kernel-3.10.0-1160.119.1.0.13.el7.AXS7

エラータID: AXSA:2025-10836:65

リリース日: 
2025/09/09 Tuesday - 09:10
題名: 
kernel-3.10.0-1160.119.1.0.13.el7.AXS7
影響のあるチャネル: 
Asianux Server 7 for x86_64
Severity: 
High
Description: 

以下項目について対処しました。

[Security Fix]
- net/can/bcm.c の bcm_proc_show() 関数には、procfs に登録した
エントリを削除する前に bcm_op データを誤って解放してしまうことに
起因したスラブ領域の解放後利用の問題があるため、ローカルの攻撃者
により、サービス拒否攻撃を可能とする脆弱性が存在します。
(CVE-2023-52922)

- kernel の udmabuf ドライバには、バッファオーバーフローの問題が
あるため、ローカルの攻撃者により、情報の漏洩、データ破壊、および
サービス拒否攻撃を可能とする脆弱性が存在します。(CVE-2025-37803)

解決策: 

パッケージをアップデートしてください。

CVE: 
CVE-2023-52922
In the Linux kernel, the following vulnerability has been resolved: can: bcm: Fix UAF in bcm_proc_show() BUG: KASAN: slab-use-after-free in bcm_proc_show+0x969/0xa80 Read of size 8 at addr ffff888155846230 by task cat/7862 CPU: 1 PID: 7862 Comm: cat Not tainted 6.5.0-rc1-00153-gc8746099c197 #230 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: dump_stack_lvl+0xd5/0x150 print_report+0xc1/0x5e0 kasan_report+0xba/0xf0 bcm_proc_show+0x969/0xa80 seq_read_iter+0x4f6/0x1260 seq_read+0x165/0x210 proc_reg_read+0x227/0x300 vfs_read+0x1d5/0x8d0 ksys_read+0x11e/0x240 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd Allocated by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x9e/0xa0 bcm_sendmsg+0x264b/0x44e0 sock_sendmsg+0xda/0x180 ____sys_sendmsg+0x735/0x920 ___sys_sendmsg+0x11d/0x1b0 __sys_sendmsg+0xfa/0x1d0 do_syscall_64+0x35/0xb0 entry_SYSCALL_64_after_hwframe+0x63/0xcd Freed by task 7846: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x27/0x40 ____kasan_slab_free+0x161/0x1c0 slab_free_freelist_hook+0x119/0x220 __kmem_cache_free+0xb4/0x2e0 rcu_core+0x809/0x1bd0 bcm_op is freed before procfs entry be removed in bcm_release(), this lead to bcm_proc_show() may read the freed bcm_op.
CVE-2025-37803
In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix a buf size overflow issue during udmabuf creation by casting size_limit_mb to u64 when calculate pglimit.
追加情報: 

N/A

ダウンロード: 

Asianux Server 7 for x86_64
  1. bpftool-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 88d0df68f18a930a35cd5e7361195b3b
    SHA-256: ca6807b25e76491aa97dfc837c547c74090e9894dd128036fc12a0bc5bc30bae
    Size: 8.55 MB
  2. kernel-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 70896c065b4b25dc6660bf1eb188446e
    SHA-256: 3cc5f8a22e03e0d8e99312aaa3dc15a78ebfa1ae7954435dd76759d0e5e0468a
    Size: 51.75 MB
  3. kernel-abi-whitelists-3.10.0-1160.119.1.0.13.el7.AXS7.noarch.rpm
    MD5: 2006166340185fa3f369f52700cb5f6a
    SHA-256: 302e674017903bb94c6637a561ebb8806232c0de391cf0e1df4778184d09231b
    Size: 8.12 MB
  4. kernel-debug-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 45119218cff90b7f18555bcc80fd21e6
    SHA-256: f00c658c57c9ed4a8789e2be841866f90f03e5d6d5d9debe2f4543588329c2bb
    Size: 54.07 MB
  5. kernel-debug-devel-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 4e269a2f7fe65961aa4b184336648025
    SHA-256: 73da5447a3132a760adde7754cc00a82b9e222bc32ff36784eb1e29e9dd849e6
    Size: 18.15 MB
  6. kernel-devel-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 99d157027e23a84ddb1546952f239917
    SHA-256: f6553acc984081661ea6d55217e7298486036c8636348524e178a1bef2f3ceb0
    Size: 18.09 MB
  7. kernel-doc-3.10.0-1160.119.1.0.13.el7.AXS7.noarch.rpm
    MD5: 6f3703627d67495b41783914204edb5e
    SHA-256: d49b51207cd3d5ad807db54f6f496351bab055189466f6d43d90658fd393c047
    Size: 19.58 MB
  8. kernel-headers-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: af165773831183392ce8278273bddc0f
    SHA-256: 015a4f0f29cb565f5417bc6f48bb8ab8695343557a760f8dc8712766d45f92ca
    Size: 9.10 MB
  9. kernel-tools-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 408c2c9cb66d0ad43b37a1d9502822e9
    SHA-256: 9780c8b447d2d27c87924251f144bfad1ea5a4f099753427f7faf54d0a82160b
    Size: 8.21 MB
  10. kernel-tools-libs-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: a76580432d9094bc1404ba139d01fa34
    SHA-256: aaf9b4a30d28b492c0183043fab8eb325c34f971b77b3c50e2205aa629edb964
    Size: 8.11 MB
  11. perf-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 5b62b3e1fb60ccef5a3e16b73481191a
    SHA-256: b0ef55667383a25d05e035ebf4f70779ad48ec9841e72692b4ab66446a404c30
    Size: 9.75 MB
  12. python-perf-3.10.0-1160.119.1.0.13.el7.AXS7.x86_64.rpm
    MD5: 3d2c5b9fb2ee9fb5e7e88daf0880da76
    SHA-256: 5248a9420bbabf91195265fd255d61b365a45248e7078c68b9daa87db75a2b4f
    Size: 8.20 MB