diff --git a/data/cve/CVE-2025-38228.json b/data/cve/CVE-2025-38228.json new file mode 100644 index 0000000000000000000000000000000000000000..525bc3e2876a49cfea46e2b6e55ba658f622e246 --- /dev/null +++ b/data/cve/CVE-2025-38228.json @@ -0,0 +1,76 @@ +{ + "id": 29453, + "cve_id": "CVE-2025-38228", + "creator": null, + "publisher": "cve-center", + "publish_third_party_token": "cve-center", + "publish_date": "2025-07-04 00:00:00", + "cvss": { + "nvd_cvss": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", + "openanolis_cvss": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + }, + "product": [ + { + "product_id": 7, + "name_version": "Anolis OS 23", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:6.6", + "rpm_status": "unaffected" + } + ] + } + }, + { + "product_id": 5, + "name_version": "Anolis OS 8", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:5.10", + "rpm_status": "unaffected" + }, + { + "rpm_name": "kernel:4.18", + "rpm_status": "unaffected" + } + ] + } + }, + { + "product_id": 6, + "name_version": "Anolis OS 7", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:4.19", + "rpm_status": "unaffected" + } + ] + } + } + ], + "affected_packages": [ + "kernel:6.6", + "kernel:4.19", + "kernel:4.18", + "kernel:5.10" + ], + "score": 5.5, + "severity": "Moderate", + "status": 1, + "source": "Mitre", + "cve_source_link": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38228", + "abstract": "In the Linux kernel, the following vulnerability has been resolved:\nmedia: imagination: fix a potential memory leak in e5010_probe()\nAdd video_device_release() to release the memory allocated by\nvideo_device_alloc() if something goes wrong.", + "description": null, + "issue": null, + "acknowledgements": null, + "acknowledgements_en": null, + "reference": null, + "diagnose": null, + "statement": null, + "mitigation": null, + "update_user": null, + "errata": [] +} \ No newline at end of file diff --git a/data/cve/CVE-2025-38232.json b/data/cve/CVE-2025-38232.json new file mode 100644 index 0000000000000000000000000000000000000000..f834c3a2b40a4ea5924ec322fe68f37e623dec79 --- /dev/null +++ b/data/cve/CVE-2025-38232.json @@ -0,0 +1,76 @@ +{ + "id": 29454, + "cve_id": "CVE-2025-38232", + "creator": null, + "publisher": "cve-center", + "publish_third_party_token": "cve-center", + "publish_date": "2025-07-04 00:00:00", + "cvss": { + "nvd_cvss": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", + "openanolis_cvss": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, + "product": [ + { + "product_id": 7, + "name_version": "Anolis OS 23", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:6.6", + "rpm_status": "affected" + } + ] + } + }, + { + "product_id": 5, + "name_version": "Anolis OS 8", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:5.10", + "rpm_status": "affected" + }, + { + "rpm_name": "kernel:4.18", + "rpm_status": "affected" + } + ] + } + }, + { + "product_id": 6, + "name_version": "Anolis OS 7", + "product_package_info": { + "src": [ + { + "rpm_name": "kernel:4.19", + "rpm_status": "out_scope" + } + ] + } + } + ], + "affected_packages": [ + "kernel:4.18", + "kernel:5.10", + "kernel:6.6", + "kernel:4.19" + ], + "score": 7.0, + "severity": "Moderate", + "status": 1, + "source": "Mitre", + "cve_source_link": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-38232", + "abstract": "In the Linux kernel, the following vulnerability has been resolved:\nNFSD: fix race between nfsd registration and exports_proc\nAs of now nfsd calls create_proc_exports_entry() at start of init_nfsd\nand cleanup by remove_proc_entry() at last of exit_nfsd.\nWhich causes kernel OOPs if there is race between below 2 operations:\n(i) exportfs -r\n(ii) mount -t nfsd none /proc/fs/nfsd\nfor 5.4 kernel ARM64:\nCPU 1:\nel1_irq+0xbc/0x180\narch_counter_get_cntvct+0x14/0x18\nrunning_clock+0xc/0x18\npreempt_count_add+0x88/0x110\nprep_new_page+0xb0/0x220\nget_page_from_freelist+0x2d8/0x1778\n__alloc_pages_nodemask+0x15c/0xef0\n__vmalloc_node_range+0x28c/0x478\n__vmalloc_node_flags_caller+0x8c/0xb0\nkvmalloc_node+0x88/0xe0\nnfsd_init_net+0x6c/0x108 [nfsd]\nops_init+0x44/0x170\nregister_pernet_operations+0x114/0x270\nregister_pernet_subsys+0x34/0x50\ninit_nfsd+0xa8/0x718 [nfsd]\ndo_one_initcall+0x54/0x2e0\nCPU 2 :\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000010\nPC is at : exports_net_open+0x50/0x68 [nfsd]\nCall trace:\nexports_net_open+0x50/0x68 [nfsd]\nexports_proc_open+0x2c/0x38 [nfsd]\nproc_reg_open+0xb8/0x198\ndo_dentry_open+0x1c4/0x418\nvfs_open+0x38/0x48\npath_openat+0x28c/0xf18\ndo_filp_open+0x70/0xe8\ndo_sys_open+0x154/0x248\nSometimes it crashes at exports_net_open() and sometimes cache_seq_next_rcu().\nand same is happening on latest 6.14 kernel as well:\n[ 0.000000] Linux version 6.14.0-rc5-next-20250304-dirty\n...\n[ 285.455918] Unable to handle kernel paging request at virtual address 00001f4800001f48\n...\n[ 285.464902] pc : cache_seq_next_rcu+0x78/0xa4\n...\n[ 285.469695] Call trace:\n[ 285.470083] cache_seq_next_rcu+0x78/0xa4 (P)\n[ 285.470488] seq_read+0xe0/0x11c\n[ 285.470675] proc_reg_read+0x9c/0xf0\n[ 285.470874] vfs_read+0xc4/0x2fc\n[ 285.471057] ksys_read+0x6c/0xf4\n[ 285.471231] __arm64_sys_read+0x1c/0x28\n[ 285.471428] invoke_syscall+0x44/0x100\n[ 285.471633] el0_svc_common.constprop.0+0x40/0xe0\n[ 285.471870] do_el0_svc_compat+0x1c/0x34\n[ 285.472073] el0_svc_compat+0x2c/0x80\n[ 285.472265] el0t_32_sync_handler+0x90/0x140\n[ 285.472473] el0t_32_sync+0x19c/0x1a0\n[ 285.472887] Code: f9400885 93407c23 937d7c27 11000421 (f86378a3)\n[ 285.473422] ---[ end trace 0000000000000000 ]---\nIt reproduced simply with below script:\nwhile [ 1 ]\ndo\n/exportfs -r\ndone &\nwhile [ 1 ]\ndo\ninsmod /nfsd.ko\nmount -t nfsd none /proc/fs/nfsd\numount /proc/fs/nfsd\nrmmod nfsd\ndone &\nSo exporting interfaces to user space shall be done at last and\ncleanup at first place.\nWith change there is no Kernel OOPs.", + "description": null, + "issue": null, + "acknowledgements": null, + "acknowledgements_en": null, + "reference": null, + "diagnose": null, + "statement": null, + "mitigation": null, + "update_user": null, + "errata": [] +} \ No newline at end of file