OESA-2025-2271

See a problem?
Please try reporting it to the source first.
Source
https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2025-2271
Import Source
https://repo.openeuler.org/security/data/osv/OESA-2025-2271.json
JSON Data
https://api.test.osv.dev/v1/vulns/OESA-2025-2271
Upstream
Published
2025-09-12T14:25:51Z
Modified
2025-09-12T20:34:02.428108Z
Summary
kernel security update
Details

The Linux Kernel, the operating system core itself.

Security Fix(es):

In the Linux kernel, the following vulnerability has been resolved: dochangetype() now refuses to operate on unmounted mounts or mounts not belonging to the caller's mount namespace. This change aligns permission checking with the rest of mount(2).(CVE-2025-38498)

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Also allocate and copy hash for reading of filter files

Currently the reader of setftracefilter and setftracenotrace just adds the pointer to the global tracer hash to its iterator. Unlike the writer that allocates a copy of the hash, the reader keeps the pointer to the filter hashes. This is problematic because this pointer is static across function calls that release the locks that can update the global tracer hashes. This can cause UAF and similar bugs.

Allocate and copy the hash for reading the filter files like it is done for the writers. This not only fixes UAF bugs, but also makes the code a bit simpler as it doesn't have to differentiate when to free the iterator's hash between writers and readers.(CVE-2025-39689)

Database specific 
{
    "severity": "High"
}
References

Affected packages

openEuler:20.03-LTS-SP4 / kernel

Package

Name
kernel
Purl
pkg:rpm/openEuler/kernel&distro=openEuler-20.03-LTS-SP4

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.19.90-2509.4.0.0343.oe2003sp4

Ecosystem specific 

{
    "aarch64": [
        "bpftool-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "bpftool-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-debugsource-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-devel-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-source-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-tools-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-tools-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "kernel-tools-devel-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "perf-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "python2-perf-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "python2-perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "python3-perf-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm",
        "python3-perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.aarch64.rpm"
    ],
    "src": [
        "kernel-4.19.90-2509.4.0.0343.oe2003sp4.src.rpm"
    ],
    "x86_64": [
        "bpftool-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "bpftool-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-debugsource-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-devel-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-source-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-tools-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-tools-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "kernel-tools-devel-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "perf-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "python2-perf-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "python2-perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "python3-perf-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm",
        "python3-perf-debuginfo-4.19.90-2509.4.0.0343.oe2003sp4.x86_64.rpm"
    ]
}