{
"document":{
"aggregate_severity":{
"namespace":"https://nvd.nist.gov/vuln-metrics/cvss",
"text":"MEDIUM"
},
"category":"csaf_vex",
"csaf_version":"2.0",
"distribution":{
"tlp":{
"label":"WHITE",
"url":"https:/www.first.org/tlp/"
}
},
"lang":"en",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm\n\nWhen send a broadcast packet to a tap device, which was added to a bridge,\nbr_nf_local_in() is called to confirm the conntrack. If another conntrack\nwith the same hash value is added to the hash table, which can be\ntriggered by a normal packet to a non-bridge device, the below warning\nmay happen.\n\n ------------[ cut here ]------------\n WARNING: CPU: 1 PID: 96 at net/bridge/br_netfilter_hooks.c:632 br_nf_local_in+0x168/0x200\n CPU: 1 UID: 0 PID: 96 Comm: tap_send Not tainted 6.17.0-rc2-dirty #44 PREEMPT(voluntary)\n RIP: 0010:br_nf_local_in+0x168/0x200\n Call Trace:\n \n nf_hook_slow+0x3e/0xf0\n br_pass_frame_up+0x103/0x180\n br_handle_frame_finish+0x2de/0x5b0\n br_nf_hook_thresh+0xc0/0x120\n br_nf_pre_routing_finish+0x168/0x3a0\n br_nf_pre_routing+0x237/0x5e0\n br_handle_frame+0x1ec/0x3c0\n __netif_receive_skb_core+0x225/0x1210\n __netif_receive_skb_one_core+0x37/0xa0\n netif_receive_skb+0x36/0x160\n tun_get_user+0xa54/0x10c0\n tun_chr_write_iter+0x65/0xb0\n vfs_write+0x305/0x410\n ksys_write+0x60/0xd0\n do_syscall_64+0xa4/0x260\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \n ---[ end trace 0000000000000000 ]---\n\nTo solve the hash conflict, nf_ct_resolve_clash() try to merge the\nconntracks, and update skb->_nfct. However, br_nf_local_in() still use the\nold ct from local variable 'nfct' after confirm(), which leads to this\nwarning.\n\nIf confirm() does not insert the conntrack entry and return NF_DROP, the\nwarning may also occur. There is no need to reserve the WARN_ON_ONCE, just\nremove it.",
"category":"general",
"title":"Synopsis"
}
],
"publisher":null,
"references":[
{
"summary":"nvd cve",
"category":"external",
"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39894"
},
{
"summary":"CVE-2025-39894 vex file",
"category":"self",
"url":"https://repo.openeuler.org/security/data/csaf/cve/2025/csaf-openeuler-cve-2025-39894.json"
},
{
"summary":"openEuler-SA-2026-2418",
"category":"self",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2418"
},
{
"summary":"CVE-2025-39894",
"category":"self",
"url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2025-39894&packageName=kernel"
}
],
"title":"openEuler cve CVE-2025-39894",
"tracking":{
"initial_release_date":"2026-05-25T10:43:01+08:00",
"revision_history":[
{
"date":"2026-05-25T10:43:01+08:00",
"summary":"Initial",
"number":"1.0.0"
}
],
"generator":{
"date":"2026-05-25T10:43:01+08:00",
"engine":{
"name":"openEuler CSAF Tool V1.0"
}
},
"current_release_date":"2026-05-25T10:43:01+08:00",
"id":"CVE-2025-39894",
"version":"1.0.0",
"status":"interim"
}
},
"product_tree":{
"branches":[
{
"name":"openEuler",
"category":"vendor",
"branches":[
{
"name":"openEuler",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"openEuler-24.03-LTS-SP1",
"name":"openEuler-24.03-LTS-SP1"
},
"name":"openEuler-24.03-LTS-SP1",
"category":"product_version"
}
],
"category":"product_name"
},
{
"name":"aarch64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm"
},
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"x86_64",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
},
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm"
},
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"category":"product_version"
}
],
"category":"architecture"
},
{
"name":"src",
"branches":[
{
"product":{
"product_identification_helper":{
"cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP1"
},
"product_id":"kernel-6.6.0-145.1.12.150.oe2403sp1.src.rpm",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.src.rpm"
},
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.src.rpm",
"category":"product_version"
}
],
"category":"architecture"
}
]
}
],
"relationships":[
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64",
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.aarch64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"bpftool-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"bpftool-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-debugsource-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-headers-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-source-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-tools-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-tools-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"kernel-tools-devel-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:perf-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"perf-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"python3-perf-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64",
"name":"python3-perf-debuginfo-6.6.0-145.1.12.150.oe2403sp1.x86_64 as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
},
{
"relates_to_product_reference":"openEuler-24.03-LTS-SP1",
"product_reference":"kernel-6.6.0-145.1.12.150.oe2403sp1.src.rpm",
"full_product_name":{
"product_id":"openEuler-24.03-LTS-SP1:kernel-6.6.0-145.1.12.150.oe2403sp1.src",
"name":"kernel-6.6.0-145.1.12.150.oe2403sp1.src as a component of openEuler-24.03-LTS-SP1"
},
"category":"default_component_of"
}
]
},
"vulnerabilities":[
{
"cve":"CVE-2025-39894",
"notes":[
{
"text":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm\n\nWhen send a broadcast packet to a tap device, which was added to a bridge,\nbr_nf_local_in() is called to confirm the conntrack. If another conntrack\nwith the same hash value is added to the hash table, which can be\ntriggered by a normal packet to a non-bridge device, the below warning\nmay happen.\n\n ------------[ cut here ]------------\n WARNING: CPU: 1 PID: 96 at net/bridge/br_netfilter_hooks.c:632 br_nf_local_in+0x168/0x200\n CPU: 1 UID: 0 PID: 96 Comm: tap_send Not tainted 6.17.0-rc2-dirty #44 PREEMPT(voluntary)\n RIP: 0010:br_nf_local_in+0x168/0x200\n Call Trace:\n \n nf_hook_slow+0x3e/0xf0\n br_pass_frame_up+0x103/0x180\n br_handle_frame_finish+0x2de/0x5b0\n br_nf_hook_thresh+0xc0/0x120\n br_nf_pre_routing_finish+0x168/0x3a0\n br_nf_pre_routing+0x237/0x5e0\n br_handle_frame+0x1ec/0x3c0\n __netif_receive_skb_core+0x225/0x1210\n __netif_receive_skb_one_core+0x37/0xa0\n netif_receive_skb+0x36/0x160\n tun_get_user+0xa54/0x10c0\n tun_chr_write_iter+0x65/0xb0\n vfs_write+0x305/0x410\n ksys_write+0x60/0xd0\n do_syscall_64+0xa4/0x260\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n \n ---[ end trace 0000000000000000 ]---\n\nTo solve the hash conflict, nf_ct_resolve_clash() try to merge the\nconntracks, and update skb->_nfct. However, br_nf_local_in() still use the\nold ct from local variable 'nfct' after confirm(), which leads to this\nwarning.\n\nIf confirm() does not insert the conntrack entry and return NF_DROP, the\nwarning may also occur. There is no need to reserve the WARN_ON_ONCE, just\nremove it.",
"category":"description",
"title":"Vulnerability Description"
}
],
"product_status":{
"fixed":{
"$ref":"$.vulnerabilities[0].product_status.fixed"
}
},
"remediations":[
{
"product_ids":{
"$ref":"$.vulnerabilities[0].product_status.fixed"
},
"details":"kernel security update",
"category":"vendor_fix",
"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-2418"
}
],
"scores":[
{
"cvss_v3":{
"baseSeverity":"MEDIUM",
"baseScore":5.5,
"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version":"3.1"
},
"products":{
"$ref":"$.vulnerabilities[0].product_status.fixed"
}
}
],
"threats":[
{
"details":"Medium",
"category":"impact"
}
],
"title":"CVE-2025-39894"
}
]
}