RedHat Linux 核心多個漏洞

最後更新 2026年05月29日發佈日期: 2026年05月08日 3052 觀看次數

風險: 中度風險

類型: 操作系統 - LINUX

於 RedHat Linux核心發現多個漏洞。遠端攻擊者可利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、敏感資料洩露、遠端執行任意程式碼及資料篡改。

注意:

CVE-2026-31431 正在被廣泛利用。Copy Fail（CVE-2026-31431）是 Linux 核心中 authencesn 密碼學範本的一項邏輯漏洞。此漏洞可能使未具特權的本機使用者，對系統上任何可讀取檔案的頁面快取執行可控的四位元組寫入。對於自 2017 年起發佈的受影響 Linux 發行版而言，此問題可能導致本機權限提升，包括取得 root 權限。

CVE-2026-43284 和 CVE-2026-43500 (又被稱為「Dirty Frag」) 正被利用作零星攻擊。如果被利用，這些漏洞可能允許擁有低權限的本機使用者取得更高的系統（root）權限。

針對 CVE-2026-46333 的概念驗證（PoC）漏洞利用程式碼已公開。CVE-2026-46333 是 Linux 核心在程序結束期間出現的競爭條件漏洞，可能讓本機未授權的低權限使用者讀取原本只有 root 才能存取的敏感檔案。成功利用後，可能洩露如 SSH 主機私鑰或 /etc/shadow 等敏感資料。

[更新於 2026-05-12]

更新描述、受影響之系統或技術、解決方案、漏洞識別碼、解決方案及相關連結。

[更新於 2026-05-13]

更新解決方案及相關連結。

[更新於 2026-05-19]

更新解決方案及相關連結。

[更新於 2026-05-22]

更新描述、影響、受影響之系統或技術、漏洞識別碼、解決方案及相關連結。

[更新於 2026-05-29]

更新漏洞識別碼、解決方案及相關連結。

影響

阻斷服務
權限提升
資料洩露
遠端執行程式碼
篡改

受影響之系統或技術

Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat CodeReady Linux Builder for ARM 64 10 aarch64
Red Hat CodeReady Linux Builder for ARM 64 8 aarch64
Red Hat CodeReady Linux Builder for ARM 64 9 aarch64
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 10 s390x
Red Hat CodeReady Linux Builder for IBM z Systems 9 s390x
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 10 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 8 ppc64le
Red Hat CodeReady Linux Builder for Power, little endian 9 ppc64le
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 10.0 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.4 x86_64
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support 9.6 x86_64
Red Hat CodeReady Linux Builder for x86_64 10 x86_64
Red Hat CodeReady Linux Builder for x86_64 8 x86_64
Red Hat CodeReady Linux Builder for x86_64 9 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.6 x86_64
Red Hat Enterprise Linux Server - AUS 9.2 x86_64
Red Hat Enterprise Linux Server - AUS 9.4 x86_64
Red Hat Enterprise Linux Server - AUS 9.6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le
Red Hat Enterprise Linux Server - TUS 8.6 x86_64
Red Hat Enterprise Linux Server - TUS 8.8 x86_64
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.6 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.8 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.0 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.2 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.6 ppc64le
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.0 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.2 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.2 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.0 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.4 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 9.6 aarch64
Red Hat Enterprise Linux for ARM 64 10 aarch64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 9 aarch64
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.0 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.2 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.2 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.0 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.4 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 9.6 s390x
Red Hat Enterprise Linux for IBM z Systems 10 s390x
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems 9 s390x
Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.2 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.6 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.0 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.4 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 9.6 ppc64le
Red Hat Enterprise Linux for Power, little endian 10 ppc64le
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian 9 ppc64le
Red Hat Enterprise Linux for Real Time 8 x86_64
Red Hat Enterprise Linux for Real Time for NFV 8 x86_64
Red Hat Enterprise Linux for Real Time for x86_64 - Extended Life Cycle Support 7 x86_64
Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.0 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 9.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.4 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support Extension 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.6 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.8 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.0 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.2 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64
Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.6 x86_64
Red Hat Enterprise Linux for x86_64 10 x86_64
Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 9 x86_64
Red Hat OpenShift Container Platform 4.12 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.12 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.13 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.13 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.14 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.14 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.15 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.15 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.16 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.17 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.18 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.18 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.19 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.19 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.20 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.20 for RHEL 9 x86_64
Red Hat OpenShift Container Platform 4.21 for RHEL 8 x86_64
Red Hat OpenShift Container Platform 4.21 for RHEL 9 x86_64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.12 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.13 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.14 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.15 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.16 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.17 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.18 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.19 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.19 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.20 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.21 for RHEL 8 aarch64
Red Hat OpenShift Container Platform for ARM 64 4.21 for RHEL 9 aarch64
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.12 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.13 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.14 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.15 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.16 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.17 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.18 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.19 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.19 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.20 for RHEL 9 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.21 for RHEL 8 s390x
Red Hat OpenShift Container Platform for IBM Z and LinuxONE 4.21 for RHEL 9 s390x
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.12 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.13 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.13 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.14 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.14 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.15 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.15 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.16 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.17 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.18 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.18 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.19 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.19 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.20 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.20 for RHEL 9 ppc64le
Red Hat OpenShift Container Platform for Power 4.21 for RHEL 8 ppc64le
Red Hat OpenShift Container Platform for Power 4.21 for RHEL 9 ppc64le

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

漏洞識別碼

CVE-2018-16885
CVE-2024-41073
CVE-2024-53216
CVE-2025-21999
CVE-2025-37861
CVE-2025-38024
CVE-2025-38653
CVE-2025-39766
CVE-2025-39981
CVE-2025-40240
CVE-2025-40252
CVE-2025-61662
CVE-2025-65637
CVE-2025-68183
CVE-2025-68347
CVE-2025-68366
CVE-2025-68724
CVE-2025-68741
CVE-2025-69419
CVE-2025-71116
CVE-2025-71238
CVE-2026-23097
CVE-2026-23136
CVE-2026-23139
CVE-2026-23191
CVE-2026-23193
CVE-2026-23243
CVE-2026-23270
CVE-2026-23401
CVE-2026-23455
CVE-2026-25646
CVE-2026-25749
CVE-2026-27135
CVE-2026-28417
CVE-2026-28421
CVE-2026-31402
CVE-2026-31408
CVE-2026-31419
CVE-2026-31431
CVE-2026-31532
CVE-2026-31684
CVE-2026-31685
CVE-2026-31709
CVE-2026-33412
CVE-2026-3497
CVE-2026-4111
CVE-2026-43020
CVE-2026-43027
CVE-2026-43051
CVE-2026-43077
CVE-2026-43158
CVE-2026-43163
CVE-2026-43190
CVE-2026-43284
CVE-2026-4424
CVE-2026-46300
CVE-2026-46333
CVE-2026-5121

資料來源

Redhat