CVE-2025-21733

一、漏洞信息
 漏洞编号：[CVE-2025-21733](https://nvd.nist.gov/vuln/detail/CVE-2025-21733)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.1.8,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:tracing/osnoise: Fix resetting of tracepointsIf a timerlat tracer is started with the osnoise option OSNOISE_WORKLOADdisabled, but then that option is enabled and timerlat is removed, thetracepoints that were enabled on timerlat registration do not getdisabled. If the option is disabled again and timelat is started, then ittriggers a warning in the tracepoint code due to registering thetracepoint again without ever disabling it.Do not use the same user space defined options to know to disable thetracepoints when timerlat is removed. Instead, set a global flag when itis enabled and use that flag to know to disable the events. ~# echo NO_OSNOISE_WORKLOAD > /sys/kernel/tracing/osnoise/options ~# echo timerlat > /sys/kernel/tracing/current_tracer ~# echo OSNOISE_WORKLOAD > /sys/kernel/tracing/osnoise/options ~# echo nop > /sys/kernel/tracing/current_tracer ~# echo NO_OSNOISE_WORKLOAD > /sys/kernel/tracing/osnoise/options ~# echo timerlat > /sys/kernel/tracing/current_tracerTriggers: ------------[ cut here ]------------ WARNING: CPU: 6 PID: 1337 at kernel/tracepoint.c:294 tracepoint_add_func+0x3b6/0x3f0 Modules linked in: CPU: 6 UID: 0 PID: 1337 Comm: rtla Not tainted 6.13.0-rc4-test-00018-ga867c441128e-dirty #73 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:tracepoint_add_func+0x3b6/0x3f0 Code: 48 8b 53 28 48 8b 73 20 4c 89 04 24 e8 23 59 11 00 4c 8b 04 24 e9 36 fe ff ff 0f 0b b8 ea ff ff ff 45 84 e4 0f 84 68 fe ff ff <0f> 0b e9 61 fe ff ff 48 8b 7b 18 48 85 ff 0f 84 4f ff ff ff 49 8b RSP: 0018:ffffb9b003a87ca0 EFLAGS: 00010202 RAX: 00000000ffffffef RBX: ffffffff92f30860 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff9bf59e91ccd0 RDI: ffffffff913b6410 RBP: 000000000000000a R08: 00000000000005c7 R09: 0000000000000002 R10: ffffb9b003a87ce0 R11: 0000000000000002 R12: 0000000000000001 R13: ffffb9b003a87ce0 R14: ffffffffffffffef R15: 0000000000000008 FS:  00007fce81209240(0000) GS:ffff9bf6fdd00000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e99b728000 CR3: 00000001277c0002 CR4: 0000000000172ef0 Call Trace:  <TASK>  ? __warn.cold+0xb7/0x14d  ? tracepoint_add_func+0x3b6/0x3f0  ? report_bug+0xea/0x170  ? handle_bug+0x58/0x90  ? exc_invalid_op+0x17/0x70  ? asm_exc_invalid_op+0x1a/0x20  ? __pfx_trace_sched_migrate_callback+0x10/0x10  ? tracepoint_add_func+0x3b6/0x3f0  ? __pfx_trace_sched_migrate_callback+0x10/0x10  ? __pfx_trace_sched_migrate_callback+0x10/0x10  tracepoint_probe_register+0x78/0xb0  ? __pfx_trace_sched_migrate_callback+0x10/0x10  osnoise_workload_start+0x2b5/0x370  timerlat_tracer_init+0x76/0x1b0  tracing_set_tracer+0x244/0x400  tracing_set_trace_write+0xa0/0xe0  vfs_write+0xfc/0x570  ? do_sys_openat2+0x9c/0xe0  ksys_write+0x72/0xf0  do_syscall_64+0x79/0x1c0  entry_SYSCALL_64_after_hwframe+0x76/0x7e
 漏洞公开时间：2025-02-27 11:15:13
 漏洞创建时间：2025-02-27 13:08:13
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-21733
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b45707c3c0671d9c49fa7b94c197a508aa55d16f |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/e3ff4245928f948f3eb2e852aa350b870421c358 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/e482cecd2305be1e3e6a8ee70c9b86c511484f7b |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/ee8c4c39a8f97467d63adfe03bcd45139d8c8b53 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-21733 | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-21733.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://git.kernel.org/stable/c/ee8c4c39a8f97467d63adfe03bcd45139d8c8b53 | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://git.kernel.org/stable/c/b45707c3c0671d9c49fa7b94c197a508aa55d16f | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://git.kernel.org/stable/c/e482cecd2305be1e3e6a8ee70c9b86c511484f7b | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://git.kernel.org/stable/c/e3ff4245928f948f3eb2e852aa350b870421c358 | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-21733 | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2348551 | https://bugzilla.suse.com/show_bug.cgi?id=1238494 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025022658-CVE-2025-21733-f0b8@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2348551 |
| amazon_linux_explore | https://access.redhat.com/security/cve/CVE-2025-21733 | https://explore.alas.aws.amazon.com/CVE-2025-21733.html |
| amazon_linux_explore | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21733 | https://explore.alas.aws.amazon.com/CVE-2025-21733.html |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| linux_kernel | 6.6.78 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ee8c4c39a8f97467d63adfe03bcd45139d8c8b53Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e88ed227f639ebcb31ed4e5b88756b47d904584b | linuxkernelcves |
| linux_kernel | 6.12.14 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b45707c3c0671d9c49fa7b94c197a508aa55d16fIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e88ed227f639ebcb31ed4e5b88756b47d904584b | linuxkernelcves |
| linux_kernel | 6.13.3 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e482cecd2305be1e3e6a8ee70c9b86c511484f7bIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e88ed227f639ebcb31ed4e5b88756b47d904584b | linuxkernelcves |
| linux_kernel | 6.14-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e3ff4245928f948f3eb2e852aa350b870421c358Please | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=e88ed227f639ebcb31ed4e5b88756b47d904584b | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:tracing/osnoise: Fix resetting of tracepointsIf a timerlat tracer is started with the osnoise option OSNOISE_WORKLOADdisabled, but then that option is enabled and timerlat is removed, thetracepoints that were enabled on timerlat registration do not getdisabled. If the option is disabled again and timelat is started, then ittriggers a warning in the tracepoint code due to registering thetracepoint again without ever disabling it.Do not use the same user space defined options to know to disable thetracepoints when timerlat is removed. Instead, set a global flag when itis enabled and use that flag to know to disable the events. ~# echo NO_OSNOISE_WORKLOAD &gt; /sys/kernel/tracing/osnoise/options ~# echo timerlat &gt; /sys/kernel/tracing/current_tracer ~# echo OSNOISE_WORKLOAD &gt; /sys/kernel/tracing/osnoise/options ~# echo nop &gt; /sys/kernel/tracing/current_tracer ~# echo NO_OSNOISE_WORKLOAD &gt; /sys/kernel/tracing/osnoise/options ~# echo timerlat &gt; /sys/kernel/tracing/current_tracerTriggers: ------------[ cut here ]------------ WARNING: CPU: 6 PID: 1337 at kernel/tracepoint.c:294 tracepoint_add_func+0x3b6/0x3f0 Modules linked in: CPU: 6 UID: 0 PID: 1337 Comm: rtla Not tainted 6.13.0-rc4-test-00018-ga867c441128e-dirty #73 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 RIP: 0010:tracepoint_add_func+0x3b6/0x3f0 Code: 48 8b 53 28 48 8b 73 20 4c 89 04 24 e8 23 59 11 00 4c 8b 04 24 e9 36 fe ff ff 0f 0b b8 ea ff ff ff 45 84 e4 0f 84 68 fe ff ff &lt;0f&gt; 0b e9 61 fe ff ff 48 8b 7b 18 48 85 ff 0f 84 4f ff ff ff 49 8b RSP: 0018:ffffb9b003a87ca0 EFLAGS: 00010202 RAX: 00000000ffffffef RBX: ffffffff92f30860 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffff9bf59e91ccd0 RDI: ffffffff913b6410 RBP: 000000000000000a R08: 00000000000005c7 R09: 0000000000000002 R10: ffffb9b003a87ce0 R11: 0000000000000002 R12: 0000000000000001 R13: ffffb9b003a87ce0 R14: ffffffffffffffef R15: 0000000000000008 FS:  00007fce81209240(0000) GS:ffff9bf6fdd00000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055e99b728000 CR3: 00000001277c0002 CR4: 0000000000172ef0 Call Trace:  &lt;TASK&gt;  ? __warn.cold+0xb7/0x14d  ? tracepoint_add_func+0x3b6/0x3f0  ? report_bug+0xea/0x170  ? handle_bug+0x58/0x90  ? exc_invalid_op+0x17/0x70  ? asm_exc_invalid_op+0x1a/0x20  ? __pfx_trace_sched_migrate_callback+0x10/0x10  ? tracepoint_add_func+0x3b6/0x3f0  ? __pfx_trace_sched_migrate_callback+0x10/0x10  ? __pfx_trace_sched_migrate_callback+0x10/0x10  tracepoint_probe_register+0x78/0xb0  ? __pfx_trace_sched_migrate_callback+0x10/0x10  osnoise_workload_start+0x2b5/0x370  timerlat_tracer_init+0x76/0x1b0  tracing_set_tracer+0x244/0x400  tracing_set_trace_write+0xa0/0xe0  vfs_write+0xfc/0x570  ? do_sys_openat2+0x9c/0xe0  ksys_write+0x72/0xf0  do_syscall_64+0x79/0x1c0  entry_SYSCALL_64_after_hwframe+0x76/0x7eThe Linux kernel CVE team has assigned CVE-2025-21733 to this issue.
 openEuler评分：
  3.3
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
 受影响版本排查(受影响/不受影响)：
  1.openEuler-24.03-LTS(6.6.0):受影响
2.openEuler-24.03-LTS-SP1(6.6.0):受影响
3.master(6.6.0):不受影响
4.openEuler-20.03-LTS-SP4(4.19.90):不受影响
5.openEuler-22.03-LTS-SP3(5.10.0):不受影响
6.openEuler-22.03-LTS-SP4(5.10.0):不受影响
7.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.6.0):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否

原因说明：
  1.openEuler-24.03-LTS(6.6.0):正常修复
2.openEuler-24.03-LTS-SP1(6.6.0):正常修复
3.master(6.6.0):不受影响-漏洞代码不能被攻击者触发
4.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
5.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在
6.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
7.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-1249

src-openEuler/kernel
Closed

Content Risk Flag

Comments (6)

src-openEuler/kernelClosed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2025-21733

Comments (6)

Search

src-openEuler/kernel
Closed