/fsl-mc/fsl-mc-bus.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) NULL pointer dereference

EUVDB-ID: #VU87741

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52448

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in gfs2_rgrp_dump() function. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) NULL pointer dereference

EUVDB-ID: #VU90660

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52463

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the efivarfs_get_tree() function in fs/efivarfs/super.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Out-of-bounds write

EUVDB-ID: #VU88895

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52464

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the thunderx_ocx_com_threaded_isr() function in drivers/edac/thunderx_edac.c. A local user can trigger an out-of-bounds write and execute arbitrary code on the target system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Use of uninitialized resource

EUVDB-ID: #VU89393

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52477

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to usage of uninitialized BOS descriptors in drivers/usb/core/hub.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Improper locking

EUVDB-ID: #VU90801

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52486

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the drivers/gpu/drm/drm_plane.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Use-after-free

EUVDB-ID: #VU90234

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52503

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the destroy_session(), amdtee_open_session() and amdtee_close_session() functions in drivers/tee/amdtee/core.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Buffer overflow

EUVDB-ID: #VU93617

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52618

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the rnbd_srv_get_full_path() function in drivers/block/rnbd/rnbd-srv.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Memory leak

EUVDB-ID: #VU89943

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52702

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ovs_meter_cmd_set() function in net/openvswitch/meter.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Buffer overflow

EUVDB-ID: #VU91307

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52756

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the include/linux/pwm.h. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Reachable Assertion

EUVDB-ID: #VU90905

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52759

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the qd_check_sync() function in fs/gfs2/quota.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) NULL pointer dereference

EUVDB-ID: #VU90421

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52789

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the vcc_probe() and vcc_table_remove() functions in drivers/tty/vcc.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Improper locking

EUVDB-ID: #VU91505

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52836

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the list_for_each_entry_safe(), stress_one_work() and stress() functions in kernel/locking/test-ww_mutex.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU89899

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52880

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to missing permissions checks within the gsmld_open() function in drivers/tty/n_gsm.c. A local user with CAP_NET_ADMIN capability can create a GSM network.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) NULL pointer dereference

EUVDB-ID: #VU96346

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52898

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the xhci_free_dev() function in drivers/usb/host/xhci.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) NULL pointer dereference

EUVDB-ID: #VU98973

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52917

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ndev_init_debugfs() function in drivers/ntb/hw/intel/ntb_hw_gen1.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU88888

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26591

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the bpf_tracing_prog_attach() function in kernel/bpf/syscall.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Use-after-free

EUVDB-ID: #VU90262

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26598

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the vgic_its_check_cache() and vgic_its_inject_cached_translation() functions in virt/kvm/arm/vgic/vgic-its.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Improper locking

EUVDB-ID: #VU91536

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26629

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the check_for_locks() and nfsd4_release_lockowner() functions in fs/nfsd/nfs4state.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Access of Uninitialized Pointer

EUVDB-ID: #VU89396

Risk: Medium

CVSSv4.0: 4.6 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2024-26641

CWE-ID: CWE-824 - Access of Uninitialized Pointer

Exploit availability: No

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to access to uninitialized data within the __ip6_tnl_rcv() function in net/ipv6/ip6_tunnel.c. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Improper access control

EUVDB-ID: #VU88150

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26642

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper access restrictions within the nf_tables_newset() function in net/netfilter/nf_tables_api.c. A local user can set arbitrary timeouts, which can result in a denial of service condition.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Buffer overflow

EUVDB-ID: #VU91203

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26718

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the verity_work() and verity_end_io() functions in drivers/md/dm-verity-target.c, within the crypt_io_init(), crypt_inc_pending(), crypt_dec_pending(), kcryptd_crypt() and kcryptd_queue_crypt() functions in drivers/md/dm-crypt.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Use-after-free

EUVDB-ID: #VU90216

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26749

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cdns3_gadget_ep_disable() function in drivers/usb/cdns3/gadget.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Division by zero

EUVDB-ID: #VU91378

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26778

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a division by zero error within the savagefb_check_var() function in drivers/video/fbdev/savage/savagefb_driver.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Division by zero

EUVDB-ID: #VU68516

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-3061

CWE-ID: CWE-369 - Divide By Zero

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to missing checks of the "pixclock" value in the Linux kernel i740 driver. A local user can pass arbitrary values to the driver through ioctl() interface, trigger a divide by zero error and perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) Expired pointer dereference

EUVDB-ID: #VU93809

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26808

CWE-ID: CWE-825 - Expired pointer dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a stale reference within the nf_tables_netdev_event() function in net/netfilter/nft_chain_filter.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Improper locking

EUVDB-ID: #VU91318

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26810

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the vfio_send_intx_eventfd(), vfio_pci_intx_mask(), vfio_pci_intx_unmask_handler(), vfio_pci_set_intx_unmask() and vfio_pci_set_intx_mask() functions in drivers/vfio/pci/vfio_pci_intrs.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Improper locking

EUVDB-ID: #VU91529

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26812

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the vfio_send_intx_eventfd(), vfio_intx_handler() and vfio_pci_set_intx_trigger() functions in drivers/vfio/pci/vfio_pci_intrs.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Improper locking

EUVDB-ID: #VU90776

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26934

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to improper locking within the interface_authorized_store() function in drivers/usb/core/sysfs.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Out-of-bounds read

EUVDB-ID: #VU91398

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26970

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the F() function in drivers/clk/qcom/gcc-ipq6018.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Memory leak

EUVDB-ID: #VU91644

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26977

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the pci_iounmap() function in lib/pci_iomap.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Buffer overflow

EUVDB-ID: #VU93305

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26988

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the setup_command_line() function in init/main.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) Race condition within a thread

EUVDB-ID: #VU91432

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-27020

CWE-ID: CWE-366 - Race Condition within a Thread

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to a data race within the __nft_expr_type_get() and nft_expr_type_get() functions in net/netfilter/nf_tables_api.c. A local user can execute arbitrary code.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) Resource management error

EUVDB-ID: #VU91608

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-27389

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the pstore_put_backend_records() function in fs/pstore/inode.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Resource management error

EUVDB-ID: #VU93202

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-27437

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the vfio_intx_set_signal() function in drivers/vfio/pci/vfio_pci_intrs.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) Use-after-free

EUVDB-ID: #VU90165

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-35791

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the svm_register_enc_region() function in arch/x86/kvm/svm/sev.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) Improper error handling

EUVDB-ID: #VU93468

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-35947

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an error within the ddebug_tokenize() function in lib/dynamic_debug.c. A local user can crash the OS kernel.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

55) NULL pointer dereference

EUVDB-ID: #VU102920

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36476

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the send_io_resp_imm() function in drivers/infiniband/ulp/rtrs/rtrs-srv.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

56) NULL pointer dereference

EUVDB-ID: #VU93030

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36489

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the tls_ctx_create() function in net/tls/tls_main.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

57) Improper error handling

EUVDB-ID: #VU93450

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36953

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the kvm_register_vgic_device() function in arch/arm64/kvm/vgic/vgic-kvm-device.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

58) Out-of-bounds read

EUVDB-ID: #VU93024

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-37356

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the net/ipv4/tcp_dctcp.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

59) Buffer overflow

EUVDB-ID: #VU92378

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38577

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the kernel/rcu/tasks.h. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

60) Infinite loop

EUVDB-ID: #VU93063

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38601

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the rb_check_list() and ring_buffer_resize() functions in kernel/trace/ring_buffer.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

61) NULL pointer dereference

EUVDB-ID: #VU93048

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-38605

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the snd_card_new() function in sound/core/init.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

62) Improper locking

EUVDB-ID: #VU93335

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-39468

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the smb2_find_smb_tcon() function in fs/smb/client/smb2transport.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

63) Buffer overflow

EUVDB-ID: #VU93827

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-39480

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the kdb_printf() function in kernel/debug/kdb/kdb_io.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

64) Improper locking

EUVDB-ID: #VU94265

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41004

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the kernel/trace/Kconfig. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

65) Memory leak

EUVDB-ID: #VU94924

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41023

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the enqueue_task_dl() function in kernel/sched/deadline.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

66) Use-after-free

EUVDB-ID: #VU94948

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41045

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the bpf_timer_delete_work(), __bpf_async_init() and __bpf_spin_unlock_irqrestore() functions in kernel/bpf/helpers.c. A local user can escalate privileges on the system.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

67) Improper neutralization of directives in statically saved code (\'static code injection\')

EUVDB-ID: #VU95052

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42084

CWE-ID: CWE-96 - Improper Neutralization of Directives in Statically Saved Code (\'Static Code Injection\')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

In the Linux kernel, the following vulnerability has been resolved: ftruncate: pass a signed offset The old ftruncate() syscall, using the 32-bit off_t misses a sign extension when called in compat mode on 64-bit architectures. As a result, passing a negative length accidentally succeeds in truncating to file size between 2GiB and 4GiB. Changing the type of the compat syscall to the signed compat_off_t changes the behavior so it instead returns -EINVAL. The native entry point, the truncate() syscall and the corresponding loff_t based variants are all correct already and do not suffer from this mistake.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

68) Out-of-bounds read

EUVDB-ID: #VU94951

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42143

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the orangefs_statfs() function in fs/orangefs/super.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

69) Use of uninitialized resource

EUVDB-ID: #VU95027

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42161

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the tools/lib/bpf/bpf_core_read.h. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

70) Improper locking

EUVDB-ID: #VU95507

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42239

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the __bpf_async_init(), drop_prog_refcnt(), BPF_CALL_1() and hrtimer_cancel() functions in kernel/bpf/helpers.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

71) Infinite loop

EUVDB-ID: #VU95515

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-42246

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the xs_tcp_setup_socket() function in net/sunrpc/xprtsock.c. A local user can perform a denial of service (DoS) attack.

Install updates from vendor's repository.

Anolis OS: 8

python3-perf: before 5.10.134-19

perf: before 5.10.134-19

kernel-tools-libs-devel: before 5.10.134-19

kernel-tools-libs: before 5.10.134-19

kernel-tools: before 5.10.134-19

kernel-modules-internal: before 5.10.134-19

kernel-modules-extra: before 5.10.134-19

kernel-modules: before 5.10.134-19

kernel-headers: before 5.10.134-19

kernel-devel: before 5.10.134-19

kernel-debug-modules-internal: before 5.10.134-19

kernel-debug-modules-extra: before 5.10.134-19

kernel-debug-modules: before 5.10.134-19

kernel-debug-devel: before 5.10.134-19

kernel-debug-core: before 5.10.134-19

kernel-debug: before 5.10.134-19

kernel-core: before 5.10.134-19

kernel: before 5.10.134-19

bpftool: before 5.10.134-19

• cpe:2.3:o:openanolis:anolis_os:8:*:*:*:*:*:*:*
• cpe:2.3:a:openanolis:python3-perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:perf:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools-libs:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-tools:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-headers:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-internal:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules-extra:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-modules:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-devel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-debug:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel-core:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:kernel:*:*:*:*:*:anolis_os:*:*
• cpe:2.3:a:openanolis:bpftool:*:*:*:*:*:anolis_os:*:*

https://anas.openanolis.cn/errata/detail/ANSA-2025:0276