Security Bulletin
This security bulletin contains information about 19 vulnerabilities.
EUVDB-ID: #VU89246
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-47037
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources in sound/soc/qcom/qdsp6/q6afe-clocks.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89245
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52443
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the unpack_profile() function in security/apparmor/policy_unpack.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89244
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52454
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the nvmet_tcp_build_pdu_iovec() function in drivers/nvme/target/tcp.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89243
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52456
CWE-ID:
CWE-667 - Improper Locking
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service attack (DoS) on the target system.
The vulnerability exists due to double-locking error within the imx_uart_stop_tx() function in drivers/tty/serial/imx.c. A local user can crash the OS kernel.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89242
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52457
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a use-after-free error within the omap8250_remove() function in drivers/tty/serial/8250/8250_omap.c. A local user can perform a denial of service (DoS) attack.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89237
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52462
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to crash the kernel.
The vulnerability exists due to a boundary error within the check_stack_write_fixed_off() function in kernel/bpf/verifier.c. A local user can trigger memory corruption and crash the kernel.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89236
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52467
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error within the of_syscon_register() function in drivers/mfd/syscon.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89235
Risk: Low
CVSSv3.1: 7.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52469
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the kv_parse_power_table() function in drivers/gpu/drm/amd/amdgpu/kv_dpm.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU88821
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52476
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition within the branch_type() and get_branch_type() functions in arch/x86/events/utils.c. A local user can trigger an out-of-bounds read error and crash the kernel.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU88818
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52479
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the smb20_oplock_break_ack() function in fs/ksmbd/smb2pdu.c and fs/smb/server/smb2pdu.c. A local user can trigger a use-after-free error and escalate privileges on the system.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89252
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52484
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the arm_smmu_free_shared_cd() function in drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU88103
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-52601
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error in fs/jfs/jfs_dmap.c. A local user can trigger memory corruption and perform a denial of service (DoS) attack.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89251
Risk: Medium
CVSSv3.1: 5.2 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26585
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a race condition within the tls_encrypt_done() function in net/tls/tls_sw.c. A remote attacker user can send specially crafted requests to the system and perform a denial of service (DoS) attack.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU88886
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26589
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary error within the adjust_ptr_min_max_vals() function in kernel/bpf/verifier.c. A local user can crash the OS kernel.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89250
Risk: Low
CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26593
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to a boundary condition within the i801_block_transaction_by_block() function in drivers/i2c/busses/i2c-i801.c. A local user can trigger an out-of-bounds read error and read contents of memory on the system.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU87682
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26597
CWE-ID:
CWE-125 - Out-of-bounds read
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a boundary condition in drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c when parsing the netlink attributes. A local user can trigger an out-of-bounds read error and perform a denial of service (DoS) attack.
Install updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89249
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26600
CWE-ID:
CWE-476 - NULL Pointer Dereference
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to a NULL pointer dereference error in drivers/phy/ti/phy-omap-usb2.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89248
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26603
CWE-ID:
CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to infinite loop in arch/x86/kernel/fpu/signal.c. A local user can consume all available system resources and cause denial of service conditions.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU89247
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2024-26606
CWE-ID:
CWE-399 - Resource Management Errors
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the binder_enqueue_thread_work_ilocked() function in drivers/android/binder.c. A local user can perform a denial of service (DoS) attack.
MitigationInstall updates from vendor's repository.
Vulnerable software versionsopenEuler: 22.03 LTS SP3
kernel-headers: before 5.10.0-195.0.0.108
kernel-debuginfo: before 5.10.0-195.0.0.108
kernel-tools-debuginfo: before 5.10.0-195.0.0.108
perf: before 5.10.0-195.0.0.108
kernel-devel: before 5.10.0-195.0.0.108
kernel-tools-devel: before 5.10.0-195.0.0.108
perf-debuginfo: before 5.10.0-195.0.0.108
kernel-source: before 5.10.0-195.0.0.108
kernel-debugsource: before 5.10.0-195.0.0.108
kernel-tools: before 5.10.0-195.0.0.108
python3-perf-debuginfo: before 5.10.0-195.0.0.108
python3-perf: before 5.10.0-195.0.0.108
kernel: before 5.10.0-195.0.0.108
CPE2.3 External linkshttp://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2024-1397
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.