CVE-2025-38624

一、漏洞信息
 漏洞编号：[CVE-2025-38624](https://nvd.nist.gov/vuln/detail/CVE-2025-38624)
 漏洞归属组件：[bpftool](https://gitee.com/src-openeuler/bpftool)
 漏洞归属的版本：6.8.0,7.2.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:PCI: pnv_php: Clean up allocated IRQs on unplugWhen the root of a nested PCIe bridge configuration is unplugged, thepnv_php driver leaked the allocated IRQ resources for the child bridges hotplug event notifications, resulting in a panic.Fix this by walking all child buses and deallocating all its IRQ resourcesbefore calling pci_hp_remove_devices().Also modify the lifetime of the workqueue at struct pnv_php_slot::wq sothat it is only destroyed in pnv_php_free_slot(), instead ofpnv_php_disable_irq(). This is required since pnv_php_disable_irq() willnow be called by workers triggered by hot unplug interrupts, so theworkqueue needs to stay allocated.The abridged kernel panic that occurs without this patch is as follows:  WARNING: CPU: 0 PID: 687 at kernel/irq/msi.c:292 msi_device_data_release+0x6c/0x9c  CPU: 0 UID: 0 PID: 687 Comm: bash Not tainted 6.14.0-rc5+ #2  Call Trace:   msi_device_data_release+0x34/0x9c (unreliable)   release_nodes+0x64/0x13c   devres_release_all+0xc0/0x140   device_del+0x2d4/0x46c   pci_destroy_dev+0x5c/0x194   pci_hp_remove_devices+0x90/0x128   pci_hp_remove_devices+0x44/0x128   pnv_php_disable_slot+0x54/0xd4   power_write_file+0xf8/0x18c   pci_slot_attr_store+0x40/0x5c   sysfs_kf_write+0x64/0x78   kernfs_fop_write_iter+0x1b0/0x290   vfs_write+0x3bc/0x50c   ksys_write+0x84/0x140   system_call_exception+0x124/0x230   system_call_vectored_common+0x15c/0x2ec[bhelgaas: tidy comments]
 漏洞公开时间：2025-08-23 00:15:35
 漏洞创建时间：2025-08-29 11:22:37
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-38624
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://lore.kernel.org/linux-cve-announce/2025082230-CVE-2025-38624-81fa@gregkh/T/#u |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-38624 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-38624 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025082230-CVE-2025-38624-81fa@gregkh/T |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://ubuntu.com/security/CVE-2025-38624 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-38624 |  |
|  | https://git.kernel.org/linus/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38624 |  |
|  | https://access.redhat.com/security/cve/cve-2025-38624 |  |
|  | https://docs.bell-sw.com/security/cves/CVE-2025-38624 |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |
|  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  |
|  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  |
|  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  |
|  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  |
|  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2390354 |  |
|  | https://access.redhat.com/security/cve/CVE-2025-38624 |  |
|  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| gregkh/linux |  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  | ljqc |
|  |  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  | nvd |
|  |  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  | nvd |
|  |  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  | nvd |
|  |  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  | nvd |
|  |  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  | nvd |
|  |  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  | nvd |
|  |  | https://git.kernel.org/linus/4668619092554e1b95c9a5ac2941ca47ba6d548a |  | osv |
|  |  | https://git.kernel.org/stable/c/1773c19fa55e944cdd2634e2d9e552f87f2d38d5 |  | snyk |
|  |  | https://git.kernel.org/stable/c/28aa3cfce12487614219e7667ec84424e1f43227 |  | snyk |
|  |  | https://git.kernel.org/stable/c/32173edf3fe2d447e14e5e3b299387c6f9602a88 |  | snyk |
|  |  | https://git.kernel.org/stable/c/398170b7fd0e0db2f8096df5206c75e5ff41415a |  | snyk |
|  |  | https://git.kernel.org/stable/c/4668619092554e1b95c9a5ac2941ca47ba6d548a |  | snyk |
|  |  | https://git.kernel.org/stable/c/bbd302c4b79df10197ffa7270ca3aa572eeca33c |  | snyk |
|  |  | https://git.kernel.org/stable/c/8c1ad4af160691e157d688ad9619ced2df556aac |  | nvd |
|  |  | https://git.kernel.org/stable/c/912e200240b6f9758f0b126e64a61c9227f4ad37 |  | nvd |
|  |  | https://git.kernel.org/stable/c/8c1ad4af160691e157d688ad9619ced2df556aac |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/912e200240b6f9758f0b126e64a61c9227f4ad37 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/8c1ad4af160691e157d688ad9619ced2df556aac |  | snyk |
|  |  | https://git.kernel.org/stable/c/912e200240b6f9758f0b126e64a61c9227f4ad37 |  | snyk |

</details>
 
二、漏洞分析结构反馈
 影响性分析说明：
  
 openEuler评分：
   
 受影响版本排查(受影响/不受影响)：
  1.master(7.2.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(6.8.0):
4.openEuler-22.03-LTS-SP4(6.8.0):
5.openEuler-24.03-LTS(7.2.0):
6.openEuler-24.03-LTS-Next(7.2.0):
7.openEuler-24.03-LTS-SP1(7.2.0):
8.openEuler-24.03-LTS-SP2(7.2.0):

修复是否涉及abi变化(是/否)：
  1.master(7.2.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(6.8.0):
4.openEuler-22.03-LTS-SP4(6.8.0):
5.openEuler-24.03-LTS(7.2.0):
6.openEuler-24.03-LTS-Next(7.2.0):
7.openEuler-24.03-LTS-SP1(7.2.0):
8.openEuler-24.03-LTS-SP2(7.2.0):

原因说明：
  1.master(7.2.0):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP3(6.8.0):
4.openEuler-22.03-LTS-SP4(6.8.0):
5.openEuler-24.03-LTS(7.2.0):
6.openEuler-24.03-LTS-Next(7.2.0):
7.openEuler-24.03-LTS-SP1(7.2.0):
8.openEuler-24.03-LTS-SP2(7.2.0):

src-openEuler/bpftool

内容风险标识

评论 (3)

src-openEuler/bpftool .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-38624

评论 (3)

搜索帮助

src-openEuler/bpftool