RedHat Linux 核心多個漏洞

最後更新 2025年09月30日發佈日期: 2025年09月02日 12529 觀看次數

風險: 中度風險

類型: 操作系統 - LINUX

於 RedHat Linux核心發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發遠端執行任意程式碼、洩露敏感資料、阻斷服務狀況、資料篡改、權限提升及繞過保安限制。

注意:

CVE-2025-38352 漏洞正被利用作零星攻擊。具備本地使用者存取權限的攻擊者可利用此漏洞使系統當機，或藉此提升其權限。

[更新於 2025-09-03]

更新受影響之系統或技術、解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-05]

更新解決方案及相關連結。

[更新於 2025-09-09]

更新解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-11]

更新解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-12]

更新描述、影響、解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-16]

更新解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-17]

更新解決方案及相關連結。

[更新於 2025-09-18]

更新解決方案及相關連結。

[更新於 2025-09-25]

更新解決方案、漏洞識別碼及相關連結。

[更新於 2025-09-30]

更新解決方案、漏洞識別碼及相關連結。

影響

阻斷服務
繞過保安限制
資料洩露
遠端執行程式碼
篡改
權限提升

受影響之系統或技術

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
Red Hat CodeReady Linux Builder for x86_64 10 x86_64
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for x86_64 9 x86_64
Red Hat Enterprise Linux Server - AUS 7.7 x86_64
Red Hat Enterprise Linux Server - AUS 8.2 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.2 x86_64
Red Hat Enterprise Linux Server - AUS 9.4 x86_64
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 10 aarch64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems 10 s390x
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat Enterprise Linux for Power, little endian 10 ppc64le
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Real Time 8 x86_64
Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
Red Hat Enterprise Linux for Real Time for x86_64 - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
Red Hat Enterprise Linux for x86_64 10 x86_64
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 9 x86_64

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

漏洞識別碼

CVE-2021-47670
CVE-2022-49385
CVE-2022-49788
CVE-2022-49977
CVE-2022-49985
CVE-2022-49991
CVE-2022-50000
CVE-2022-50020
CVE-2022-50022
CVE-2022-50044
CVE-2022-50087
CVE-2022-50200
CVE-2022-50211
CVE-2023-2513
CVE-2023-53047
CVE-2024-28956
CVE-2024-42094
CVE-2024-50102
CVE-2024-50121
CVE-2024-57980
CVE-2025-21727
CVE-2025-21759
CVE-2025-21867
CVE-2025-21919
CVE-2025-21928
CVE-2025-21991
CVE-2025-22020
CVE-2025-22026
CVE-2025-22058
CVE-2025-22068
CVE-2025-22097
CVE-2025-23150
CVE-2025-37797
CVE-2025-37803
CVE-2025-37810
CVE-2025-37890
CVE-2025-37914
CVE-2025-38000
CVE-2025-38001
CVE-2025-38052
CVE-2025-38079
CVE-2025-38084
CVE-2025-38085
CVE-2025-38086
CVE-2025-38124
CVE-2025-38159
CVE-2025-38177
CVE-2025-38200
CVE-2025-38211
CVE-2025-38250
CVE-2025-38332
CVE-2025-38350
CVE-2025-38352
CVE-2025-38380
CVE-2025-38392
CVE-2025-38396
CVE-2025-38417
CVE-2025-38449
CVE-2025-38461
CVE-2025-38463
CVE-2025-38464
CVE-2025-38471
CVE-2025-38472
CVE-2025-38477
CVE-2025-38498
CVE-2025-38500
CVE-2025-38523
CVE-2025-38527
CVE-2025-38550
CVE-2025-38566
CVE-2025-38718
CVE-2025-39682
CVE-2025-39694
CVE-2025-39698

資料來源

Redhat