{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"MEDIUM" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: properly keep track of conduit reference\n\nProblem description\n-------------------\n\nDSA has a mumbo-jumbo of reference handling of the conduit net device\nand its kobject which, sadly, is just wrong and doesn't make sense.\n\nThere are two distinct problems.\n\n1. The OF path, which uses of_find_net_device_by_node(), never releases\n the elevated refcount on the conduit's kobject. Nominally, the OF and\n non-OF paths should result in objects having identical reference\n counts taken, and it is already suspicious that\n dsa_dev_to_net_device() has a put_device() call which is missing in\n dsa_port_parse_of(), but we can actually even verify that an issue\n exists. With CONFIG_DEBUG_KOBJECT_RELEASE=y, if we run this command\n \"before\" and \"after\" applying this patch:\n\n(unbind the conduit driver for net device eno2)\necho 0000:00:00.2 > /sys/bus/pci/drivers/fsl_enetc/unbind\n\nwe see these lines in the output diff which appear only with the patch\napplied:\n\nkobject: 'eno2' (ffff002009a3a6b8): kobject_release, parent 0000000000000000 (delayed 1000)\nkobject: '109' (ffff0020099d59a0): kobject_release, parent 0000000000000000 (delayed 1000)\n\n2. After we find the conduit interface one way (OF) or another (non-OF),\n it can get unregistered at any time, and DSA remains with a long-lived,\n but in this case stale, cpu_dp->conduit pointer. Holding the net\n device's underlying kobject isn't actually of much help, it just\n prevents it from being freed (but we never need that kobject\n directly). What helps us to prevent the net device from being\n unregistered is the parallel netdev reference mechanism (dev_hold()\n and dev_put()).\n\nActually we actually use that netdev tracker mechanism implicitly on\nuser ports since commit 2f1e8ea726e9 (\"net: dsa: link interfaces with\nthe DSA master to get rid of lockdep warnings\"), via netdev_upper_dev_link().\nBut time still passes at DSA switch probe time between the initial\nof_find_net_device_by_node() code and the user port creation time, time\nduring which the conduit could unregister itself and DSA wouldn't know\nabout it.\n\nSo we have to run of_find_net_device_by_node() under rtnl_lock() to\nprevent that from happening, and release the lock only with the netdev\ntracker having acquired the reference.\n\nDo we need to keep the reference until dsa_unregister_switch() /\ndsa_switch_shutdown()?\n1: Maybe yes. A switch device will still be registered even if all user\n ports failed to probe, see commit 86f8b1c01a0a (\"net: dsa: Do not\n make user port errors fatal\"), and the cpu_dp->conduit pointers\n remain valid. I haven't audited all call paths to see whether they\n will actually use the conduit in lack of any user port, but if they\n do, it seems safer to not rely on user ports for that reference.\n2. Definitely yes. We support changing the conduit which a user port is\n associated to, and we can get into a situation where we've moved all\n user ports away from a conduit, thus no longer hold any reference to\n it via the net device tracker. But we shouldn't let it go nonetheless\n - see the next change in relation to dsa_tree_find_first_conduit()\n and LAG conduits which disappear.\n We have to be prepared to return to the physical conduit, so the CPU\n port must explicitly keep another reference to it. This is also to\n say: the user ports and their CPU ports may not always keep a\n reference to the same conduit net device, and both are needed.\n\nAs for the conduit's kobject for the /sys/class/net/ entry, we don't\ncare about it, we can release it as soon as we hold the net device\nobject itself.\n\nHistory and blame attribution\n-----------------------------\n\nThe code has been refactored so many times, it is very difficult to\nfollow and properly attribute a blame, but I'll try to make a short\nhistory which I hope to be correct.\n\nWe have two distinct probing paths:\n- one for OF, introduced in 2016 i\n---truncated---", "category":"general", "title":"Synopsis" } ], "publisher":null, "references":[ { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2025-71152" }, { "summary":"CVE-2025-71152 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/cve/2025/csaf-openeuler-cve-2025-71152.json" }, { "summary":"openEuler-SA-2026-1760", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1760" }, { "summary":"CVE-2025-71152", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-71152&packageName=kernel" } ], "title":"openEuler cve CVE-2025-71152", "tracking":{ "initial_release_date":"2026-03-30T15:49:29+08:00", "revision_history":[ { "date":"2026-03-30T15:49:29+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-03-30T15:49:29+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-03-30T15:49:29+08:00", "id":"CVE-2025-71152", "version":"1.0.0", "status":"interim" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"openEuler-24.03-LTS-SP1", "name":"openEuler-24.03-LTS-SP1" }, "name":"openEuler-24.03-LTS-SP1", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1" }, "product_id":"kernel-6.6.0-144.0.0.139.oe2403sp1.src.rpm", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.src.rpm" }, "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"perf-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64", "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"bpftool-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"bpftool-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-debugsource-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-headers-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-source-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-tools-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-tools-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"kernel-tools-devel-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"perf-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"python3-perf-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64", "name":"python3-perf-debuginfo-6.6.0-144.0.0.139.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP1", "product_reference":"kernel-6.6.0-144.0.0.139.oe2403sp1.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-144.0.0.139.oe2403sp1.src", "name":"kernel-6.6.0-144.0.0.139.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2025-71152", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: properly keep track of conduit reference\n\nProblem description\n-------------------\n\nDSA has a mumbo-jumbo of reference handling of the conduit net device\nand its kobject which, sadly, is just wrong and doesn't make sense.\n\nThere are two distinct problems.\n\n1. The OF path, which uses of_find_net_device_by_node(), never releases\n the elevated refcount on the conduit's kobject. Nominally, the OF and\n non-OF paths should result in objects having identical reference\n counts taken, and it is already suspicious that\n dsa_dev_to_net_device() has a put_device() call which is missing in\n dsa_port_parse_of(), but we can actually even verify that an issue\n exists. With CONFIG_DEBUG_KOBJECT_RELEASE=y, if we run this command\n \"before\" and \"after\" applying this patch:\n\n(unbind the conduit driver for net device eno2)\necho 0000:00:00.2 > /sys/bus/pci/drivers/fsl_enetc/unbind\n\nwe see these lines in the output diff which appear only with the patch\napplied:\n\nkobject: 'eno2' (ffff002009a3a6b8): kobject_release, parent 0000000000000000 (delayed 1000)\nkobject: '109' (ffff0020099d59a0): kobject_release, parent 0000000000000000 (delayed 1000)\n\n2. After we find the conduit interface one way (OF) or another (non-OF),\n it can get unregistered at any time, and DSA remains with a long-lived,\n but in this case stale, cpu_dp->conduit pointer. Holding the net\n device's underlying kobject isn't actually of much help, it just\n prevents it from being freed (but we never need that kobject\n directly). What helps us to prevent the net device from being\n unregistered is the parallel netdev reference mechanism (dev_hold()\n and dev_put()).\n\nActually we actually use that netdev tracker mechanism implicitly on\nuser ports since commit 2f1e8ea726e9 (\"net: dsa: link interfaces with\nthe DSA master to get rid of lockdep warnings\"), via netdev_upper_dev_link().\nBut time still passes at DSA switch probe time between the initial\nof_find_net_device_by_node() code and the user port creation time, time\nduring which the conduit could unregister itself and DSA wouldn't know\nabout it.\n\nSo we have to run of_find_net_device_by_node() under rtnl_lock() to\nprevent that from happening, and release the lock only with the netdev\ntracker having acquired the reference.\n\nDo we need to keep the reference until dsa_unregister_switch() /\ndsa_switch_shutdown()?\n1: Maybe yes. A switch device will still be registered even if all user\n ports failed to probe, see commit 86f8b1c01a0a (\"net: dsa: Do not\n make user port errors fatal\"), and the cpu_dp->conduit pointers\n remain valid. I haven't audited all call paths to see whether they\n will actually use the conduit in lack of any user port, but if they\n do, it seems safer to not rely on user ports for that reference.\n2. Definitely yes. We support changing the conduit which a user port is\n associated to, and we can get into a situation where we've moved all\n user ports away from a conduit, thus no longer hold any reference to\n it via the net device tracker. But we shouldn't let it go nonetheless\n - see the next change in relation to dsa_tree_find_first_conduit()\n and LAG conduits which disappear.\n We have to be prepared to return to the physical conduit, so the CPU\n port must explicitly keep another reference to it. This is also to\n say: the user ports and their CPU ports may not always keep a\n reference to the same conduit net device, and both are needed.\n\nAs for the conduit's kobject for the /sys/class/net/ entry, we don't\ncare about it, we can release it as soon as we hold the net device\nobject itself.\n\nHistory and blame attribution\n-----------------------------\n\nThe code has been refactored so many times, it is very difficult to\nfollow and properly attribute a blame, but I'll try to make a short\nhistory which I hope to be correct.\n\nWe have two distinct probing paths:\n- one for OF, introduced in 2016 i\n---truncated---", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":{ "$ref":"$.vulnerabilities[0].product_status.fixed" } }, "remediations":[ { "product_ids":{ "$ref":"$.vulnerabilities[0].product_status.fixed" }, "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-1760" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":{ "$ref":"$.vulnerabilities[0].product_status.fixed" } } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2025-71152" } ] }