RedHat Linux 核心多個漏洞

最後更新 2025年05月29日發佈日期: 2025年05月02日 7011 觀看次數

風險: 中度風險

類型: 操作系統 - LINUX

於 RedHat Linux核心發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發篡改、阻斷服務狀況、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。

注意：

CVE-2024-53104 正在被廣泛利用。Linux 核心在 USB Video Class (UVC) 驅動程式的 uvc_parse_streaming 元件中存在一個越界寫入漏洞，這允許實體攻擊者觸發權限提升。由於利用該漏洞需要與惡意硬件進行物理連接，因此風險等級被評為中等風險。

[更新於 2025-05-07]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-05-20]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-05-22]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-05-27]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-05-28]

更新描述。

[更新於 2025-05-29]

更新解決方案、漏洞識別碼及相關連結。

影響

阻斷服務
資料洩露
繞過保安限制
篡改
遠端執行程式碼

受影響之系統或技術

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.2 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.2 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.2 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 8.8 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.2 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
Red Hat CodeReady Linux Builder for x86_64 10 x86_64
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for x86_64 9 x86_64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.2 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 10 aarch64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.2 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems 10 s390x
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.2 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat Enterprise Linux for Power, little endian 10 ppc64le
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service 8.4 x86_64
Red Hat Enterprise Linux for Real Time 8 x86_64
Red Hat Enterprise Linux for Real Time for NFV - Telecommunications Update Service 8.4 x86_64
Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
Red Hat Enterprise Linux for x86_64 10 x86_64
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 9 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.2 x86_64
Red Hat Enterprise Linux Server - AUS 9.4 x86_64
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.12 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.14 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.15 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.15 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.18 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.14 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.14 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.15 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.15 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.18 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

漏洞識別碼

CVE-2019-25210
CVE-2021-47101
CVE-2021-47386
CVE-2021-47495
CVE-2022-49011
CVE-2022-49043
CVE-2022-49541
CVE-2023-52622
CVE-2023-52703
CVE-2023-52762
CVE-2023-52784
CVE-2023-52803
CVE-2023-52840
CVE-2023-53107
CVE-2024-2236
CVE-2024-5535
CVE-2024-8176
CVE-2024-12133
CVE-2024-12243
CVE-2024-25739
CVE-2024-26147
CVE-2024-26614
CVE-2024-26779
CVE-2024-26901
CVE-2024-26907
CVE-2024-26973
CVE-2024-27013
CVE-2024-27048
CVE-2024-27056
CVE-2024-35855
CVE-2024-35900
CVE-2024-35938
CVE-2024-35946
CVE-2024-36010
CVE-2024-36902
CVE-2024-36939
CVE-2024-40906
CVE-2024-42322
CVE-2024-43842
CVE-2024-43871
CVE-2024-44192
CVE-2024-44970
CVE-2024-45801
CVE-2024-47745
CVE-2024-50192
CVE-2024-53104
CVE-2024-53141
CVE-2024-53150
CVE-2024-53241
CVE-2024-54467
CVE-2024-54551
CVE-2024-55549
CVE-2024-57656
CVE-2024-57876
CVE-2024-58005
CVE-2024-58007
CVE-2024-58069
CVE-2025-0395
CVE-2025-0624
CVE-2025-0650
CVE-2025-21633
CVE-2025-21756
CVE-2025-21927
CVE-2025-21964
CVE-2025-21966
CVE-2025-21993
CVE-2025-22869
CVE-2025-24208
CVE-2025-24209
CVE-2025-24216
CVE-2025-24855
CVE-2025-26465
CVE-2025-29781
CVE-2025-30204
CVE-2025-30427
CVE-2025-37749

資料來源

Redhat