diff --git a/0003-fix-sqlite3SelectNew-function-return-local-variable.patch b/0003-fix-sqlite3SelectNew-function-return-local-variable.patch
new file mode 100644
index 0000000000000000000000000000000000000000..0fe3ae07fa4e38d031e3991f3d7c4389c492d4d2
--- /dev/null
+++ b/0003-fix-sqlite3SelectNew-function-return-local-variable.patch
@@ -0,0 +1,43 @@
+From 8e5b378d295993878e6b9951fc8fed7acf0b1c18 Mon Sep 17 00:00:00 2001
+From: hcku <hcku@linx-info.com>
+Date: Mon, 7 Apr 2025 12:12:17 +0800
+Subject: [PATCH] fix sqlite3SelectNew function return local vriable
+
+---
+ vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c | 6 ++----
+ 1 file changed, 2 insertions(+), 4 deletions(-)
+
+diff --git a/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c b/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c
+index 140d096..d6d6b1f 100644
+--- a/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c
++++ b/vendor/github.com/mattn/go-sqlite3/sqlite3-binding.c
+@@ -125279,11 +125279,10 @@ SQLITE_PRIVATE Select *sqlite3SelectNew(
+   Expr *pLimit          /* LIMIT value.  NULL means not used */
+ ){
+   Select *pNew;
+-  Select standin;
+   pNew = sqlite3DbMallocRawNN(pParse->db, sizeof(*pNew) );
+   if( pNew==0 ){
+     assert( pParse->db->mallocFailed );
+-    pNew = &standin;
++    return pNew;
+   }
+   if( pEList==0 ){
+     pEList = sqlite3ExprListAppend(pParse, 0,
+@@ -125313,12 +125312,11 @@ SQLITE_PRIVATE Select *sqlite3SelectNew(
+   pNew->pWinDefn = 0;
+ #endif
+   if( pParse->db->mallocFailed ) {
+-    clearSelect(pParse->db, pNew, pNew!=&standin);
++    clearSelect(pParse->db, pNew, 1);
+     pNew = 0;
+   }else{
+     assert( pNew->pSrc!=0 || pParse->nErr>0 );
+   }
+-  assert( pNew!=&standin );
+   return pNew;
+ }
+ 
+-- 
+2.43.0
+
diff --git a/atune.spec b/atune.spec
index 737d1730ae4d718293f664fb312e800fa6f1afd7..530649d9f19abaecfb0e938ca2cab8b017001959 100755
--- a/atune.spec
+++ b/atune.spec
@@ -3,7 +3,7 @@
 Summary: AI auto tuning system
 Name: atune
 Version: 1.2.0
-Release: 4
+Release: 5
 License: MulanPSL-2.0
 URL: https://gitee.com/openeuler/A-Tune
 Source: https://gitee.com/openeuler/A-Tune/repository/archive/v%{version}.tar.gz
@@ -16,6 +16,7 @@ Patch9004: import-os-for-app.py.patch
 Patch9005: adapt-sqlite-3.42-to-resolve-the-build-failure.patch
 Patch9006: 0001-fix-skopt.Optimizer-incompatible-with-numpy-1.24.patch
 Patch9007: 0002-scikit-learn-1.2-rename-the-parameter-base_estimator.patch
+Patch9008: 0003-fix-sqlite3SelectNew-function-return-local-variable.patch
 
 BuildRequires: rpm-build golang-bin procps-ng
 BuildRequires: sqlite >= 3.24.0 openssl
@@ -94,6 +95,7 @@ atune restful api for manage atuned AI tuning system.
 %patch9005 -p1
 %patch9006 -p1
 %patch9007 -p1
+%patch9008 -p1
 
 %build
 %make_build
@@ -194,6 +196,9 @@ atune restful api for manage atuned AI tuning system.
 %exclude /etc/atuned/rest_certs
 
 %changelog
+* Thu Apr 3 2025 hcku <hcku@linx-info.com> - 1.2.0-5
+- fix sqlite3SelectNew() Function returns the address of a local variable
+
 * Thu Mar 20 2025 dongjiao <dongjiao@kylinos.cn> - 1.2.0-4
 - fix bug cause scikit-learn-1.2 rename the parameter 'base_estimator' to 'estimator'.