{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"LOW" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()\n\nTIPC UDP media bearer teardown calls dst_cache_destroy() on its\nreplicast caches before calling synchronize_net() to wait for\nconcurrent RCU readers (transmitters) to finish:\n\nstatic void cleanup_bearer(struct work_struct *work)\n{\n...\n\tlist_for_each_entry_safe(rcast, tmp, &ub->rcast.list, list) {\n\t\tdst_cache_destroy(&rcast->dst_cache);\n\t\tlist_del_rcu(&rcast->list);\n\t\tkfree_rcu(rcast, rcu);\n\t}\n...\n\tdst_cache_destroy(&ub->rcast.dst_cache);\n\tudp_tunnel_sock_release(ub->sk);\n\tsynchronize_net();\n...\n}\n\nThis is highly buggy because dst_cache_destroy() immediately frees the\nper-CPU cache memory (free_percpu()) and releases the cached dst\nentries without any synchronization.\n\nIf a concurrent transmitter (e.g., tipc_udp_xmit()) is running on another\nCPU under RCU protection, it can call dst_cache_get() concurrently,\nleading to:\n1. Use-After-Free on the per-CPU cache pointer itself (crash).\n2. \"rcuref - imbalanced put()\" warning if it attempts to release a\n dst that was concurrently released by dst_cache_destroy().\n\nFurthermore, calling kfree(ub) immediately after synchronize_net() without\nclosing the socket first (or waiting after closing it) leaves a window\nwhere a concurrent receiver (tipc_udp_recv()) could start after\nsynchronize_net(), access ub, and suffer a UAF when kfree(ub) runs.\n\nTo fix this, we must defer dst_cache_destroy() and kfree(ub) until after\nwe have ensured that no more readers can see the bearer/socket and all\nexisting readers have finished:\n\n1. Defer rcast entry destruction (both dst_cache_destroy() and kfree())\n to an RCU callback using call_rcu_hurry().\n Using call_rcu_hurry() ensures the dst entries are released quickly.\n\n2. Release the bearer socket using udp_tunnel_sock_release() (stops\n new receive readers).\n\n3. Call synchronize_net() to wait for all outstanding RCU readers\n (both transmit and receive) to finish.\n\n4. Now that it is safe, call dst_cache_destroy() on the main bearer\n cache, and free ub.\n\nNote: 3) and 4) can be changed later in net-next to also use\ncall_rcu_hurry() and get rid of the synchronize_net() latency.", "category":"general", "title":"Synopsis" } ], "publisher":null, "references":[ { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72404" }, { "summary":"CVE-2026-72404 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-72404.json" }, { "summary":"openEuler-SA-2026-3708", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3708" }, { "summary":"CVE-2026-72404", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-72404&packageName=kernel" } ], "title":"openEuler cve CVE-2026-72404", "tracking":{ "initial_release_date":"2026-09-16T18:04:24+08:00", "revision_history":[ { "date":"2026-09-16T18:04:24+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-09-16T18:04:24+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-09-16T18:04:24+08:00", "id":"CVE-2026-72404", "version":"1.0.0", "status":"interim" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src.rpm", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src.rpm" }, "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "name":"python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src", "name":"kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-72404", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()\n\nTIPC UDP media bearer teardown calls dst_cache_destroy() on its\nreplicast caches before calling synchronize_net() to wait for\nconcurrent RCU readers (transmitters) to finish:\n\nstatic void cleanup_bearer(struct work_struct *work)\n{\n...\n\tlist_for_each_entry_safe(rcast, tmp, &ub->rcast.list, list) {\n\t\tdst_cache_destroy(&rcast->dst_cache);\n\t\tlist_del_rcu(&rcast->list);\n\t\tkfree_rcu(rcast, rcu);\n\t}\n...\n\tdst_cache_destroy(&ub->rcast.dst_cache);\n\tudp_tunnel_sock_release(ub->sk);\n\tsynchronize_net();\n...\n}\n\nThis is highly buggy because dst_cache_destroy() immediately frees the\nper-CPU cache memory (free_percpu()) and releases the cached dst\nentries without any synchronization.\n\nIf a concurrent transmitter (e.g., tipc_udp_xmit()) is running on another\nCPU under RCU protection, it can call dst_cache_get() concurrently,\nleading to:\n1. Use-After-Free on the per-CPU cache pointer itself (crash).\n2. \"rcuref - imbalanced put()\" warning if it attempts to release a\n dst that was concurrently released by dst_cache_destroy().\n\nFurthermore, calling kfree(ub) immediately after synchronize_net() without\nclosing the socket first (or waiting after closing it) leaves a window\nwhere a concurrent receiver (tipc_udp_recv()) could start after\nsynchronize_net(), access ub, and suffer a UAF when kfree(ub) runs.\n\nTo fix this, we must defer dst_cache_destroy() and kfree(ub) until after\nwe have ensured that no more readers can see the bearer/socket and all\nexisting readers have finished:\n\n1. Defer rcast entry destruction (both dst_cache_destroy() and kfree())\n to an RCU callback using call_rcu_hurry().\n Using call_rcu_hurry() ensures the dst entries are released quickly.\n\n2. Release the bearer socket using udp_tunnel_sock_release() (stops\n new receive readers).\n\n3. Call synchronize_net() to wait for all outstanding RCU readers\n (both transmit and receive) to finish.\n\n4. Now that it is safe, call dst_cache_destroy() on the main bearer\n cache, and free ub.\n\nNote: 3) and 4) can be changed later in net-next to also use\ncall_rcu_hurry() and get rid of the synchronize_net() latency.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3708" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"HIGH", "baseScore":7.8, "vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.30.161.20260910.f620d9c7c985.oe2403sp3.src" ] } ], "threats":[ { "details":"High", "category":"impact" } ], "title":"CVE-2026-72404" } ] }