CVE-2025-22033

一、漏洞信息
 漏洞编号：[CVE-2025-22033](https://nvd.nist.gov/vuln/detail/CVE-2025-22033)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：5.5 Medium
  Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:arm64: Don t call NULL in do_compat_alignment_fixup()do_alignment_t32_to_handler() only fixes up alignment faults forspecific instructions; it returns NULL otherwise (e.g. LDREX). Whenthat s the case, signal to the caller that it needs to proceed with theregular alignment fault handling (i.e. SIGBUS). Without this patch, thekernel panics:  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000  Mem abort info:    ESR = 0x0000000086000006    EC = 0x21: IABT (current EL), IL = 32 bits    SET = 0, FnV = 0    EA = 0, S1PTW = 0    FSC = 0x06: level 2 translation fault  user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000  [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000  Internal error: Oops: 0000000086000006 [#1] SMP  Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa>   libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c>  CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1  Debian 6.1.128-1  Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021  pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  pc : 0x0  lr : do_compat_alignment_fixup+0xd8/0x3dc  sp : ffff80000f973dd0  x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000  x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000  x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001  x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000  x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000  x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000  x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488  x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000  x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000  x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001  Call trace:   0x0   do_alignment_fault+0x40/0x50   do_mem_abort+0x4c/0xa0   el0_da+0x48/0xf0   el0t_32_sync_handler+0x110/0x140   el0t_32_sync+0x190/0x194  Code: bad PC value  ---[ end trace 0000000000000000 ]---
 漏洞公开时间：2025-04-16 23:15:55
 漏洞创建时间：2025-04-17 01:00:45
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-22033
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/2df8ee605eb6806cd41c2095306db05206633a08 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/617a4b0084a547917669fef2b54253cc9c064990 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/c28f31deeacda307acfee2f18c0ad904e5123aac |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/cf187601053ecaf671ae645edb898901f81d03e9 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/ecf798573bbe0805803f7764e12a34b4bcc65074 |  |
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | https://git.kernel.org/stable/c/fa2a9f625f185c6acb4ee5be8d71359a567afac9 |  |
| suse_bugzilla | http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-22033 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://www.cve.org/CVERecord?id=CVE-2025-22033 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/2df8ee605eb6806cd41c2095306db05206633a08 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/617a4b0084a547917669fef2b54253cc9c064990 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/c28f31deeacda307acfee2f18c0ad904e5123aac | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/cf187601053ecaf671ae645edb898901f81d03e9 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/ecf798573bbe0805803f7764e12a34b4bcc65074 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/stable/c/fa2a9f625f185c6acb4ee5be8d71359a567afac9 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2025/CVE-2025-22033.mbox | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| suse_bugzilla | https://bugzilla.redhat.com/show_bug.cgi?id=2360226 | https://bugzilla.suse.com/show_bug.cgi?id=1241436 |
| redhat_bugzilla | https://lore.kernel.org/linux-cve-announce/2025041657-CVE-2025-22033-566b@gregkh/T | https://bugzilla.redhat.com/show_bug.cgi?id=2360226 |
| anolis |  | https://anas.openanolis.cn/cves/detail/CVE-2025-22033 |
| mageia |  | http://advisories.mageia.org/MGASA-2025-0142.html |
| osv | https://git.kernel.org/stable/c/2df8ee605eb6806cd41c2095306db05206633a08 | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://git.kernel.org/stable/c/617a4b0084a547917669fef2b54253cc9c064990 | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://git.kernel.org/stable/c/c28f31deeacda307acfee2f18c0ad904e5123aac | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://git.kernel.org/stable/c/cf187601053ecaf671ae645edb898901f81d03e9 | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://git.kernel.org/stable/c/ecf798573bbe0805803f7764e12a34b4bcc65074 | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://git.kernel.org/stable/c/fa2a9f625f185c6acb4ee5be8d71359a567afac9 | https://osv.dev/vulnerability/CVE-2025-22033 |
| osv | https://security-tracker.debian.org/tracker/CVE-2025-22033 | https://osv.dev/vulnerability/CVE-2025-22033 |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  openBrain开源漏洞感知系统
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
|  |  | https://git.kernel.org/stable/c/2df8ee605eb6806cd41c2095306db05206633a08 |  | nvd |
|  |  | https://git.kernel.org/stable/c/617a4b0084a547917669fef2b54253cc9c064990 |  | nvd |
|  |  | https://git.kernel.org/stable/c/c28f31deeacda307acfee2f18c0ad904e5123aac |  | nvd |
|  |  | https://git.kernel.org/stable/c/cf187601053ecaf671ae645edb898901f81d03e9 |  | nvd |
|  |  | https://git.kernel.org/stable/c/ecf798573bbe0805803f7764e12a34b4bcc65074 |  | nvd |
|  |  | https://git.kernel.org/stable/c/fa2a9f625f185c6acb4ee5be8d71359a567afac9 |  | nvd |
| linux_kernel | 6.1.134 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=cf187601053ecaf671ae645edb898901f81d03e9 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |
| linux_kernel | 6.6.87 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=617a4b0084a547917669fef2b54253cc9c064990 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |
| linux_kernel | 6.12.23 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=2df8ee605eb6806cd41c2095306db05206633a08 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |
| linux_kernel | 6.13.11 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=fa2a9f625f185c6acb4ee5be8d71359a567afac9 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |
| linux_kernel | 6.14.2 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=ecf798573bbe0805803f7764e12a34b4bcc65074 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |
| linux_kernel | 6.15-rc1 | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=c28f31deeacda307acfee2f18c0ad904e5123aac | https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3fc24ef32d3b9368f4c103dcd21d6a3f959b4870 | linuxkernelcves |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:arm64: Don&#39;t call NULL in do_compat_alignment_fixup()do_alignment_t32_to_handler() only fixes up alignment faults forspecific instructions; it returns NULL otherwise (e.g. LDREX). Whenthat&#39;s the case, signal to the caller that it needs to proceed with theregular alignment fault handling (i.e. SIGBUS). Without this patch, thekernel panics:  Unable to handle kernel NULL pointer dereference at virtual address 0000000000000000  Mem abort info:    ESR = 0x0000000086000006    EC = 0x21: IABT (current EL), IL = 32 bits    SET = 0, FnV = 0    EA = 0, S1PTW = 0    FSC = 0x06: level 2 translation fault  user pgtable: 4k pages, 48-bit VAs, pgdp=00000800164aa000  [0000000000000000] pgd=0800081fdbd22003, p4d=0800081fdbd22003, pud=08000815d51c6003, pmd=0000000000000000  Internal error: Oops: 0000000086000006 [#1] SMP  Modules linked in: cfg80211 rfkill xt_nat xt_tcpudp xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat br_netfilter veth nvme_fa&gt;   libcrc32c crc32c_generic raid0 multipath linear dm_mod dax raid1 md_mod xhci_pci nvme xhci_hcd nvme_core t10_pi usbcore igb crc64_rocksoft crc64 crc_t10dif crct10dif_generic crct10dif_ce crct10dif_common usb_common i2c_algo_bit i2c&gt;  CPU: 2 PID: 3932954 Comm: WPEWebProcess Not tainted 6.1.0-31-arm64 #1  Debian 6.1.128-1  Hardware name: GIGABYTE MP32-AR1-00/MP32-AR1-00, BIOS F18v (SCP: 1.08.20211002) 12/01/2021  pstate: 80400009 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  pc : 0x0  lr : do_compat_alignment_fixup+0xd8/0x3dc  sp : ffff80000f973dd0  x29: ffff80000f973dd0 x28: ffff081b42526180 x27: 0000000000000000  x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000000  x23: 0000000000000004 x22: 0000000000000000 x21: 0000000000000001  x20: 00000000e8551f00 x19: ffff80000f973eb0 x18: 0000000000000000  x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000  x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000  x11: 0000000000000000 x10: 0000000000000000 x9 : ffffaebc949bc488  x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000  x5 : 0000000000400000 x4 : 0000fffffffffffe x3 : 0000000000000000  x2 : ffff80000f973eb0 x1 : 00000000e8551f00 x0 : 0000000000000001  Call trace:   0x0   do_alignment_fault+0x40/0x50   do_mem_abort+0x4c/0xa0   el0_da+0x48/0xf0   el0t_32_sync_handler+0x110/0x140   el0t_32_sync+0x190/0x194  Code: bad PC value  ---[ end trace 0000000000000000 ]---The Linux kernel CVE team has assigned CVE-2025-22033 to this issue.
 openEuler评分：
  5.5
 Vector：CVSS：3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
 受影响版本排查(受影响/不受影响)：
  1.openEuler-24.03-LTS(6.6.0):受影响
2.openEuler-24.03-LTS-SP1(6.6.0):受影响
3.openEuler-24.03-LTS-SP2(6.6.0):受影响
4.master(6.12.33):不受影响
5.openEuler-20.03-LTS-SP4(4.19.90):不受影响
6.openEuler-22.03-LTS-SP3(5.10.0):不受影响
7.openEuler-22.03-LTS-SP4(5.10.0):不受影响
8.openEuler-24.03-LTS-Next(6.6.0):不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS(6.6.0):否
6.openEuler-24.03-LTS-Next(6.6.0):否
7.openEuler-24.03-LTS-SP1(6.6.0):否
8.openEuler-24.03-LTS-SP2(6.6.0):否

原因说明：
  1.openEuler-24.03-LTS(6.6.0):正常修复
2.openEuler-24.03-LTS-SP1(6.6.0):正常修复
3.openEuler-24.03-LTS-SP2(6.6.0):正常修复
4.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
5.openEuler-24.03-LTS-Next(6.6.0):不受影响-漏洞代码不能被攻击者触发
6.openEuler-20.03-LTS-SP4(4.19.90):不受影响-漏洞代码不存在
7.openEuler-22.03-LTS-SP3(5.10.0):不受影响-漏洞代码不存在
8.openEuler-22.03-LTS-SP4(5.10.0):不受影响-漏洞代码不存在

src-openEuler / kernel
Closed

Content Risk Flag

Comments (7)

src-openEuler / kernelClosed .gitee-modal { width: 500px !important; }

Content Risk Flag

CVE-2025-22033

Comments (7)

Search

src-openEuler / kernel
Closed