CVE-2025-22020

一、漏洞信息
 漏洞编号：[CVE-2025-22020](https://nvd.nist.gov/vuln/detail/CVE-2025-22020)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.x分值：
  BaseScore：7.8 High
  Vector：CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_removeThis fixes the following crash:==================================================================BUG: KASAN: slab-use-after-free in rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]Read of size 8 at addr ffff888136335380 by task kworker/6:0/140241CPU: 6 UID: 0 PID: 140241 Comm: kworker/6:0 Kdump: loaded Tainted: G            E      6.14.0-rc6+ #1Tainted: [E]=UNSIGNED_MODULEHardware name: LENOVO 30FNA1V7CW/1057, BIOS S0EKT54A 07/01/2024Workqueue: events rtsx_usb_ms_poll_card [rtsx_usb_ms]Call Trace: <TASK> dump_stack_lvl+0x51/0x70 print_address_description.constprop.0+0x27/0x320 ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] print_report+0x3e/0x70 kasan_report+0xab/0xe0 ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] ? __pfx_rtsx_usb_ms_poll_card+0x10/0x10 [rtsx_usb_ms] ? __pfx___schedule+0x10/0x10 ? kick_pool+0x3b/0x270 process_one_work+0x357/0x660 worker_thread+0x390/0x4c0 ? __pfx_worker_thread+0x10/0x10 kthread+0x190/0x1d0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>Allocated by task 161446: kasan_save_stack+0x20/0x40 kasan_save_track+0x10/0x30 __kasan_kmalloc+0x7b/0x90 __kmalloc_noprof+0x1a7/0x470 memstick_alloc_host+0x1f/0xe0 [memstick] rtsx_usb_ms_drv_probe+0x47/0x320 [rtsx_usb_ms] platform_probe+0x60/0xe0 call_driver_probe+0x35/0x120 really_probe+0x123/0x410 __driver_probe_device+0xc7/0x1e0 driver_probe_device+0x49/0xf0 __device_attach_driver+0xc6/0x160 bus_for_each_drv+0xe4/0x160 __device_attach+0x13a/0x2b0 bus_probe_device+0xbd/0xd0 device_add+0x4a5/0x760 platform_device_add+0x189/0x370 mfd_add_device+0x587/0x5e0 mfd_add_devices+0xb1/0x130 rtsx_usb_probe+0x28e/0x2e0 [rtsx_usb] usb_probe_interface+0x15c/0x460 call_driver_probe+0x35/0x120 really_probe+0x123/0x410 __driver_probe_device+0xc7/0x1e0 driver_probe_device+0x49/0xf0 __device_attach_driver+0xc6/0x160 bus_for_each_drv+0xe4/0x160 __device_attach+0x13a/0x2b0 rebind_marked_interfaces.isra.0+0xcc/0x110 usb_reset_device+0x352/0x410 usbdev_do_ioctl+0xe5c/0x1860 usbdev_ioctl+0xa/0x20 __x64_sys_ioctl+0xc5/0xf0 do_syscall_64+0x59/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7eFreed by task 161506: kasan_save_stack+0x20/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x36/0x60 __kasan_slab_free+0x34/0x50 kfree+0x1fd/0x3b0 device_release+0x56/0xf0 kobject_cleanup+0x73/0x1c0 rtsx_usb_ms_drv_remove+0x13d/0x220 [rtsx_usb_ms] platform_remove+0x2f/0x50 device_release_driver_internal+0x24b/0x2e0 bus_remove_device+0x124/0x1d0 device_del+0x239/0x530 platform_device_del.part.0+0x19/0xe0 platform_device_unregister+0x1c/0x40 mfd_remove_devices_fn+0x167/0x170 device_for_each_child_reverse+0xc9/0x130 mfd_remove_devices+0x6e/0xa0 rtsx_usb_disconnect+0x2e/0xd0 [rtsx_usb] usb_unbind_interface+0xf3/0x3f0 device_release_driver_internal+0x24b/0x2e0 proc_disconnect_claim+0x13d/0x220 usbdev_do_ioctl+0xb5e/0x1860 usbdev_ioctl+0xa/0x20 __x64_sys_ioctl+0xc5/0xf0 do_syscall_64+0x59/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7eLast potentially related work creation: kasan_save_stack+0x20/0x40 kasan_record_aux_stack+0x85/0x90 insert_work+0x29/0x100 __queue_work+0x34a/0x540 call_timer_fn+0x2a/0x160 expire_timers+0x5f/0x1f0 __run_timer_base.part.0+0x1b6/0x1e0 run_timer_softirq+0x8b/0xe0 handle_softirqs+0xf9/0x360 __irq_exit_rcu+0x114/0x130 sysvec_apic_timer_interrupt+0x72/0x90 asm_sysvec_apic_timer_interrupt+0x16/0x20Second to last potentially related work creation: kasan_save_stack+0x20/0x40 kasan_record_aux_stack+0x85/0x90 insert_work+0x29/0x100 __queue_work+0x34a/0x540 call_timer_fn+0x2a/0x160 expire_timers+0x5f/0x1f0 __run_timer_base.part.0+0x1b6/0x1e0 run_timer_softirq+0x8b/0xe0 handle_softirqs+0xf9/0x---truncated---
 漏洞公开时间：2025-04-16 19:15:42
 漏洞创建时间：2025-04-16 19:30:43
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-22020
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/0067cb7d7e7c277e91a0887a3c24e71462379469 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/31f0eaed6914333f42501fc7e0f6830879f5ef2d |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/4676741a3464b300b486e70585c3c9b692be1632 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/52d942a5302eefb3b7a3bfee310a5a33feeedc21 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/6186fb2cd36317277a8423687982140a7f3f7841 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/75123adf204f997e11bbddee48408c284f51c050 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/9dfaf4d723c62bda8d9d1340e2e78acf0c190439 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/b094e8e3988e02e8cef7a756c8d2cea9c12509ab |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-22020 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-22020 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/0067cb7d7e7c277e91a0887a3c24e71462379469 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/31f0eaed6914333f42501fc7e0f6830879f5ef2d | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/4676741a3464b300b486e70585c3c9b692be1632 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/52d942a5302eefb3b7a3bfee310a5a33feeedc21 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/6186fb2cd36317277a8423687982140a7f3f7841 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/75123adf204f997e11bbddee48408c284f51c050 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/9dfaf4d723c62bda8d9d1340e2e78acf0c190439 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://git.kernel.org/stable/c/b094e8e3988e02e8cef7a756c8d2cea9c12509ab | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2360099 | https://bugzilla.suse.com/show_bug.cgi?id=1241280 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025041642-CVE-2025-22020-70e8@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2360099 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2025-22020 |
| mageia |  | http://advisories.mageia.org/MGASA-2025-0142.html |
| osv | https://git.kernel.org/stable/c/0067cb7d7e7c277e91a0887a3c24e71462379469 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/31f0eaed6914333f42501fc7e0f6830879f5ef2d | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/4676741a3464b300b486e70585c3c9b692be1632 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/52d942a5302eefb3b7a3bfee310a5a33feeedc21 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/6186fb2cd36317277a8423687982140a7f3f7841 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/75123adf204f997e11bbddee48408c284f51c050 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/9dfaf4d723c62bda8d9d1340e2e78acf0c190439 | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://git.kernel.org/stable/c/b094e8e3988e02e8cef7a756c8d2cea9c12509ab | https://osv.dev/vulnerability/CVE-2025-22020 |
| osv | https://security-tracker.debian.org/tracker/CVE-2025-22020 | https://osv.dev/vulnerability/CVE-2025-22020 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://git.kernel.org/stable/c/0067cb7d7e7c277e91a0887a3c24e71462379469 |  | nvd |
|  |  | https://git.kernel.org/stable/c/31f0eaed6914333f42501fc7e0f6830879f5ef2d |  | nvd |
|  |  | https://git.kernel.org/stable/c/4676741a3464b300b486e70585c3c9b692be1632 |  | nvd |
|  |  | https://git.kernel.org/stable/c/52d942a5302eefb3b7a3bfee310a5a33feeedc21 |  | nvd |
|  |  | https://git.kernel.org/stable/c/6186fb2cd36317277a8423687982140a7f3f7841 |  | nvd |
|  |  | https://git.kernel.org/stable/c/75123adf204f997e11bbddee48408c284f51c050 |  | nvd |
|  |  | https://git.kernel.org/stable/c/914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185 |  | nvd |
|  |  | https://git.kernel.org/stable/c/9dfaf4d723c62bda8d9d1340e2e78acf0c190439 |  | nvd |
|  |  | https://git.kernel.org/stable/c/b094e8e3988e02e8cef7a756c8d2cea9c12509ab |  | nvd |
| linux_kernel | 5.4.292 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=914c5e5bfceb9878f3056eaf4d1c88f2cbe0a185Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 5.10.236 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9dfaf4d723c62bda8d9d1340e2e78acf0c190439Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 5.15.180 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=31f0eaed6914333f42501fc7e0f6830879f5ef2dIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.1.133 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=52d942a5302eefb3b7a3bfee310a5a33feeedc21Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.6.86 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6186fb2cd36317277a8423687982140a7f3f7841Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.12.22 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=b094e8e3988e02e8cef7a756c8d2cea9c12509abIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.13.10 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0067cb7d7e7c277e91a0887a3c24e71462379469Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.14.1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=75123adf204f997e11bbddee48408c284f51c050Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |
| linux_kernel | 6.15-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=4676741a3464b300b486e70585c3c9b692be1632Please | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=6827ca573c03385439fdfc8b512d556dc7c54fc9 | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_removeThis fixes the following crash:==================================================================BUG: KASAN: slab-use-after-free in rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms]Read of size 8 at addr ffff888136335380 by task kworker/6:0/140241CPU: 6 UID: 0 PID: 140241 Comm: kworker/6:0 Kdump: loaded Tainted: G            E      6.14.0-rc6+ #1Tainted: [E]=UNSIGNED_MODULEHardware name: LENOVO 30FNA1V7CW/1057, BIOS S0EKT54A 07/01/2024Workqueue: events rtsx_usb_ms_poll_card [rtsx_usb_ms]Call Trace: &lt;TASK&gt; dump_stack_lvl+0x51/0x70 print_address_description.constprop.0+0x27/0x320 ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] print_report+0x3e/0x70 kasan_report+0xab/0xe0 ? rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] rtsx_usb_ms_poll_card+0x159/0x200 [rtsx_usb_ms] ? __pfx_rtsx_usb_ms_poll_card+0x10/0x10 [rtsx_usb_ms] ? __pfx___schedule+0x10/0x10 ? kick_pool+0x3b/0x270 process_one_work+0x357/0x660 worker_thread+0x390/0x4c0 ? __pfx_worker_thread+0x10/0x10 kthread+0x190/0x1d0 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 &lt;/TASK&gt;Allocated by task 161446: kasan_save_stack+0x20/0x40 kasan_save_track+0x10/0x30 __kasan_kmalloc+0x7b/0x90 __kmalloc_noprof+0x1a7/0x470 memstick_alloc_host+0x1f/0xe0 [memstick] rtsx_usb_ms_drv_probe+0x47/0x320 [rtsx_usb_ms] platform_probe+0x60/0xe0 call_driver_probe+0x35/0x120 really_probe+0x123/0x410 __driver_probe_device+0xc7/0x1e0 driver_probe_device+0x49/0xf0 __device_attach_driver+0xc6/0x160 bus_for_each_drv+0xe4/0x160 __device_attach+0x13a/0x2b0 bus_probe_device+0xbd/0xd0 device_add+0x4a5/0x760 platform_device_add+0x189/0x370 mfd_add_device+0x587/0x5e0 mfd_add_devices+0xb1/0x130 rtsx_usb_probe+0x28e/0x2e0 [rtsx_usb] usb_probe_interface+0x15c/0x460 call_driver_probe+0x35/0x120 really_probe+0x123/0x410 __driver_probe_device+0xc7/0x1e0 driver_probe_device+0x49/0xf0 __device_attach_driver+0xc6/0x160 bus_for_each_drv+0xe4/0x160 __device_attach+0x13a/0x2b0 rebind_marked_interfaces.isra.0+0xcc/0x110 usb_reset_device+0x352/0x410 usbdev_do_ioctl+0xe5c/0x1860 usbdev_ioctl+0xa/0x20 __x64_sys_ioctl+0xc5/0xf0 do_syscall_64+0x59/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7eFreed by task 161506: kasan_save_stack+0x20/0x40 kasan_save_track+0x10/0x30 kasan_save_free_info+0x36/0x60 __kasan_slab_free+0x34/0x50 kfree+0x1fd/0x3b0 device_release+0x56/0xf0 kobject_cleanup+0x73/0x1c0 rtsx_usb_ms_drv_remove+0x13d/0x220 [rtsx_usb_ms] platform_remove+0x2f/0x50 device_release_driver_internal+0x24b/0x2e0 bus_remove_device+0x124/0x1d0 device_del+0x239/0x530 platform_device_del.part.0+0x19/0xe0 platform_device_unregister+0x1c/0x40 mfd_remove_devices_fn+0x167/0x170 device_for_each_child_reverse+0xc9/0x130 mfd_remove_devices+0x6e/0xa0 rtsx_usb_disconnect+0x2e/0xd0 [rtsx_usb] usb_unbind_interface+0xf3/0x3f0 device_release_driver_internal+0x24b/0x2e0 proc_disconnect_claim+0x13d/0x220 usbdev_do_ioctl+0xb5e/0x1860 usbdev_ioctl+0xa/0x20 __x64_sys_ioctl+0xc5/0xf0 do_syscall_64+0x59/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7eLast potentially related work creation: kasan_save_stack+0x20/0x40 kasan_record_aux_stack+0x85/0x90 insert_work+0x29/0x100 __queue_work+0x34a/0x540 call_timer_fn+0x2a/0x160 expire_timers+0x5f/0x1f0 __run_timer_base.part.0+0x1b6/0x1e0 run_timer_softirq+0x8b/0xe0 handle_softirqs+0xf9/0x360 __irq_exit_rcu+0x114/0x130 sysvec_apic_timer_interrupt+0x72/0x90 asm_sysvec_apic_timer_interrupt+0x16/0x20Second to last potentially related work creation: kasan_save_stack+0x20/0x40 kasan_record_aux_stack+0x85/0x90 insert_work+0x29/0x100 __queue_work+0x34a/0x540 call_timer_fn+0x2a/0x160 expire_timers+0x5f/0x1f0 __run_timer_base.part.0+0x1b6/0x1e0 run_timer_softirq+0x8b/0xe0 handle_softirqs+0xf9/0x360 __irq_exit_rcu+0x114/0x130 sysvec_apic_timer_interrupt+0x72/0x90 asm_sysvec_apic_timer_interrupt+0x16/0x20The buggy address belongs to the object at ffff888136335000 which belongs to the cache kmalloc-2k of size 2048The bu
 openEuler评分：
  7.8
 Vector：CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-22.03-LTS-SP3(5.10.0):受影响
2.openEuler-22.03-LTS-SP4(5.10.0):受影响
3.openEuler-24.03-LTS(6.6.0):受影响
4.openEuler-24.03-LTS-SP1(6.6.0):受影响
5.openEuler-24.03-LTS-SP2(6.6.0):受影响
6.openEuler-24.03-LTS-SP3(6.6.0):不受影响
7.master(6.12.33):不受影响
8.openEuler-20.03-LTS-SP4(4.19.90):不受影响
9.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否
9.openEuler-24.03-LTS-SP3(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP3(5.10.0):正常修复
2.openEuler-22.03-LTS-SP4(5.10.0):正常修复
3.openEuler-24.03-LTS(6.6.0):正常修复
4.openEuler-24.03-LTS-SP1(6.6.0):正常修复
5.openEuler-24.03-LTS-SP2(6.6.0):正常修复
6.openEuler-24.03-LTS-SP3(6.6.0):不受影响-漏洞代码不能被攻击者触发
7.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
9.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在

三、漏洞修复
安全公告链接：https://www.openeuler.org/zh/security/safety-bulletin/detail/?id=openEuler-SA-2025-2801

src-openEuler/kernel
Closed

Content Risk Flag

Comments (21)

src-openEuler/kernelClosed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2025-22020

Comments (21)

Search

src-openEuler/kernel
Closed