{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"CRITICAL" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Decouple req recycling from RPC completion\n\nrl_kref formerly served two distinct lifetimes through a single\nrefcount: it gated when a Reply could wake its RPC task, and it\ngated when an rpcrdma_req could return to its free pool. The\nmarshal path took the Send-side reference only when SGEs needed\nDMA-unmap (sc_unmap_count > 0), which made a Send carrying only\npre-registered buffers an exception: the Reply handler dropped\nrl_kref from 1 to 0 and freed the req while the HCA might still\nbe DMA-reading from its send buffer.\n\nGive rl_kref a narrower job. The RPC layer takes one reference\nwhen slot allocation hands a req out. rpcrdma_prepare_send_sges()\ntakes a Send-side reference unconditionally after WR preparation\nsucceeds. xprt_rdma_free_slot() and xprt_rdma_bc_free_rqst() drop\nthe RPC-layer reference; rpcrdma_sendctx_unmap() drops the\nSend-side reference. The req returns to its free pool only after\nboth owners have signed off.\n\nThe existing kref_init(&req->rl_kref) call in\nrpcrdma_prepare_send_sges() is removed. Initialization moves to\nthe slot-allocation paths (xprt_rdma_alloc_slot and\nrpcrdma_bc_rqst_get), and the release callback re-arms rl_kref\nbefore the req returns to a free pool. A re-init in the marshal\npath would discard the RPC-layer reference that already exists\non entry.\n\nThree invariants follow:\n\n - Any rpcrdma_req held by an rpc_rqst has rl_kref >= 1.\n xprt_rdma_alloc_slot(), rpcrdma_bc_rqst_get(), and the\n backlog-wake branch in xprt_rdma_alloc_slot() each kref_init\n rl_kref before publishing the req. Without this invariant,\n an RPC task that aborts between slot allocation and marshal\n (gss_refresh failure or signal during call_connect, for\n example) would drive xprt_release() ->\n xprt_rdma_free_slot() -> kref_put against a refcount of\n zero, saturating refcount_t and stranding the slot.\n\n - The Send-side reference is taken only after WR prep\n succeeds. A mapping failure in rpcrdma_prepare_send_sges()\n runs rpcrdma_sendctx_cancel(), which DMA-unmaps the sendctx\n and clears sc_req without touching rl_kref. The sendctx\n ring walks in rpcrdma_sendctx_put_locked() and\n rpcrdma_sendctxs_destroy() skip entries with sc_req == NULL,\n so a burst of -EIO marshal failures cannot hold reqs off\n rb_send_bufs.\n\n - The release callback re-arms rl_kref so the next consumer\n enters with the invariant satisfied.\n\nReplies now complete the RPC directly. rpcrdma_reply_handler()\ncalls rpcrdma_complete_rqst() in place of kref_put on the\nnon-LocalInv branch. The LocalInv branch already completes the\nRPC from frwr_unmap_async() and is unaffected.\n\nBecause Send-side references can now outlive RPC completion,\nconnection teardown drains sendctx entries whose unsignaled\nSends never had a later signaled completion to walk the ring.\nrpcrdma_sendctxs_destroy() walks the active range and runs\nrpcrdma_sendctx_unmap() on each entry with a non-NULL sc_req\nbefore the request buffers are reset, and is moved ahead of\nrpcrdma_reqs_reset() in rpcrdma_xprt_disconnect() so the reqs\nare still in their pre-reset state when the Send-side refs are\nreleased.\n\nThe drain creates a teardown-ordering hazard on the backchannel\npath. With the new lifetime, releasing a bc_prealloc req from\nrpcrdma_req_release() re-adds it to bc_pa_list. The disconnect\nin xprt_rdma_destroy() runs after xprt_destroy_backchannel() has\nalready emptied bc_pa_list, so the drained reqs would otherwise\nleak. xprt_rdma_destroy() now runs xprt_rdma_bc_destroy(xprt, 0)\na second time after the disconnect to reclaim them.", "category":"general", "title":"Synopsis" } ], "publisher":null, "references":[ { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-72473" }, { "summary":"CVE-2026-72473 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-72473.json" }, { "summary":"openEuler-SA-2026-3704", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3704" }, { "summary":"CVE-2026-72473", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-72473&packageName=kernel" } ], "title":"openEuler cve CVE-2026-72473", "tracking":{ "initial_release_date":"2026-09-09T18:29:34+08:00", "revision_history":[ { "date":"2026-09-09T18:29:34+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-09-09T18:29:34+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-09-09T18:29:34+08:00", "id":"CVE-2026-72473", "version":"1.0.0", "status":"interim" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.29.160.oe2403sp3.src.rpm", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.src.rpm" }, "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm" }, "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.29.160.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.src", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"perf-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"perf-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "name":"python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-72473", "notes":[ { "text":"In the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: Decouple req recycling from RPC completion\n\nrl_kref formerly served two distinct lifetimes through a single\nrefcount: it gated when a Reply could wake its RPC task, and it\ngated when an rpcrdma_req could return to its free pool. The\nmarshal path took the Send-side reference only when SGEs needed\nDMA-unmap (sc_unmap_count > 0), which made a Send carrying only\npre-registered buffers an exception: the Reply handler dropped\nrl_kref from 1 to 0 and freed the req while the HCA might still\nbe DMA-reading from its send buffer.\n\nGive rl_kref a narrower job. The RPC layer takes one reference\nwhen slot allocation hands a req out. rpcrdma_prepare_send_sges()\ntakes a Send-side reference unconditionally after WR preparation\nsucceeds. xprt_rdma_free_slot() and xprt_rdma_bc_free_rqst() drop\nthe RPC-layer reference; rpcrdma_sendctx_unmap() drops the\nSend-side reference. The req returns to its free pool only after\nboth owners have signed off.\n\nThe existing kref_init(&req->rl_kref) call in\nrpcrdma_prepare_send_sges() is removed. Initialization moves to\nthe slot-allocation paths (xprt_rdma_alloc_slot and\nrpcrdma_bc_rqst_get), and the release callback re-arms rl_kref\nbefore the req returns to a free pool. A re-init in the marshal\npath would discard the RPC-layer reference that already exists\non entry.\n\nThree invariants follow:\n\n - Any rpcrdma_req held by an rpc_rqst has rl_kref >= 1.\n xprt_rdma_alloc_slot(), rpcrdma_bc_rqst_get(), and the\n backlog-wake branch in xprt_rdma_alloc_slot() each kref_init\n rl_kref before publishing the req. Without this invariant,\n an RPC task that aborts between slot allocation and marshal\n (gss_refresh failure or signal during call_connect, for\n example) would drive xprt_release() ->\n xprt_rdma_free_slot() -> kref_put against a refcount of\n zero, saturating refcount_t and stranding the slot.\n\n - The Send-side reference is taken only after WR prep\n succeeds. A mapping failure in rpcrdma_prepare_send_sges()\n runs rpcrdma_sendctx_cancel(), which DMA-unmaps the sendctx\n and clears sc_req without touching rl_kref. The sendctx\n ring walks in rpcrdma_sendctx_put_locked() and\n rpcrdma_sendctxs_destroy() skip entries with sc_req == NULL,\n so a burst of -EIO marshal failures cannot hold reqs off\n rb_send_bufs.\n\n - The release callback re-arms rl_kref so the next consumer\n enters with the invariant satisfied.\n\nReplies now complete the RPC directly. rpcrdma_reply_handler()\ncalls rpcrdma_complete_rqst() in place of kref_put on the\nnon-LocalInv branch. The LocalInv branch already completes the\nRPC from frwr_unmap_async() and is unaffected.\n\nBecause Send-side references can now outlive RPC completion,\nconnection teardown drains sendctx entries whose unsignaled\nSends never had a later signaled completion to walk the ring.\nrpcrdma_sendctxs_destroy() walks the active range and runs\nrpcrdma_sendctx_unmap() on each entry with a non-NULL sc_req\nbefore the request buffers are reset, and is moved ahead of\nrpcrdma_reqs_reset() in rpcrdma_xprt_disconnect() so the reqs\nare still in their pre-reset state when the Send-side refs are\nreleased.\n\nThe drain creates a teardown-ordering hazard on the backchannel\npath. With the new lifetime, releasing a bc_prealloc req from\nrpcrdma_req_release() re-adds it to bc_pa_list. The disconnect\nin xprt_rdma_destroy() runs after xprt_destroy_backchannel() has\nalready emptied bc_pa_list, so the drained reqs would otherwise\nleak. xprt_rdma_destroy() now runs xprt_rdma_bc_destroy(xprt, 0)\na second time after the disconnect to reclaim them.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.src", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.src", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64" ], "details":"kernel security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3704" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"CRITICAL", "baseScore":9.8, "vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.src", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:bpftool-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:bpftool-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-debugsource-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-extra-modules-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-headers-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-source-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:kernel-tools-devel-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-6.6.0-145.3.29.160.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:python3-perf-debuginfo-6.6.0-145.3.29.160.oe2403sp3.x86_64" ] } ], "threats":[ { "details":"Critical", "category":"impact" } ], "title":"CVE-2026-72473" } ] }