CVE-2025-38328

一、漏洞信息
 漏洞编号：[CVE-2025-38328](https://nvd.nist.gov/vuln/detail/CVE-2025-38328)
 漏洞归属组件：[kernel](https://gitee.com/src-openeuler/kernel)
 漏洞归属的版本：4.19.140,4.19.194,4.19.90,5.10.0,6.1.19,6.4.0,6.6.0
 CVSS V3.0分值：
  BaseScore：N/A None
  Vector：CVSS：3.0/
 漏洞简述：
  In the Linux kernel, the following vulnerability has been resolved:jffs2: check jffs2_prealloc_raw_node_refs() result in few other placesFuzzing hit another invalid pointer dereference due to the lack ofchecking whether jffs2_prealloc_raw_node_refs() completed successfully.Subsequent logic implies that the node refs have been allocated.Handle that. The code is ready for propagating the error upwards.KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]CPU: 1 PID: 5835 Comm: syz-executor145 Not tainted 5.10.234-syzkaller #0Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014RIP: 0010:jffs2_link_node_ref+0xac/0x690 fs/jffs2/nodelist.c:600Call Trace: jffs2_mark_erased_block fs/jffs2/erase.c:460 [inline] jffs2_erase_pending_blocks+0x688/0x1860 fs/jffs2/erase.c:118 jffs2_garbage_collect_pass+0x638/0x1a00 fs/jffs2/gc.c:253 jffs2_reserve_space+0x3f4/0xad0 fs/jffs2/nodemgmt.c:167 jffs2_write_inode_range+0x246/0xb50 fs/jffs2/write.c:362 jffs2_write_end+0x712/0x1110 fs/jffs2/file.c:302 generic_perform_write+0x2c2/0x500 mm/filemap.c:3347 __generic_file_write_iter+0x252/0x610 mm/filemap.c:3465 generic_file_write_iter+0xdb/0x230 mm/filemap.c:3497 call_write_iter include/linux/fs.h:2039 [inline] do_iter_readv_writev+0x46d/0x750 fs/read_write.c:740 do_iter_write+0x18c/0x710 fs/read_write.c:866 vfs_writev+0x1db/0x6a0 fs/read_write.c:939 do_pwritev fs/read_write.c:1036 [inline] __do_sys_pwritev fs/read_write.c:1083 [inline] __se_sys_pwritev fs/read_write.c:1078 [inline] __x64_sys_pwritev+0x235/0x310 fs/read_write.c:1078 do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
 漏洞公开时间：2025-07-10 17:15:27
 漏洞创建时间：2025-07-10 18:13:33
 漏洞详情参考链接：
  https://nvd.nist.gov/vuln/detail/CVE-2025-38328
<details>
<summary>更多参考(点击展开)</summary>

| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-38328 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38328-43bf@gregkh/T |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2379257 |  |
|  | https://security-tracker.debian.org/tracker/CVE-2025-38328 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38328 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://www.cve.org/CVERecord?id=CVE-2025-38328 |  |
|  | https://nvd.nist.gov/vuln/detail/CVE-2025-38328 |  |
|  | https://lore.kernel.org/linux-cve-announce/2025071032-CVE-2025-38328-43bf@gregkh/T |  |
|  | https://bugzilla.redhat.com/show_bug.cgi?id=2379257 |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |
|  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  |
|  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  |
|  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  |
|  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  |
|  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  |
|  | https://www.suse.com/security/cve/CVE-2025-38328.html |  |
|  | https://bugzilla.suse.com/1246249 |  |
|  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  |
|  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  |
|  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  |

</details>

漏洞分析指导链接：
  https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
 漏洞数据来源:
  七彩瞬析开源风险感知平台
 漏洞补丁信息：
  <details>
<summary>详情(点击展开)</summary>

| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源  |
| ------- | -------- | ------- | -------- | --------- |
| gregkh/linux |  | https://github.com/gregkh/linux/commit/2b6d96503255a3ed676cd70f8368870c6d6a25c6.patch |  | ljqc |
|  |  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  | nvd |
|  |  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  | nvd |
|  |  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  | nvd |
|  |  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  | nvd |
|  |  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  | nvd |
|  |  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  | nvd |
|  |  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  | nvd |
|  |  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  | nvd |
|  |  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  | cvelistv5 |
|  |  | https://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075 |  | snyk |
|  |  | https://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6 |  | snyk |
|  |  | https://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6 |  | snyk |
|  |  | https://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4 |  | snyk |
|  |  | https://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f |  | snyk |
|  |  | https://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168 |  | snyk |
|  |  | https://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a |  | snyk |
|  |  | https://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da |  | snyk |

</details>

二、漏洞分析结构反馈
 影响性分析说明：
  In the Linux kernel, the following vulnerability has been resolved:jffs2: check jffs2_prealloc_raw_node_refs() result in few other placesFuzzing hit another invalid pointer dereference due to the lack ofchecking whether jffs2_prealloc_raw_node_refs() completed successfully.Subsequent logic implies that the node refs have been allocated.Handle that. The code is ready for propagating the error upwards.KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]CPU: 1 PID: 5835 Comm: syz-executor145 Not tainted 5.10.234-syzkaller #0Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014RIP: 0010:jffs2_link_node_ref+0xac/0x690 fs/jffs2/nodelist.c:600Call Trace: jffs2_mark_erased_block fs/jffs2/erase.c:460 [inline] jffs2_erase_pending_blocks+0x688/0x1860 fs/jffs2/erase.c:118 jffs2_garbage_collect_pass+0x638/0x1a00 fs/jffs2/gc.c:253 jffs2_reserve_space+0x3f4/0xad0 fs/jffs2/nodemgmt.c:167 jffs2_write_inode_range+0x246/0xb50 fs/jffs2/write.c:362 jffs2_write_end+0x712/0x1110 fs/jffs2/file.c:302 generic_perform_write+0x2c2/0x500 mm/filemap.c:3347 __generic_file_write_iter+0x252/0x610 mm/filemap.c:3465 generic_file_write_iter+0xdb/0x230 mm/filemap.c:3497 call_write_iter include/linux/fs.h:2039 [inline] do_iter_readv_writev+0x46d/0x750 fs/read_write.c:740 do_iter_write+0x18c/0x710 fs/read_write.c:866 vfs_writev+0x1db/0x6a0 fs/read_write.c:939 do_pwritev fs/read_write.c:1036 [inline] __do_sys_pwritev fs/read_write.c:1083 [inline] __se_sys_pwritev fs/read_write.c:1078 [inline] __x64_sys_pwritev+0x235/0x310 fs/read_write.c:1078 do_syscall_64+0x30/0x40 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1Found by Linux Verification Center (linuxtesting.org) with Syzkaller.The Linux kernel CVE team has assigned CVE-2025-38328 to this issue.
 openEuler评分：
  3.9
 Vector：CVSS：3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L
 受影响版本排查(受影响/不受影响)：
  1.master(6.12.33):不受影响
2.openEuler-20.03-LTS-SP4(4.19.90):不受影响
3.openEuler-22.03-LTS-SP3(5.10.0):不受影响
4.openEuler-22.03-LTS-SP4(5.10.0):不受影响
5.openEuler-24.03-LTS:不受影响
6.openEuler-24.03-LTS-Next:不受影响
7.openEuler-24.03-LTS-SP1:不受影响
8.openEuler-24.03-LTS-SP2:不受影响

修复是否涉及abi变化(是/否)：
  1.master(6.12.33):否
2.openEuler-20.03-LTS-SP4(4.19.90):否
3.openEuler-22.03-LTS-SP3(5.10.0):否
4.openEuler-22.03-LTS-SP4(5.10.0):否
5.openEuler-24.03-LTS:否
6.openEuler-24.03-LTS-Next:否
7.openEuler-24.03-LTS-SP1:否
8.openEuler-24.03-LTS-SP2:否

原因说明：
  1.openEuler-20.03-LTS-SP4(4.19.90):不受影响-组件不存在
2.openEuler-22.03-LTS-SP3(5.10.0):不受影响-组件不存在
3.openEuler-22.03-LTS-SP4(5.10.0):不受影响-组件不存在
4.openEuler-24.03-LTS:不受影响-组件不存在
5.openEuler-24.03-LTS-SP1:不受影响-组件不存在
6.openEuler-24.03-LTS-SP2:不受影响-组件不存在
7.master(6.12.33):不受影响-漏洞代码不能被攻击者触发
8.openEuler-24.03-LTS-Next:不受影响-漏洞代码不能被攻击者触发

src-openEuler/kernel
关闭

内容风险标识

评论 (5)

src-openEuler/kernel关闭 .gitee-modal { width: 500px !important; }

内容风险标识

CVE-2025-38328

评论 (5)

搜索帮助

src-openEuler/kernel
关闭