RedHat Linux 核心多個漏洞

最後更新 2025年04月22日發佈日期: 2025年04月03日 1954 觀看次數

風險: 中度風險

類型: 操作系統 - LINUX

於 RedHat Linux核心發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發篡改、阻斷服務狀況、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。

[更新於 2025-04-14]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-04-16]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-04-17]

更新描述、受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-04-22]

更新描述、受影響之系統或技術、解決方案及相關連結。

注意：

有跡象顯示 CVE-2024-53150 可能受到有限度、目標性的利用。具有本機和用戶權限的攻擊者可以在目標系統上執行資料洩露。因此，風險等級評為中度風險。

影響

阻斷服務
資料洩露
繞過保安限制
篡改
遠端執行程式碼

受影響之系統或技術

Red Hat Advanced Cluster Security for Kubernetes 4 aarch64
Red Hat Advanced Cluster Security for Kubernetes 4 x86_64
Red Hat Advanced Cluster Security for Kubernetes for ARM 4 aarch64
Red Hat Advanced Cluster Security for Kubernetes for IBM Power, little endian 4 ppc64le
Red Hat Advanced Cluster Security for Kubernetes for IBM Z and LinuxONE 4 s390x
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for x86_64 9 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64
Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64
Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
Red Hat Enterprise Linux for Real Time 8 x86_64
Red Hat Enterprise Linux for Real Time for x86_64 - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 9 x86_64
Red Hat Enterprise Linux Server - AUS 7.7 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.4 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.12 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.16 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.16 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.16 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.16 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
Red Hat OpenShift Service Mesh 2 for RHEL 8 x86_64
Red Hat OpenShift Service Mesh for ARM 64 2 aarch64
Red Hat OpenShift Service Mesh for IBM Z 2 for RHEL 8 s390x
Red Hat OpenShift Service Mesh for Power 2 for RHEL 8 ppc64le

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

漏洞識別碼

CVE-2021-47101
CVE-2022-49043
CVE-2022-49541
CVE-2023-52762
CVE-2023-52784
CVE-2024-2236
CVE-2024-5535
CVE-2024-9675
CVE-2024-9676
CVE-2024-11218
CVE-2024-21536
CVE-2024-26614
CVE-2024-26779
CVE-2024-27048
CVE-2024-35900
CVE-2024-35938
CVE-2024-36010
CVE-2024-36620
CVE-2024-36902
CVE-2024-36939
CVE-2024-44192
CVE-2024-45336
CVE-2024-45338
CVE-2024-50192
CVE-2024-50302
CVE-2024-53150
CVE-2024-53197
CVE-2024-53241
CVE-2024-54467
CVE-2024-54551
CVE-2024-55549
CVE-2024-56171
CVE-2024-57083
CVE-2025-0624
CVE-2025-1244
CVE-2025-22866
CVE-2025-22869
CVE-2025-24201
CVE-2025-24208
CVE-2025-24209
CVE-2025-24216
CVE-2025-24528
CVE-2025-24855
CVE-2025-24928
CVE-2025-27144
CVE-2025-29781
CVE-2025-30204
CVE-2025-30427

資料來源

Redhat