CVE-2025-22075

一、漏洞信息
 漏洞编号：[CVE-2025-22075](https://nvd.nist.gov/vuln/detail/CVE-2025-22075)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:rtnetlink: Allocate vfinfo size for VF GUIDs when supportedCommit 30aad41721e0 ( net/core: Add support for getting VF GUIDs )added support for getting VF port and node GUIDs in netlink ifinfomessages, but their size was not taken into consideration in thefunction that allocates the netlink message, causing the followingwarning when a netlink message is filled with many VF port and nodeGUIDs: # echo 64 > /sys/bus/pci/devices/0000 :08 :00.0/sriov_numvfs # ip link show dev ib0 RTNETLINK answers: Message too long Cannot send link get request: Message too longKernel warning: ------------[ cut here ]------------ WARNING: CPU: 2 PID: 1930 at net/core/rtnetlink.c:4151 rtnl_getlink+0x586/0x5a0 Modules linked in: xt_conntrack xt_MASQUERADE nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter overlay mlx5_ib macsec mlx5_core tls rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm iw_cm ib_ipoib fuse ib_cm ib_core CPU: 2 UID: 0 PID: 1930 Comm: ip Not tainted 6.14.0-rc2+ #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:rtnl_getlink+0x586/0x5a0 Code: cb 82 e8 3d af 0a 00 4d 85 ff 0f 84 08 ff ff ff 4c 89 ff 41 be ea ff ff ff e8 66 63 5b ff 49 c7 07 80 4f cb 82 e9 36 fc ff ff <0f> 0b e9 16 fe ff ff e8 de a0 56 00 66 66 2e 0f 1f 84 00 00 00 00 RSP: 0018:ffff888113557348 EFLAGS: 00010246 RAX: 00000000ffffffa6 RBX: ffff88817e87aa34 RCX: dffffc0000000000 RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88817e87afb8 RBP: 0000000000000009 R08: ffffffff821f44aa R09: 0000000000000000 R10: ffff8881260f79a8 R11: ffff88817e87af00 R12: ffff88817e87aa00 R13: ffffffff8563d300 R14: 00000000ffffffa6 R15: 00000000ffffffff FS:  00007f63a5dbf280(0000) GS:ffff88881ee00000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f63a5ba4493 CR3: 00000001700fe002 CR4: 0000000000772eb0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace:  <TASK>  ? __warn+0xa5/0x230  ? rtnl_getlink+0x586/0x5a0  ? report_bug+0x22d/0x240  ? handle_bug+0x53/0xa0  ? exc_invalid_op+0x14/0x50  ? asm_exc_invalid_op+0x16/0x20  ? skb_trim+0x6a/0x80  ? rtnl_getlink+0x586/0x5a0  ? __pfx_rtnl_getlink+0x10/0x10  ? rtnetlink_rcv_msg+0x1e5/0x860  ? __pfx___mutex_lock+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? __pfx_lock_acquire+0x10/0x10  ? stack_trace_save+0x90/0xd0  ? filter_irq_stacks+0x1d/0x70  ? kasan_save_stack+0x30/0x40  ? kasan_save_stack+0x20/0x40  ? kasan_save_track+0x10/0x30  rtnetlink_rcv_msg+0x21c/0x860  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e  ? __pfx_rtnetlink_rcv_msg+0x10/0x10  ? arch_stack_walk+0x9e/0xf0  ? rcu_is_watching+0x34/0x60  ? lock_acquire+0xd5/0x410  ? rcu_is_watching+0x34/0x60  netlink_rcv_skb+0xe0/0x210  ? __pfx_rtnetlink_rcv_msg+0x10/0x10  ? __pfx_netlink_rcv_skb+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? __pfx___netlink_lookup+0x10/0x10  ? lock_release+0x62/0x200  ? netlink_deliver_tap+0xfd/0x290  ? rcu_is_watching+0x34/0x60  ? lock_release+0x62/0x200  ? netlink_deliver_tap+0x95/0x290  netlink_unicast+0x31f/0x480  ? __pfx_netlink_unicast+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? lock_acquire+0xd5/0x410  netlink_sendmsg+0x369/0x660  ? lock_release+0x62/0x200  ? __pfx_netlink_sendmsg+0x10/0x10  ? import_ubuf+0xb9/0xf0  ? __import_iovec+0x254/0x2b0  ? lock_release+0x62/0x200  ? __pfx_netlink_sendmsg+0x10/0x10  ____sys_sendmsg+0x559/0x5a0  ? __pfx_____sys_sendmsg+0x10/0x10  ? __pfx_copy_msghdr_from_user+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? do_read_fault+0x213/0x4a0  ? rcu_is_watching+0x34/0x60  ___sys_sendmsg+0xe4/0x150  ? __pfx____sys_sendmsg+0x10/0x10  ? do_fault+0x2cc/0x6f0  ? handle_pte_fault+0x2e3/0x3d0  ? __pfx_handle_pte_fault+0x10/0x10---truncated---
 漏洞公开时间：2025-04-16 23:16:01
 漏洞创建时间：2025-04-17 00:30:30
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-22075
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/0f5489707cf528f9df2f39a3045c1ee713ec90e7 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/15f150771e0ec97f8ab1657e7d2568e593c7fa04 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/23f00807619d15063d676218f36c5dfeda1eb420 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/28b21ee8e8fb326ba961a4bbce04ec04c65e705a |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/365c1ae819455561d4746aafabad673e4bcb0163 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5f39454468329bb7fc7fc4895a6ba6ae3b95027e |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/5fed5f6de3cf734b231a11775748a6871ee3020f |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/bb7bdf636cef74cdd7a7d548bdc7457ae161f617 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-22075 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-22075 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/0f5489707cf528f9df2f39a3045c1ee713ec90e7 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/15f150771e0ec97f8ab1657e7d2568e593c7fa04 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/23f00807619d15063d676218f36c5dfeda1eb420 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/28b21ee8e8fb326ba961a4bbce04ec04c65e705a | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/365c1ae819455561d4746aafabad673e4bcb0163 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/5f39454468329bb7fc7fc4895a6ba6ae3b95027e | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/5fed5f6de3cf734b231a11775748a6871ee3020f | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/stable/c/bb7bdf636cef74cdd7a7d548bdc7457ae161f617 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-22075.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2360202 | https://bugzilla.suse.com/show_bug.cgi?id=1241402 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025041611-CVE-2025-22075-11d5@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2360202 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2025-22075 |
| mageia |  | http://advisories.mageia.org/MGASA-2025-0142.html |
| osv | https://git.kernel.org/stable/c/0f5489707cf528f9df2f39a3045c1ee713ec90e7 | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/15f150771e0ec97f8ab1657e7d2568e593c7fa04 | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/23f00807619d15063d676218f36c5dfeda1eb420 | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/28b21ee8e8fb326ba961a4bbce04ec04c65e705a | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/365c1ae819455561d4746aafabad673e4bcb0163 | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/5f39454468329bb7fc7fc4895a6ba6ae3b95027e | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/5fed5f6de3cf734b231a11775748a6871ee3020f | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://git.kernel.org/stable/c/bb7bdf636cef74cdd7a7d548bdc7457ae161f617 | https://osv.dev/vulnerability/CVE-2025-22075 |
| osv | https://security-tracker.debian.org/tracker/CVE-2025-22075 | https://osv.dev/vulnerability/CVE-2025-22075 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| linux_kernel | 5.10.236 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=0f5489707cf528f9df2f39a3045c1ee713ec90e7Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 5.15.180 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=bb7bdf636cef74cdd7a7d548bdc7457ae161f617Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.1.134 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=5fed5f6de3cf734b231a11775748a6871ee3020fIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.6.87 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=15f150771e0ec97f8ab1657e7d2568e593c7fa04Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.12.23 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=28b21ee8e8fb326ba961a4bbce04ec04c65e705aIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.13.11 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=365c1ae819455561d4746aafabad673e4bcb0163Issue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.14.2 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=5f39454468329bb7fc7fc4895a6ba6ae3b95027eIssue | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |
| linux_kernel | 6.15-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=23f00807619d15063d676218f36c5dfeda1eb420Please | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=30aad41721e087babcf27c5192474724d555936c | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:rtnetlink: Allocate vfinfo size for VF GUIDs when supportedCommit 30aad41721e0 (&#34;net/core: Add support for getting VF GUIDs&#34;)added support for getting VF port and node GUIDs in netlink ifinfomessages, but their size was not taken into consideration in thefunction that allocates the netlink message, causing the followingwarning when a netlink message is filled with many VF port and nodeGUIDs: # echo 64 &gt; /sys/bus/pci/devices/0000 :08 :00.0/sriov_numvfs # ip link show dev ib0 RTNETLINK answers: Message too long Cannot send link get request: Message too longKernel warning: ------------[ cut here ]------------ WARNING: CPU: 2 PID: 1930 at net/core/rtnetlink.c:4151 rtnl_getlink+0x586/0x5a0 Modules linked in: xt_conntrack xt_MASQUERADE nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter overlay mlx5_ib macsec mlx5_core tls rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm iw_cm ib_ipoib fuse ib_cm ib_core CPU: 2 UID: 0 PID: 1930 Comm: ip Not tainted 6.14.0-rc2+ #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 RIP: 0010:rtnl_getlink+0x586/0x5a0 Code: cb 82 e8 3d af 0a 00 4d 85 ff 0f 84 08 ff ff ff 4c 89 ff 41 be ea ff ff ff e8 66 63 5b ff 49 c7 07 80 4f cb 82 e9 36 fc ff ff &lt;0f&gt; 0b e9 16 fe ff ff e8 de a0 56 00 66 66 2e 0f 1f 84 00 00 00 00 RSP: 0018:ffff888113557348 EFLAGS: 00010246 RAX: 00000000ffffffa6 RBX: ffff88817e87aa34 RCX: dffffc0000000000 RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88817e87afb8 RBP: 0000000000000009 R08: ffffffff821f44aa R09: 0000000000000000 R10: ffff8881260f79a8 R11: ffff88817e87af00 R12: ffff88817e87aa00 R13: ffffffff8563d300 R14: 00000000ffffffa6 R15: 00000000ffffffff FS:  00007f63a5dbf280(0000) GS:ffff88881ee00000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f63a5ba4493 CR3: 00000001700fe002 CR4: 0000000000772eb0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace:  &lt;TASK&gt;  ? __warn+0xa5/0x230  ? rtnl_getlink+0x586/0x5a0  ? report_bug+0x22d/0x240  ? handle_bug+0x53/0xa0  ? exc_invalid_op+0x14/0x50  ? asm_exc_invalid_op+0x16/0x20  ? skb_trim+0x6a/0x80  ? rtnl_getlink+0x586/0x5a0  ? __pfx_rtnl_getlink+0x10/0x10  ? rtnetlink_rcv_msg+0x1e5/0x860  ? __pfx___mutex_lock+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? __pfx_lock_acquire+0x10/0x10  ? stack_trace_save+0x90/0xd0  ? filter_irq_stacks+0x1d/0x70  ? kasan_save_stack+0x30/0x40  ? kasan_save_stack+0x20/0x40  ? kasan_save_track+0x10/0x30  rtnetlink_rcv_msg+0x21c/0x860  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e  ? __pfx_rtnetlink_rcv_msg+0x10/0x10  ? arch_stack_walk+0x9e/0xf0  ? rcu_is_watching+0x34/0x60  ? lock_acquire+0xd5/0x410  ? rcu_is_watching+0x34/0x60  netlink_rcv_skb+0xe0/0x210  ? __pfx_rtnetlink_rcv_msg+0x10/0x10  ? __pfx_netlink_rcv_skb+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? __pfx___netlink_lookup+0x10/0x10  ? lock_release+0x62/0x200  ? netlink_deliver_tap+0xfd/0x290  ? rcu_is_watching+0x34/0x60  ? lock_release+0x62/0x200  ? netlink_deliver_tap+0x95/0x290  netlink_unicast+0x31f/0x480  ? __pfx_netlink_unicast+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? lock_acquire+0xd5/0x410  netlink_sendmsg+0x369/0x660  ? lock_release+0x62/0x200  ? __pfx_netlink_sendmsg+0x10/0x10  ? import_ubuf+0xb9/0xf0  ? __import_iovec+0x254/0x2b0  ? lock_release+0x62/0x200  ? __pfx_netlink_sendmsg+0x10/0x10  ____sys_sendmsg+0x559/0x5a0  ? __pfx_____sys_sendmsg+0x10/0x10  ? __pfx_copy_msghdr_from_user+0x10/0x10  ? rcu_is_watching+0x34/0x60  ? do_read_fault+0x213/0x4a0  ? rcu_is_watching+0x34/0x60  ___sys_sendmsg+0xe4/0x150  ? __pfx____sys_sendmsg+0x10/0x10  ? do_fault+0x2cc/0x6f0  ? handle_pte_fault+0x2e3/0x3d0  ? __pfx_handle_pte_fault+0x10/0x10  ? preempt_count_sub+0x14/0xc0  ? __down_read_trylock+0x150/0x270  ? __handle_mm_fault+0x404/0x8e0  ? __pfx___handle_mm_fault+0x10/0x10  ? lock_release+0x62/0x200  ? __rcu_read_unlock+0
 openEuler评分：
  3.9
 Vector：CVSS：3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.openEuler-22.03-LTS-SP3(5.10.0):受影响
2.openEuler-22.03-LTS-SP4(5.10.0):受影响
3.openEuler-24.03-LTS(6.6.0):受影响
4.openEuler-24.03-LTS-SP1(6.6.0):受影响
5.master(6.6.0):不受影响
6.openEuler-20.03-LTS-SP4(4.19.90):不受影响
7.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.6.0):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否

原因说明：
  1.openEuler-22.03-LTS-SP3(5.10.0):正常修复
2.openEuler-22.03-LTS-SP4(5.10.0):正常修复
3.openEuler-24.03-LTS(6.6.0):正常修复
4.openEuler-24.03-LTS-SP1(6.6.0):正常修复
5.master(6.6.0):不受影响-漏洞代码不能被攻击者触发
6.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
7.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在

Hi openeuler-ci-bot, welcome to the openEuler Community.
I'm the Bot here serving you. You can find the instructions on how to interact with me at Here.
If you have any questions, please contact the SIG: Kernel, and any of the maintainers.

@yangyingliang ,@jiaoff ,@guohaocs2c ,@hanjun-guo ,@woqidaideshi ,@newbeats ,@zhangyi089 ,@colyli ,@thundertown ,@htforge ,@chiqijun ,@lengchao ,@zhujianwei001 ,@kylin-mayukun ,@wangxiongfeng ,@wkfxxx ,@SuperSix173 ,@jentlestea ,@oskernel0719 ,@gasonchen 
**issue处理注意事项:** 
**1. 当前issue受影响的分支提交pr时, 须在pr描述中填写当前issue编号进行关联, 否则无法关闭当前issue;**
**2. 模板内容需要填写完整, 无论是受影响或者不受影响都需要填写完整内容,未引入的分支不需要填写, 否则无法关闭当前issue;**
**3. 以下为模板中需要填写完整的内容, 请复制到评论区回复, 注: 内容的标题名称(影响性分析说明, openEuler评分, 受影响版本排查(受影响/不受影响), 修复是否涉及abi变化(是/否), 原因说明)不能省略,省略后cve-manager将无法正常解析填写内容.**
************************************************************************
影响性分析说明:

openEuler评分: (评分和向量)

受影响版本排查(受影响/不受影响): 
1.master(6.6.0):
2.openEuler-20.03-LTS-SP4(4.19.90):
3.openEuler-22.03-LTS-SP3(5.10.0):
4.openEuler-22.03-LTS-SP4(5.10.0):
5.openEuler-24.03-LTS(6.6.0):
6.openEuler-24.03-LTS-Next(6.6.0):
7.openEuler-24.03-LTS-SP1(6.6.0):
8.openEuler-24.03-LTS-SP2(6.6.0):

修复是否涉及abi变化(是/否)：
1.master(6.6.0):
2.openEuler-20.03-LTS-SP4(4.19.90):
3.openEuler-22.03-LTS-SP3(5.10.0):
4.openEuler-22.03-LTS-SP4(5.10.0):
5.openEuler-24.03-LTS(6.6.0):
6.openEuler-24.03-LTS-Next(6.6.0):
7.openEuler-24.03-LTS-SP1(6.6.0):
8.openEuler-24.03-LTS-SP2(6.6.0):

原因说明：
1.master(6.6.0):
2.openEuler-20.03-LTS-SP4(4.19.90):
3.openEuler-22.03-LTS-SP3(5.10.0):
4.openEuler-22.03-LTS-SP4(5.10.0):
5.openEuler-24.03-LTS(6.6.0):
6.openEuler-24.03-LTS-Next(6.6.0):
7.openEuler-24.03-LTS-SP1(6.6.0):
8.openEuler-24.03-LTS-SP2(6.6.0):

issue处理具体操作请参考: 
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
pr关联issue具体操作请参考:
https://gitee.com/help/articles/4142

参考网址	关联pr	状态	补丁链接
https://nvd.nist.gov/vuln/detail/CVE-2025-22075	None	None	https://git.kernel.org/stable/c/365c1ae819455561d4746aafabad673e4bcb0163 https://git.kernel.org/stable/c/23f00807619d15063d676218f36c5dfeda1eb420 https://git.kernel.org/stable/c/5fed5f6de3cf734b231a11775748a6871ee3020f https://git.kernel.org/stable/c/15f150771e0ec97f8ab1657e7d2568e593c7fa04 https://git.kernel.org/stable/c/bb7bdf636cef74cdd7a7d548bdc7457ae161f617 https://git.kernel.org/stable/c/28b21ee8e8fb326ba961a4bbce04ec04c65e705a https://git.kernel.org/stable/c/5f39454468329bb7fc7fc4895a6ba6ae3b95027e https://git.kernel.org/stable/c/0f5489707cf528f9df2f39a3045c1ee713ec90e7
https://ubuntu.com/security/CVE-2025-22075
https://www.opencve.io/cve/CVE-2025-22075
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2025-22075
https://security-tracker.debian.org/tracker/CVE-2025-22075	None	None	https://git.kernel.org/linus/23f00807619d15063d676218f36c5dfeda1eb420
http://www.cnnvd.org.cn/web/vulnerability/queryLds.tag?qcvCnnvdid=CVE-2025-22075

说明：补丁链接仅供初步排查参考，实际可用性请人工再次确认，补丁下载验证可使用CVE补丁工具。
若补丁不准确，烦请在此issue下评论 '/report-patch 参考网址补丁链接1,补丁链接2' 反馈正确信息，便于我们不断优化工具，不胜感激。
如 /report-patch https://security-tracker.debian.org/tracker/CVE-2021-3997 https://github.com/systemd/systemd/commit/5b1cf7a9be37e20133c0208005274ce4a5b5c6a1

CVE-2025-22075

影响性分析说明：
In the Linux kernel, the following vulnerability has been resolved:

rtnetlink: Allocate vfinfo size for VF GUIDs when supported

Commit 30aad41721e0 (&#34;net/core: Add support for getting VF GUIDs&#34;)
added support for getting VF port and node GUIDs in netlink ifinfo
messages, but their size was not taken into consideration in the
function that allocates the netlink message, causing the following
warning when a netlink message is filled with many VF port and node
GUIDs:
 # echo 64 &gt; /sys/bus/pci/devices/0000\:08\:00.0/sriov_numvfs
 # ip link show dev ib0
 RTNETLINK answers: Message too long
 Cannot send link get request: Message too long

Kernel warning:

------------[ cut here ]------------
 WARNING: CPU: 2 PID: 1930 at net/core/rtnetlink.c:4151 rtnl_getlink+0x586/0x5a0
 Modules linked in: xt_conntrack xt_MASQUERADE nfnetlink xt_addrtype iptable_nat nf_nat br_netfilter overlay mlx5_ib macsec mlx5_core tls rpcrdma rdma_ucm ib_uverbs ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm iw_cm ib_ipoib fuse ib_cm ib_core
 CPU: 2 UID: 0 PID: 1930 Comm: ip Not tainted 6.14.0-rc2+ #1
 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014
 RIP: 0010:rtnl_getlink+0x586/0x5a0
 Code: cb 82 e8 3d af 0a 00 4d 85 ff 0f 84 08 ff ff ff 4c 89 ff 41 be ea ff ff ff e8 66 63 5b ff 49 c7 07 80 4f cb 82 e9 36 fc ff ff &lt;0f&gt; 0b e9 16 fe ff ff e8 de a0 56 00 66 66 2e 0f 1f 84 00 00 00 00
 RSP: 0018:ffff888113557348 EFLAGS: 00010246
 RAX: 00000000ffffffa6 RBX: ffff88817e87aa34 RCX: dffffc0000000000
 RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff88817e87afb8
 RBP: 0000000000000009 R08: ffffffff821f44aa R09: 0000000000000000
 R10: ffff8881260f79a8 R11: ffff88817e87af00 R12: ffff88817e87aa00
 R13: ffffffff8563d300 R14: 00000000ffffffa6 R15: 00000000ffffffff
 FS:  00007f63a5dbf280(0000) GS:ffff88881ee00000(0000) knlGS:0000000000000000
 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
 CR2: 00007f63a5ba4493 CR3: 00000001700fe002 CR4: 0000000000772eb0
 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
 PKRU: 55555554
 Call Trace:
  &lt;TASK&gt;
  ? __warn+0xa5/0x230
  ? rtnl_getlink+0x586/0x5a0
  ? report_bug+0x22d/0x240
  ? handle_bug+0x53/0xa0
  ? exc_invalid_op+0x14/0x50
  ? asm_exc_invalid_op+0x16/0x20
  ? skb_trim+0x6a/0x80
  ? rtnl_getlink+0x586/0x5a0
  ? __pfx_rtnl_getlink+0x10/0x10
  ? rtnetlink_rcv_msg+0x1e5/0x860
  ? __pfx___mutex_lock+0x10/0x10
  ? rcu_is_watching+0x34/0x60
  ? __pfx_lock_acquire+0x10/0x10
  ? stack_trace_save+0x90/0xd0
  ? filter_irq_stacks+0x1d/0x70
  ? kasan_save_stack+0x30/0x40
  ? kasan_save_stack+0x20/0x40
  ? kasan_save_track+0x10/0x30
  rtnetlink_rcv_msg+0x21c/0x860
  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
  ? arch_stack_walk+0x9e/0xf0
  ? rcu_is_watching+0x34/0x60
  ? lock_acquire+0xd5/0x410
  ? rcu_is_watching+0x34/0x60
  netlink_rcv_skb+0xe0/0x210
  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
  ? __pfx_netlink_rcv_skb+0x10/0x10
  ? rcu_is_watching+0x34/0x60
  ? __pfx___netlink_lookup+0x10/0x10
  ? lock_release+0x62/0x200
  ? netlink_deliver_tap+0xfd/0x290
  ? rcu_is_watching+0x34/0x60
  ? lock_release+0x62/0x200
  ? netlink_deliver_tap+0x95/0x290
  netlink_unicast+0x31f/0x480
  ? __pfx_netlink_unicast+0x10/0x10
  ? rcu_is_watching+0x34/0x60
  ? lock_acquire+0xd5/0x410
  netlink_sendmsg+0x369/0x660
  ? lock_release+0x62/0x200
  ? __pfx_netlink_sendmsg+0x10/0x10
  ? import_ubuf+0xb9/0xf0
  ? __import_iovec+0x254/0x2b0
  ? lock_release+0x62/0x200
  ? __pfx_netlink_sendmsg+0x10/0x10
  ____sys_sendmsg+0x559/0x5a0
  ? __pfx_____sys_sendmsg+0x10/0x10
  ? __pfx_copy_msghdr_from_user+0x10/0x10
  ? rcu_is_watching+0x34/0x60
  ? do_read_fault+0x213/0x4a0
  ? rcu_is_watching+0x34/0x60
  ___sys_sendmsg+0xe4/0x150
  ? __pfx____sys_sendmsg+0x10/0x10
  ? do_fault+0x2cc/0x6f0
  ? handle_pte_fault+0x2e3/0x3d0
  ? __pfx_handle_pte_fault+0x10/0x10
  ? preempt_count_sub+0x14/0xc0
  ? __down_read_trylock+0x150/0x270
  ? __handle_mm_fault+0x404/0x8e0
  ? __pfx___handle_mm_fault+0x10/0x10
  ? lock_release+0x62/0x200
  ? __rcu_read_unlock+0x65/0x90
  ? rcu_is_watching+0x34/0x60
  __sys_sendmsg+0xd5/0x150
  ? __pfx___sys_sendmsg+0x10/0x10
  ? __up_read+0x192/0x480
  ? lock_release+0x62/0x200
  ? __rcu_read_unlock+0x65/0x90
  ? rcu_is_watching+0x34/0x60
  do_syscall_64+0x6d/0x140
  entry_SYSCALL_64_after_hwframe+0x76/0x7e
 RIP: 0033:0x7f63a5b13367
 Code: 0e 00 f7 d8 64 89 02 48 c7 c0 ff ff ff ff eb b9 0f 1f 00 f3 0f 1e fa 64 8b 04 25 18 00 00 00 85 c0 75 10 b8 2e 00 00 00 0f 05 &lt;48&gt; 3d 00 f0 ff ff 77 51 c3 48 83 ec 28 89 54 24 1c 48 89 74 24 10
 RSP: 002b:00007fff8c726bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
 RAX: ffffffffffffffda RBX: 0000000067b687c2 RCX: 00007f63a5b13367
 RDX: 0000000000000000 RSI: 00007fff8c726c30 RDI: 0000000000000004
 RBP: 00007fff8c726cb8 R08: 0000000000000000 R09: 0000000000000034
 R10: 00007fff8c726c7c R11: 0000000000000246 R12: 0000000000000001
 R13: 0000000000000000 R14: 00007fff8c726cd0 R15: 00007fff8c726cd0
  &lt;/TASK&gt;
 irq event stamp: 0
 hardirqs last  enabled at (0): [&lt;0000000000000000&gt;] 0x0
 hardirqs last disabled at (0): [&lt;ffffffff813f9e58&gt;] copy_process+0xd08/0x2830
 softirqs last  enabled at (0): [&lt;ffffffff813f9e58&gt;] copy_process+0xd08/0x2830
 softirqs last disabled at (0): [&lt;0000000000000000&gt;] 0x0
 ---[ end trace 0000000000000000 ]---

Thus, when calculating ifinfo message size, take VF GUIDs sizes into
account when supported.

The Linux kernel CVE team has assigned CVE-2025-22075 to this issue.

openEuler评分:(评分和向量)
3.9
AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

受影响版本排查(受影响/不受影响):
1.master(6.1.0):不受影响
2.openEuler-20.03-LTS-SP4:不受影响
3.openEuler-22.03-LTS-SP3:受影响
4.openEuler-22.03-LTS-SP4:受影响
5.openEuler-24.03-LTS:受影响
6.openEuler-24.03-LTS-Next:不受影响
7.openEuler-24.03-LTS-SP1:受影响

修复是否涉及abi变化(是/否)：
1.master(6.1.0):否
2.openEuler-20.03-LTS-SP4:否
3.openEuler-22.03-LTS-SP3:否
4.openEuler-22.03-LTS-SP4:否
5.openEuler-24.03-LTS:否
6.openEuler-24.03-LTS-Next:否
7.openEuler-24.03-LTS-SP1:否

原因说明：
1.master(23.08.5):不受影响-漏洞代码不能被攻击者触发
2.openEuler-20.03-LTS-SP4:不受影响-漏洞代码不存在
4.openEuler-22.03-LTS-SP3:正常修复
5.openEuler-22.03-LTS-SP4:正常修复
6.openEuler-24.03-LTS:正常修复
7.openEuler-24.03-LTS-Next:不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-SP1:正常修复

src-openEuler/kernel

内容风险标识

评论 (5)

src-openEuler/kernel .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-22075

评论 (5)

搜索帮助

src-openEuler/kernel