Openanolis Anolis Os vulnerabilities

CVE-2025-1390 [MEDIUM] CWE-284 CVE-2025-1390: The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during act The PAM module pam_cap.so of libcap configuration supports group names starting with “@”, during actual parsing, configurations not starting with “@” are incorrectly recognized as group names. This may result in nonintended users being granted an inherited capability set, potentially leading to security risks. Attackers can exploit this vulnerability

CVE-2024-24856 [MEDIUM] CWE-476 CVE-2024-24856: The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but The memory allocation function ACPI_ALLOCATE_ZEROED does not guarantee a successful allocation, but the subsequent code directly dereferences the pointer that receives it, which may lead to null pointer dereference. To fix this issue, a null pointer check should be added. If it is null, return exception code AE_NO_MEMORY.