{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"Critical" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"kernel security update", "category":"general", "title":"Synopsis" }, { "text":"An update for kernel is now available for openEuler-22.03-LTS-SP4", "category":"general", "title":"Summary" }, { "text":"The Linux Kernel, the operating system core itself.\n\nSecurity Fix(es):\n\nArm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.(CVE-2025-10263)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ninet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP\n\nYizhou Zhao reported that simply having one RAW socket on protocol\nIPPROTO_RAW (255) was dangerous.\n\n socket(AF_INET, SOCK_RAW, 255);\n\nA malicious incoming ICMP packet can set the protocol field to 255\nand match this socket, leading to FNHE cache changes.\n\ninner = IP(src=\"192.168.2.1\", dst=\"8.8.8.8\", proto=255)/Raw(\"TEST\")\npkt = IP(src=\"192.168.1.1\", dst=\"192.168.2.1\")/ICMP(type=3, code=4, nexthopmtu=576)/inner\n\n\"man 7 raw\" states:\n\n A protocol of IPPROTO_RAW implies enabled IP_HDRINCL and is able\n to send any IP protocol that is specified in the passed header.\n Receiving of all IP protocols via IPPROTO_RAW is not possible\n using raw sockets.\n\nMake sure we drop these malicious packets.(CVE-2026-46266)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.(CVE-2026-46322)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nip6_vti: set netns_immutable on the fallback device.\n\njohn1988 and Noam Rathaus reported that vti6_init_net() does not set the\nnetns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).\n\nOther similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel)\ncorrectly set this flag during their fallback device initialization to\nprevent them from being moved to another network namespace.(CVE-2026-52909)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_queue: hold bridge skb->dev while queued\n\nbr_pass_frame_up() rewrites skb->dev from the ingress port to the bridge\nmaster before queueing bridge LOCAL_IN packets. NFQUEUE only holds\nreferences on state.in/out and bridge physdevs, so a queued bridge\npacket can retain a freed bridge master in skb->dev until reinjection.\n\nWhen the verdict is reinjected later, br_netif_receive_skb() re-enters\nthe receive path with skb->dev still pointing at the freed bridge master,\ntriggering a use-after-free.\n\nStore skb->dev in the queue entry, hold a reference on it for the queue\nlifetime, and use the saved device when dropping queued packets during\nNETDEV_DOWN handling.(CVE-2026-52912)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_hbh: reject oversized option lists\n\nstruct ip6t_opts stores at most IP6T_OPTS_OPTSNR option descriptors,\nbut hbh_mt6_check() does not reject larger optsnr values supplied from\nuserspace.\n\nValidate optsnr in the rule setup path so only match data that fits the\nfixed-size opts array can be installed. This follows the existing xtables\npattern of rejecting invalid user-provided counts in checkentry() and\nkeeps the packet matching path unchanged.\n\n`struct ip6t_opts` has a fixed `opts[IP6T_OPTS_OPTSNR]` array,\nwhere `IP6T_OPTS_OPTSNR` is 16, then off-by-one array access is possible:\n\n[ 137.924693][ T8692] UBSAN: array-index-out-of-bounds in ../net/ipv6/netfilter/ip6t_hbh.c:110:29\n[ 137.926167][ T8692] index 16 is out of range for type '__u16 [16]'(CVE-2026-52915)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_policy: fix strict mode inbound policy matching\n\nmatch_policy_in() walks sec_path entries from the last transform to the\nfirst one, but strict policy matching needs to consume info->pol[] in\nthe same forward order as the rule layout.\n\nDerive the strict-match policy position from the number of transforms\nalready consumed so that multi-element inbound rules are matched\nconsistently.(CVE-2026-52920)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix OOB read in compat_mtw_from_user\n\nLuxiao Xu says:\n\n The function compat_mtw_from_user() converts ebtables extensions from\n 32-bit user structures to kernel native structures. However, it lacks\n proper validation of the user-supplied match_size/target_size.\n\n When certain extensions are processed, the kernel-side translation\n logic may perform memory accesses based on the extension's expected\n size. If the user provides a size smaller than what the extension\n requires, it results in an out-of-bounds read as reported by KASAN.\n\n This fix introduces a check to ensure match_size is at least as large\n as the extension's required compatsize. This covers matches, watchers,\n and targets, while maintaining compatibility with standard targets.\n\nAFAIU this is relevant for matches that need to go though\nmatch->compat_from_user() call. Those that use plain memcpy with the\nuser-provided size are ok because the caller checks that size vs the\nstart of the next rule entry offset (which itself is checked vs. total\nsize copied from userspace).\n\nThe ->compat_from_user() callbacks assume they can read compatsize bytes,\nso they need this extra check.\n\nBased on an earlier patch from Luxiao Xu.(CVE-2026-52927)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: validate MAC header was set before dumping it\n\nThe fallback path of dump_mac_header() guards the MAC header access\nonly with \"skb->mac_header != skb->network_header\", without checking\nskb_mac_header_was_set(). When the MAC header is unset, mac_header is\n0xffff, so the test passes and skb_mac_header(skb) returns\nskb->head + 0xffff, ~64 KiB past the buffer; the loop then reads\ndev->hard_header_len bytes out of bounds into the kernel log.\n\nThis is reachable via the netdev logger: nf_log_unknown_packet() calls\ndump_mac_header() unconditionally, and an skb sent through AF_PACKET\nwith PACKET_QDISC_BYPASS reaches the egress hook with mac_header still\nunset (__dev_queue_xmit(), which would reset it, is bypassed).\n\nAdd the skb_mac_header_was_set() check the ARPHRD_ETHER path already\nuses, and replace the open-coded MAC header length test with\nskb_mac_header_len(). Only skbs with an unset MAC header are affected;\nvalid ones are dumped as before.\n\n BUG: KASAN: slab-out-of-bounds in dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n Read of size 1 at addr ffff88800ea49d3f by task exploit/148\n Call Trace:\n kasan_report (mm/kasan/report.c:595)\n dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n nf_log_netdev_packet (net/netfilter/nf_log_syslog.c:938 net/netfilter/nf_log_syslog.c:963)\n nf_log_packet (net/netfilter/nf_log.c:260)\n nft_log_eval (net/netfilter/nft_log.c:60)\n nft_do_chain (net/netfilter/nf_tables_core.c:285)\n nft_do_chain_netdev (net/netfilter/nft_chain_filter.c:307)\n nf_hook_slow (net/netfilter/core.c:619)\n nf_hook_direct_egress (net/packet/af_packet.c:257)\n packet_xmit (net/packet/af_packet.c:280)\n packet_sendmsg (net/packet/af_packet.c:3114)\n __sys_sendto (net/socket.c:2265)(CVE-2026-52942)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix a buffer leak in __ceph_setxattr()\n\nThe old_blob in __ceph_setxattr() can store\nci->i_xattrs.prealloc_blob value during the retry.\nHowever, it is never called the ceph_buffer_put()\nfor the old_blob object. This patch fixes the issue of\nthe buffer leak.(CVE-2026-52962)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix out-of-bounds read on option matching\n\nIn nf_osf_match(), the nf_osf_hdr_ctx structure is initialized once\nand passed by reference to nf_osf_match_one() for each fingerprint\nchecked. During TCP option parsing, nf_osf_match_one() advances the\nshared ctx->optp pointer.\n\nIf a fingerprint perfectly matches, the function returns early without\nrestoring ctx->optp to its initial state. If the user has configured\nNF_OSF_LOGLEVEL_ALL, the loop continues to the next fingerprint.\nHowever, because ctx->optp was not restored, the next call to\nnf_osf_match_one() starts parsing from the end of the options buffer.\nThis causes subsequent matches to read garbage data and fail\nimmediately, making it impossible to log more than one match or logging\nincorrect matches.\n\nInstead of using a shared ctx->optp pointer, pass the context as a\nconstant pointer and use a local pointer (optp) for TCP option\ntraversal. This makes nf_osf_match_one() strictly stateless from the\ncaller's perspective, ensuring every fingerprint check starts at the\ncorrect option offset.(CVE-2026-52999)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix same-register dst/src OOB read and pointer leak in sock_ops\n\nWhen a BPF sock_ops program accesses ctx fields with dst_reg == src_reg,\nthe SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() macros fail to zero the\ndestination register in the !fullsock / !locked_tcp_sock path.\n\nBoth macros borrow a temporary register to check is_fullsock /\nis_locked_tcp_sock when dst_reg == src_reg, because dst_reg holds the\nctx pointer. When the check is false (e.g., TCP_NEW_SYN_RECV state with\na request_sock), dst_reg should be zeroed but is not, leaving the stale\nctx pointer:\n\n - SOCK_OPS_GET_SK: dst_reg retains the ctx pointer, passes NULL checks\n as PTR_TO_SOCKET_OR_NULL, and can be used as a bogus socket pointer,\n leading to stack-out-of-bounds access in helpers like\n bpf_skc_to_tcp6_sock().\n\n - SOCK_OPS_GET_FIELD: dst_reg retains the ctx pointer which the\n verifier believes is a SCALAR_VALUE, leaking a kernel pointer.\n\nFix both macros by:\n - Changing JMP_A(1) to JMP_A(2) in the fullsock path to skip the\n added instruction.\n - Adding BPF_MOV64_IMM(si->dst_reg, 0) after the temp register\n restore in the !fullsock path, placed after the restore because\n dst_reg == src_reg means we need src_reg intact to read ctx->temp.(CVE-2026-53078)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: clean the sfp upstream if phy probing fails\n\nSashiko reported that we don't call sfp_bus_del_upstream() in the probe\nfailure path, so let's add it, otherwise the sfp-bus is left with a\ndangling 'upstream' field, that may be used later on during SFP events.\n\nThis issue existed before the generic phylib sfp support, back when\ndrivers were calling phy_sfp_probe themselves.(CVE-2026-53232)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate advertising TLV before type checks\n\ntlv_data_is_valid() reads each advertising data field length from\ndata[i], then inspects data[i + 1] for managed EIR types before\nchecking that the current field still fits inside the supplied buffer.\n\nA malformed field whose length byte is the last byte of the buffer can\ntherefore make the parser read one byte past the advertising data.\n\nKASAN reported the following when a malformed MGMT_OP_ADD_ADVERTISING\nrequest reached that path:\n\n BUG: KASAN: vmalloc-out-of-bounds in tlv_data_is_valid()\n Read of size 1\n Call trace:\n tlv_data_is_valid()\n add_advertising()\n hci_mgmt_cmd()\n hci_sock_sendmsg()\n\nMove the existing element-length check before any type-octet inspection\nso each non-empty element is proven to contain its type byte before the\nparser looks at data[i + 1].(CVE-2026-53255)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: bail out on template ct in get eval\n\nI noticed this issue while looking at a historic syzbot report [1].\n\nA rule like the one below is enough to trigger the bug:\n\n table ip t {\n chain pre {\n type filter hook prerouting priority raw;\n ct zone set 1\n ct original saddr 1.2.3.4 accept\n }\n }\n\nThe first expression attaches a per-cpu template ct via\nnft_ct_set_zone_eval() (nf_ct_tmpl_alloc -> kzalloc, tuple is all\nzero, nf_ct_l3num(ct) == 0). The next expression then calls\nnft_ct_get_eval() on the same skb, treats the template as a real ct\nand hits the 16-byte memcpy path. With dreg at NFT_REG32_15 this\noverflows past struct nft_regs on the kernel stack; with smaller\ndreg values it silently clobbers adjacent registers.\n\nReject template ct at the eval entry and in nft_ct_get_fast_eval(),\nmirroring the check nft_ct_set_eval() already has. Additionally,\nbound the address copy in NFT_CT_SRC / NFT_CT_DST by priv->len\ninstead of by nf_ct_l3num(ct): nf_ct_get_tuple() zeroes the tuple\nbefore pkt_to_tuple() fills in only the protocol-relevant leading\nbytes, so the trailing bytes of tuple->{src,dst}.u3.all are\nwell-defined zero. priv->len is validated at rule load, so the\ncopy size is now bounded by the destination register rather than\nby an untrusted field on the conntrack.\n\n[1]: https://syzkaller.appspot.com/bug?id=389cf09cb72926114fce90dc85a2c3231dcb647c(CVE-2026-53267)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix posix_acl leak on SETACL decode failure\n\nnfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each\ncall nfs_stream_decode_acl() twice, first for NFS_ACL and then for\nNFS_DFACL. Each successful call transfers ownership of a freshly\nallocated posix_acl into argp->acl_access or argp->acl_default. If\nthe first call succeeds but the second fails, the decoder returns\nfalse and argp->acl_access is left dangling.\n\nACLPROC2_SETACL.pc_release was wired to nfssvc_release_attrstat and\nACLPROC3_SETACL.pc_release was wired to nfs3svc_release_fhandle.\nBoth only call fh_put() and have no knowledge of the ACL fields on\nargp. The posix_acl_release() pairs sat at the out: labels inside\nnfsacld_proc_setacl() and nfsd3_proc_setacl(), but svc_process()\nskips pc_func when pc_decode returns false, so that cleanup is\nunreachable on decode failure:\n\n svc_process_common()\n pc_decode() /* decode_setaclargs: false */\n /* pc_func skipped */\n pc_release() /* fh_put only -- ACLs leaked */\n\nThe orphaned posix_acl is leaked for the lifetime of the server.\n\nFix by adding nfsaclsvc_release_setacl() and nfs3svc_release_setacl(),\nwhich release both argp->acl_access and argp->acl_default in addition\nto fh_put(), and wiring them as pc_release for their respective SETACL\nprocedures. pc_release runs on every path svc_process() takes after\ndecode, including decode failure, so the posix_acl_release() pairs are\nremoved from the proc functions' out: labels to keep ownership in one\nplace. This matches the existing release_getacl() pattern used by\nthe sibling GETACL procedures.(CVE-2026-53397)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check\n\nAdd the missing sanity check on the size of interrupt-in transfers to\navoid parsing stale or uninitialised slab data (and leaking it to user\nspace).(CVE-2026-63897)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: cypress_m8: validate interrupt packet headers\n\ncypress_read_int_callback() parses the interrupt-in buffer according to\nthe selected Cypress packet format. Format 1 has a two-byte status/count\nheader and format 2 has a one-byte combined status/count header. The\nusb-serial core sizes the interrupt-in buffer from the endpoint\ndescriptor's wMaxPacketSize, and successful interrupt transfers can\ncomplete short when URB_SHORT_NOT_OK is not set.\n\nCheck that the completed packet contains the selected header before\nreading it. Malformed short reports are ignored and the interrupt URB is\nresubmitted through the existing retry path, preventing out-of-bounds\nheader-byte reads.\n\nKASAN report as below:\nKASAN slab-out-of-bounds in cypress_read_int_callback+0x240/0x7f0\nRead of size 1\nCall trace:\n cypress_read_int_callback() (drivers/usb/serial/cypress_m8.c:1009)\n __usb_hcd_giveback_urb()\n dummy_timer()\n\n[ johan: use constants in header length sanity checks ](CVE-2026-63902)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: omninet: fix memory corruption with small endpoint\n\nMake sure that the bulk-out buffers are at least as large as the\nhardcoded transfer size to avoid user-controlled slab corruption should\na malicious device report a smaller endpoint max packet size than\nexpected.(CVE-2026-63928)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT\n\nA broken/malicious port can transmit a CRC-valid frame whose header\nadvertises up to seven data objects but whose body carries fewer than\nthat. Check for this, and rightfully reject the message, instead of\nreading from uninitialized stack memory.(CVE-2026-63959)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: clear chan->ident on ECRED reconfiguration success\n\nl2cap_ecred_reconf_rsp() returns early on success without clearing\nchan->ident. Every other L2CAP response handler (l2cap_ecred_conn_rsp,\nl2cap_le_connect_rsp, l2cap_config_rsp) clears chan->ident after a\nsuccessful transaction to prevent the channel from matching subsequent\nresponses with the recycled ident value.\n\nA remote attacker that completed a reconfiguration as the peer can\nreplay a failure response with the stale ident, causing the kernel to\nmatch and destroy the already-established channel via\nl2cap_chan_del(chan, ECONNRESET).\n\nClear chan->ident for all matching channels on success, and harden the\nfailure path by using l2cap_chan_hold_unless_zero() consistent with\nother L2CAP handlers (l2cap_le_command_rej, __l2cap_get_chan_by_ident).(CVE-2026-63976)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsecurity/keys: fix missed RCU read section on lookup\n\nNicholas Carlini reports that the keyring code calls assoc_array_find()\nin find_key_to_update() without holding the RCU read lock, while the\nassoc_array_gc() code really is designed around removing the node from\nthe tree and then freeing it after an RCU grace-period.\n\nThe regular key handling doesn't see this because holding the keyring\nsemaphore hides any lifetime issues, but the persistent key handling\nuses a different model.\n\nInstead of extending the keyring locking, just do the simple RCU locking\nthat the assoc_array was designed for.(CVE-2026-64015)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits\n\nUserspace can restore an ITS Device Table Entry whose Size field encodes\nmore EventID bits than the virtual ITS supports. The live MAPD path\nrejects that state, but vgic_its_restore_dte() accepts it and stores the\nout-of-range value in dev->num_eventid_bits.\n\nReject restored DTEs with num_eventid_bits > VITS_TYPER_IDBITS before\nallocating the device. This mirrors the MAPD check and prevents the\nrestored state from reaching vgic_its_restore_itt(), where the unchecked\nvalue can be converted into an oversized scan_its_table() range.(CVE-2026-64106)\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nxfs: resample the data fork mapping after cycling ILOCK\n\nxfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,\na data fork mapping, and a cow fork mapping. Unfortunately, these two\nhelpers cycle the ILOCK to grab a transaction, which means that the\nmappings are stale as soon as we reacquire the ILOCK. Currently we\nrefresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but\nwe don't refresh the data fork mapping beforehand, which means that the\nxfs_bmap_trim_cow in that function queries the refcount btree about the\nwrong physical blocks and returns an inaccurate value in *shared.\n\nIf *shared is now false, the directio write proceeds with a stale data\nfork mapping. Fix this by querying the data fork mapping if the\nsequence counter changes across the ILOCK cycle.(CVE-2026-64600)", "category":"general", "title":"Description" }, { "text":"An update for kernel is now available for openEuler-20.03-LTS-SP4/openEuler-22.03-LTS-SP4/openEuler-22.03-LTS-SP3/openEuler-24.03-LTS/openEuler-24.03-LTS-SP2.\n\nopenEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section.", "category":"general", "title":"Topic" }, { "text":"Critical", "category":"general", "title":"Severity" }, { "text":"kernel", "category":"general", "title":"Affected Component" } ], "publisher":{ "issuing_authority":"openEuler security committee", "name":"openEuler", "namespace":"https://www.openeuler.org", "contact_details":"openeuler-security@openeuler.org", "category":"vendor" }, "references":[ { "summary":"openEuler-SA-2026-3206", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" }, { "summary":"CVE-2025-10263", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-10263&packageName=kernel" }, { "summary":"CVE-2026-46266", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-46266&packageName=kernel" }, { "summary":"CVE-2026-46322", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-46322&packageName=kernel" }, { "summary":"CVE-2026-52909", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52909&packageName=kernel" }, { "summary":"CVE-2026-52912", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52912&packageName=kernel" }, { "summary":"CVE-2026-52915", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52915&packageName=kernel" }, { "summary":"CVE-2026-52920", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52920&packageName=kernel" }, { "summary":"CVE-2026-52927", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52927&packageName=kernel" }, { "summary":"CVE-2026-52942", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52942&packageName=kernel" }, { "summary":"CVE-2026-52962", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52962&packageName=kernel" }, { "summary":"CVE-2026-52999", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-52999&packageName=kernel" }, { "summary":"CVE-2026-53078", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53078&packageName=kernel" }, { "summary":"CVE-2026-53232", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53232&packageName=kernel" }, { "summary":"CVE-2026-53255", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53255&packageName=kernel" }, { "summary":"CVE-2026-53267", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53267&packageName=kernel" }, { "summary":"CVE-2026-53397", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-53397&packageName=kernel" }, { "summary":"CVE-2026-63897", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63897&packageName=kernel" }, { "summary":"CVE-2026-63902", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63902&packageName=kernel" }, { "summary":"CVE-2026-63928", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63928&packageName=kernel" }, { "summary":"CVE-2026-63959", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63959&packageName=kernel" }, { "summary":"CVE-2026-63976", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-63976&packageName=kernel" }, { "summary":"CVE-2026-64015", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-64015&packageName=kernel" }, { "summary":"CVE-2026-64106", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-64106&packageName=kernel" }, { "summary":"CVE-2026-64600", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-64600&packageName=kernel" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-10263" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46266" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-46322" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52909" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52912" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52915" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52920" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52927" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52942" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52962" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-52999" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53078" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53232" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53255" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53267" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-53397" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63897" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63902" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63928" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63959" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-63976" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64015" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64106" }, { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64600" }, { "summary":"openEuler-SA-2026-3206 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/advisories/2026/csaf-openeuler-sa-2026-3206.json" } ], "title":"An update for kernel is now available for openEuler-22.03-LTS-SP4", "tracking":{ "initial_release_date":"2026-08-03T16:46:37+08:00", "revision_history":[ { "date":"2026-08-03T16:46:37+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-08-03T16:46:37+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-08-03T16:46:37+08:00", "id":"openEuler-SA-2026-3206", "version":"1.0.0", "status":"final" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"openEuler-22.03-LTS-SP4", "name":"openEuler-22.03-LTS-SP4" }, "name":"openEuler-22.03-LTS-SP4", "category":"product_version" } ], "category":"product_name" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm" }, "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-326.0.0.227.oe2203sp4.src.rpm", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.src.rpm" }, "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:22.03-LTS-SP4" }, "product_id":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm" }, "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"perf-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-326.0.0.227.oe2203sp4.src.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.src as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"perf-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-22.03-LTS-SP4", "product_reference":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "name":"python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64 as a component of openEuler-22.03-LTS-SP4" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-10263", "notes":[ { "text":"Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned by a higher exception level.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2025-10263" }, { "cve":"CVE-2026-46266", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ninet: RAW sockets using IPPROTO_RAW MUST drop incoming ICMP\n\nYizhou Zhao reported that simply having one RAW socket on protocol\nIPPROTO_RAW (255) was dangerous.\n\n socket(AF_INET, SOCK_RAW, 255);\n\nA malicious incoming ICMP packet can set the protocol field to 255\nand match this socket, leading to FNHE cache changes.\n\ninner = IP(src=\"192.168.2.1\", dst=\"8.8.8.8\", proto=255)/Raw(\"TEST\")\npkt = IP(src=\"192.168.1.1\", dst=\"192.168.2.1\")/ICMP(type=3, code=4, nexthopmtu=576)/inner\n\n\"man 7 raw\" states:\n\n A protocol of IPPROTO_RAW implies enabled IP_HDRINCL and is able\n to send any IP protocol that is specified in the passed header.\n Receiving of all IP protocols via IPPROTO_RAW is not possible\n using raw sockets.\n\nMake sure we drop these malicious packets.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-46266" }, { "cve":"CVE-2026-46322", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntun: free page on build_skb failure in tun_xdp_one()\n\nWhen build_skb() fails in tun_xdp_one(), the function sets ret to\n-ENOMEM and jumps to the out label, which returns without freeing the\npage that vhost_net_build_xdp() allocated for the frame. As with the\nshort-frame rejection path, tun_sendmsg() discards the per-buffer error\nand still returns total_len, so vhost_tx_batch() takes the success path\nand never frees the page. Each build_skb() failure in a batch leaks one\npage-frag chunk.\n\nFree the page before taking the error path, matching the put_page() the\nother error exits of tun_xdp_one() already perform.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.1, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-46322" }, { "cve":"CVE-2026-52909", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nip6_vti: set netns_immutable on the fallback device.\n\njohn1988 and Noam Rathaus reported that vti6_init_net() does not set the\nnetns_immutable flag on the per-netns fallback tunnel device (ip6_vti0).\n\nOther similar tunnel drivers (like ip6_tunnel, sit, ip6_gre, and ip_tunnel)\ncorrectly set this flag during their fallback device initialization to\nprevent them from being moved to another network namespace.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52909" }, { "cve":"CVE-2026-52912", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_queue: hold bridge skb->dev while queued\n\nbr_pass_frame_up() rewrites skb->dev from the ingress port to the bridge\nmaster before queueing bridge LOCAL_IN packets. NFQUEUE only holds\nreferences on state.in/out and bridge physdevs, so a queued bridge\npacket can retain a freed bridge master in skb->dev until reinjection.\n\nWhen the verdict is reinjected later, br_netif_receive_skb() re-enters\nthe receive path with skb->dev still pointing at the freed bridge master,\ntriggering a use-after-free.\n\nStore skb->dev in the queue entry, hold a reference on it for the queue\nlifetime, and use the saved device when dropping queued packets during\nNETDEV_DOWN handling.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52912" }, { "cve":"CVE-2026-52915", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ip6t_hbh: reject oversized option lists\n\nstruct ip6t_opts stores at most IP6T_OPTS_OPTSNR option descriptors,\nbut hbh_mt6_check() does not reject larger optsnr values supplied from\nuserspace.\n\nValidate optsnr in the rule setup path so only match data that fits the\nfixed-size opts array can be installed. This follows the existing xtables\npattern of rejecting invalid user-provided counts in checkentry() and\nkeeps the packet matching path unchanged.\n\n`struct ip6t_opts` has a fixed `opts[IP6T_OPTS_OPTSNR]` array,\nwhere `IP6T_OPTS_OPTSNR` is 16, then off-by-one array access is possible:\n\n[ 137.924693][ T8692] UBSAN: array-index-out-of-bounds in ../net/ipv6/netfilter/ip6t_hbh.c:110:29\n[ 137.926167][ T8692] index 16 is out of range for type '__u16 [16]'", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.1, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52915" }, { "cve":"CVE-2026-52920", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: xt_policy: fix strict mode inbound policy matching\n\nmatch_policy_in() walks sec_path entries from the last transform to the\nfirst one, but strict policy matching needs to consume info->pol[] in\nthe same forward order as the rule layout.\n\nDerive the strict-match policy position from the number of transforms\nalready consumed so that multi-element inbound rules are matched\nconsistently.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.3, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52920" }, { "cve":"CVE-2026-52927", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: ebtables: fix OOB read in compat_mtw_from_user\n\nLuxiao Xu says:\n\n The function compat_mtw_from_user() converts ebtables extensions from\n 32-bit user structures to kernel native structures. However, it lacks\n proper validation of the user-supplied match_size/target_size.\n\n When certain extensions are processed, the kernel-side translation\n logic may perform memory accesses based on the extension's expected\n size. If the user provides a size smaller than what the extension\n requires, it results in an out-of-bounds read as reported by KASAN.\n\n This fix introduces a check to ensure match_size is at least as large\n as the extension's required compatsize. This covers matches, watchers,\n and targets, while maintaining compatibility with standard targets.\n\nAFAIU this is relevant for matches that need to go though\nmatch->compat_from_user() call. Those that use plain memcpy with the\nuser-provided size are ok because the caller checks that size vs the\nstart of the next rule entry offset (which itself is checked vs. total\nsize copied from userspace).\n\nThe ->compat_from_user() callbacks assume they can read compatsize bytes,\nso they need this extra check.\n\nBased on an earlier patch from Luxiao Xu.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52927" }, { "cve":"CVE-2026-52942", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_log: validate MAC header was set before dumping it\n\nThe fallback path of dump_mac_header() guards the MAC header access\nonly with \"skb->mac_header != skb->network_header\", without checking\nskb_mac_header_was_set(). When the MAC header is unset, mac_header is\n0xffff, so the test passes and skb_mac_header(skb) returns\nskb->head + 0xffff, ~64 KiB past the buffer; the loop then reads\ndev->hard_header_len bytes out of bounds into the kernel log.\n\nThis is reachable via the netdev logger: nf_log_unknown_packet() calls\ndump_mac_header() unconditionally, and an skb sent through AF_PACKET\nwith PACKET_QDISC_BYPASS reaches the egress hook with mac_header still\nunset (__dev_queue_xmit(), which would reset it, is bypassed).\n\nAdd the skb_mac_header_was_set() check the ARPHRD_ETHER path already\nuses, and replace the open-coded MAC header length test with\nskb_mac_header_len(). Only skbs with an unset MAC header are affected;\nvalid ones are dumped as before.\n\n BUG: KASAN: slab-out-of-bounds in dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n Read of size 1 at addr ffff88800ea49d3f by task exploit/148\n Call Trace:\n kasan_report (mm/kasan/report.c:595)\n dump_mac_header (net/netfilter/nf_log_syslog.c:831)\n nf_log_netdev_packet (net/netfilter/nf_log_syslog.c:938 net/netfilter/nf_log_syslog.c:963)\n nf_log_packet (net/netfilter/nf_log.c:260)\n nft_log_eval (net/netfilter/nft_log.c:60)\n nft_do_chain (net/netfilter/nf_tables_core.c:285)\n nft_do_chain_netdev (net/netfilter/nft_chain_filter.c:307)\n nf_hook_slow (net/netfilter/core.c:619)\n nf_hook_direct_egress (net/packet/af_packet.c:257)\n packet_xmit (net/packet/af_packet.c:280)\n packet_sendmsg (net/packet/af_packet.c:3114)\n __sys_sendto (net/socket.c:2265)", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.1, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52942" }, { "cve":"CVE-2026-52962", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nceph: fix a buffer leak in __ceph_setxattr()\n\nThe old_blob in __ceph_setxattr() can store\nci->i_xattrs.prealloc_blob value during the retry.\nHowever, it is never called the ceph_buffer_put()\nfor the old_blob object. This patch fixes the issue of\nthe buffer leak.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-52962" }, { "cve":"CVE-2026-52999", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nfnetlink_osf: fix out-of-bounds read on option matching\n\nIn nf_osf_match(), the nf_osf_hdr_ctx structure is initialized once\nand passed by reference to nf_osf_match_one() for each fingerprint\nchecked. During TCP option parsing, nf_osf_match_one() advances the\nshared ctx->optp pointer.\n\nIf a fingerprint perfectly matches, the function returns early without\nrestoring ctx->optp to its initial state. If the user has configured\nNF_OSF_LOGLEVEL_ALL, the loop continues to the next fingerprint.\nHowever, because ctx->optp was not restored, the next call to\nnf_osf_match_one() starts parsing from the end of the options buffer.\nThis causes subsequent matches to read garbage data and fail\nimmediately, making it impossible to log more than one match or logging\nincorrect matches.\n\nInstead of using a shared ctx->optp pointer, pass the context as a\nconstant pointer and use a local pointer (optp) for TCP option\ntraversal. This makes nf_osf_match_one() strictly stateless from the\ncaller's perspective, ensuring every fingerprint check starts at the\ncorrect option offset.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.1, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-52999" }, { "cve":"CVE-2026-53078", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix same-register dst/src OOB read and pointer leak in sock_ops\n\nWhen a BPF sock_ops program accesses ctx fields with dst_reg == src_reg,\nthe SOCK_OPS_GET_SK() and SOCK_OPS_GET_FIELD() macros fail to zero the\ndestination register in the !fullsock / !locked_tcp_sock path.\n\nBoth macros borrow a temporary register to check is_fullsock /\nis_locked_tcp_sock when dst_reg == src_reg, because dst_reg holds the\nctx pointer. When the check is false (e.g., TCP_NEW_SYN_RECV state with\na request_sock), dst_reg should be zeroed but is not, leaving the stale\nctx pointer:\n\n - SOCK_OPS_GET_SK: dst_reg retains the ctx pointer, passes NULL checks\n as PTR_TO_SOCKET_OR_NULL, and can be used as a bogus socket pointer,\n leading to stack-out-of-bounds access in helpers like\n bpf_skc_to_tcp6_sock().\n\n - SOCK_OPS_GET_FIELD: dst_reg retains the ctx pointer which the\n verifier believes is a SCALAR_VALUE, leaking a kernel pointer.\n\nFix both macros by:\n - Changing JMP_A(1) to JMP_A(2) in the fullsock path to skip the\n added instruction.\n - Adding BPF_MOV64_IMM(si->dst_reg, 0) after the temp register\n restore in the !fullsock path, placed after the restore because\n dst_reg == src_reg means we need src_reg intact to read ctx->temp.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-53078" }, { "cve":"CVE-2026-53232", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: clean the sfp upstream if phy probing fails\n\nSashiko reported that we don't call sfp_bus_del_upstream() in the probe\nfailure path, so let's add it, otherwise the sfp-bus is left with a\ndangling 'upstream' field, that may be used later on during SFP events.\n\nThis issue existed before the generic phylib sfp support, back when\ndrivers were calling phy_sfp_probe themselves.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-53232" }, { "cve":"CVE-2026-53255", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: MGMT: validate advertising TLV before type checks\n\ntlv_data_is_valid() reads each advertising data field length from\ndata[i], then inspects data[i + 1] for managed EIR types before\nchecking that the current field still fits inside the supplied buffer.\n\nA malformed field whose length byte is the last byte of the buffer can\ntherefore make the parser read one byte past the advertising data.\n\nKASAN reported the following when a malformed MGMT_OP_ADD_ADVERTISING\nrequest reached that path:\n\n BUG: KASAN: vmalloc-out-of-bounds in tlv_data_is_valid()\n Read of size 1\n Call trace:\n tlv_data_is_valid()\n add_advertising()\n hci_mgmt_cmd()\n hci_sock_sendmsg()\n\nMove the existing element-length check before any type-octet inspection\nso each non-empty element is proven to contain its type byte before the\nparser looks at data[i + 1].", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.1, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-53255" }, { "cve":"CVE-2026-53267", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nft_ct: bail out on template ct in get eval\n\nI noticed this issue while looking at a historic syzbot report [1].\n\nA rule like the one below is enough to trigger the bug:\n\n table ip t {\n chain pre {\n type filter hook prerouting priority raw;\n ct zone set 1\n ct original saddr 1.2.3.4 accept\n }\n }\n\nThe first expression attaches a per-cpu template ct via\nnft_ct_set_zone_eval() (nf_ct_tmpl_alloc -> kzalloc, tuple is all\nzero, nf_ct_l3num(ct) == 0). The next expression then calls\nnft_ct_get_eval() on the same skb, treats the template as a real ct\nand hits the 16-byte memcpy path. With dreg at NFT_REG32_15 this\noverflows past struct nft_regs on the kernel stack; with smaller\ndreg values it silently clobbers adjacent registers.\n\nReject template ct at the eval entry and in nft_ct_get_fast_eval(),\nmirroring the check nft_ct_set_eval() already has. Additionally,\nbound the address copy in NFT_CT_SRC / NFT_CT_DST by priv->len\ninstead of by nf_ct_l3num(ct): nf_ct_get_tuple() zeroes the tuple\nbefore pkt_to_tuple() fills in only the protocol-relevant leading\nbytes, so the trailing bytes of tuple->{src,dst}.u3.all are\nwell-defined zero. priv->len is validated at rule load, so the\ncopy size is now bounded by the destination register rather than\nby an untrusted field on the conntrack.\n\n[1]: https://syzkaller.appspot.com/bug?id=389cf09cb72926114fce90dc85a2c3231dcb647c", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-53267" }, { "cve":"CVE-2026-53397", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix posix_acl leak on SETACL decode failure\n\nnfsaclsvc_decode_setaclargs() and nfs3svc_decode_setaclargs() each\ncall nfs_stream_decode_acl() twice, first for NFS_ACL and then for\nNFS_DFACL. Each successful call transfers ownership of a freshly\nallocated posix_acl into argp->acl_access or argp->acl_default. If\nthe first call succeeds but the second fails, the decoder returns\nfalse and argp->acl_access is left dangling.\n\nACLPROC2_SETACL.pc_release was wired to nfssvc_release_attrstat and\nACLPROC3_SETACL.pc_release was wired to nfs3svc_release_fhandle.\nBoth only call fh_put() and have no knowledge of the ACL fields on\nargp. The posix_acl_release() pairs sat at the out: labels inside\nnfsacld_proc_setacl() and nfsd3_proc_setacl(), but svc_process()\nskips pc_func when pc_decode returns false, so that cleanup is\nunreachable on decode failure:\n\n svc_process_common()\n pc_decode() /* decode_setaclargs: false */\n /* pc_func skipped */\n pc_release() /* fh_put only -- ACLs leaked */\n\nThe orphaned posix_acl is leaked for the lifetime of the server.\n\nFix by adding nfsaclsvc_release_setacl() and nfs3svc_release_setacl(),\nwhich release both argp->acl_access and argp->acl_default in addition\nto fh_put(), and wiring them as pc_release for their respective SETACL\nprocedures. pc_release runs on every path svc_process() takes after\ndecode, including decode failure, so the posix_acl_release() pairs are\nremoved from the proc functions' out: labels to keep ownership in one\nplace. This matches the existing release_getacl() pattern used by\nthe sibling GETACL procedures.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.5, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-53397" }, { "cve":"CVE-2026-63897", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: mct_u232: fix missing interrupt-in transfer sanity check\n\nAdd the missing sanity check on the size of interrupt-in transfers to\navoid parsing stale or uninitialised slab data (and leaking it to user\nspace).", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-63897" }, { "cve":"CVE-2026-63902", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: cypress_m8: validate interrupt packet headers\n\ncypress_read_int_callback() parses the interrupt-in buffer according to\nthe selected Cypress packet format. Format 1 has a two-byte status/count\nheader and format 2 has a one-byte combined status/count header. The\nusb-serial core sizes the interrupt-in buffer from the endpoint\ndescriptor's wMaxPacketSize, and successful interrupt transfers can\ncomplete short when URB_SHORT_NOT_OK is not set.\n\nCheck that the completed packet contains the selected header before\nreading it. Malformed short reports are ignored and the interrupt URB is\nresubmitted through the existing retry path, preventing out-of-bounds\nheader-byte reads.\n\nKASAN report as below:\nKASAN slab-out-of-bounds in cypress_read_int_callback+0x240/0x7f0\nRead of size 1\nCall trace:\n cypress_read_int_callback() (drivers/usb/serial/cypress_m8.c:1009)\n __usb_hcd_giveback_urb()\n dummy_timer()\n\n[ johan: use constants in header length sanity checks ]", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"MEDIUM", "baseScore":5.5, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Medium", "category":"impact" } ], "title":"CVE-2026-63902" }, { "cve":"CVE-2026-63928", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: serial: omninet: fix memory corruption with small endpoint\n\nMake sure that the bulk-out buffers are at least as large as the\nhardcoded transfer size to avoid user-controlled slab corruption should\na malicious device report a smaller endpoint max packet size than\nexpected.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.0, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-63928" }, { "cve":"CVE-2026-63959", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT\n\nA broken/malicious port can transmit a CRC-valid frame whose header\nadvertises up to seven data objects but whose body carries fewer than\nthat. Check for this, and rightfully reject the message, instead of\nreading from uninitialized stack memory.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":3.9, "vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-63959" }, { "cve":"CVE-2026-63976", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: l2cap: clear chan->ident on ECRED reconfiguration success\n\nl2cap_ecred_reconf_rsp() returns early on success without clearing\nchan->ident. Every other L2CAP response handler (l2cap_ecred_conn_rsp,\nl2cap_le_connect_rsp, l2cap_config_rsp) clears chan->ident after a\nsuccessful transaction to prevent the channel from matching subsequent\nresponses with the recycled ident value.\n\nA remote attacker that completed a reconfiguration as the peer can\nreplay a failure response with the stale ident, causing the kernel to\nmatch and destroy the already-established channel via\nl2cap_chan_del(chan, ECONNRESET).\n\nClear chan->ident for all matching channels on success, and harden the\nfailure path by using l2cap_chan_hold_unless_zero() consistent with\nother L2CAP handlers (l2cap_le_command_rej, __l2cap_get_chan_by_ident).", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":8.8, "vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-63976" }, { "cve":"CVE-2026-64015", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nsecurity/keys: fix missed RCU read section on lookup\n\nNicholas Carlini reports that the keyring code calls assoc_array_find()\nin find_key_to_update() without holding the RCU read lock, while the\nassoc_array_gc() code really is designed around removing the node from\nthe tree and then freeing it after an RCU grace-period.\n\nThe regular key handling doesn't see this because holding the keyring\nsemaphore hides any lifetime issues, but the persistent key handling\nuses a different model.\n\nInstead of extending the keyring locking, just do the simple RCU locking\nthat the assoc_array was designed for.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-64015" }, { "cve":"CVE-2026-64106", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits\n\nUserspace can restore an ITS Device Table Entry whose Size field encodes\nmore EventID bits than the virtual ITS supports. The live MAPD path\nrejects that state, but vgic_its_restore_dte() accepts it and stores the\nout-of-range value in dev->num_eventid_bits.\n\nReject restored DTEs with num_eventid_bits > VITS_TYPER_IDBITS before\nallocating the device. This mirrors the MAPD check and prevents the\nrestored state from reaching vgic_its_restore_itt(), where the unchecked\nvalue can be converted into an oversized scan_its_table() range.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.0, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-64106" }, { "cve":"CVE-2026-64600", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nxfs: resample the data fork mapping after cycling ILOCK\n\nxfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,\na data fork mapping, and a cow fork mapping. Unfortunately, these two\nhelpers cycle the ILOCK to grab a transaction, which means that the\nmappings are stale as soon as we reacquire the ILOCK. Currently we\nrefresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but\nwe don't refresh the data fork mapping beforehand, which means that the\nxfs_bmap_trim_cow in that function queries the refcount btree about the\nwrong physical blocks and returns an inaccurate value in *shared.\n\nIf *shared is now false, the directio write proceeds with a stale data\nfork mapping. Fix this by querying the data fork mapping if the\nsequence counter changes across the ILOCK cycle.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] }, "remediations":[ { "product_ids":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3206" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.x86_64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.src", "openEuler-22.03-LTS-SP4:bpftool-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:bpftool-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-debugsource-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-headers-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-source-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:kernel-tools-devel-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-5.10.0-326.0.0.227.oe2203sp4.aarch64", "openEuler-22.03-LTS-SP4:python3-perf-debuginfo-5.10.0-326.0.0.227.oe2203sp4.aarch64" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-64600" } ] }