BDU:2025-08997
Scores
EPSS
Percentile: 0.0%
CVSS
CVSS Score: 7.0/10
All CVSS Scores
Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vector Breakdown
CVSS (Common Vulnerability Scoring System) vector provides detailed metrics about vulnerability characteristics
CVSS
Attack Vector
Local (L)
Describes how the vulnerability is exploited
Attack Complexity
High (H)
Describes the conditions beyond the attacker's control
Privileges Required
Low (L)
Describes the level of privileges an attacker must possess
User Interaction
None (N)
Captures the requirement for a human user participation
Scope
Unchanged (U)
Determines if a successful attack impacts components beyond the vulnerable component
Confidentiality Impact
High (H)
Measures the impact to the confidentiality of information
Integrity Impact
High (H)
Measures the impact to integrity of a successfully exploited vulnerability
Availability Impact
High (H)
Measures the impact to the availability of the impacted component
Vector: AV:L/AC:H/Au:S/C:C/I:C/A:C
Vector Breakdown
CVSS (Common Vulnerability Scoring System) vector provides detailed metrics about vulnerability characteristics
CVSS
Attack Vector
Local (L)
Describes how the vulnerability is exploited
Attack Complexity
High (H)
Describes the conditions beyond the attacker's control
Authentication
Single
Describes the level of privileges an attacker must possess
Confidentiality Impact
Complete
Measures the impact to the confidentiality of information
Integrity Impact
Complete
Measures the impact to integrity of a successfully exploited vulnerability
Availability Impact
Complete
Measures the impact to the availability of the impacted component
Description
Уязвимость функции __io_uring_show_fdinfo() компонента io_uring ядра операционных систем Linux связана с использованием памяти после ее освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании
Scaner-VS 7 — a modern vulnerability management solution
Sources
Related Vulnerabilities
Reference Links
Recommendations
Source: bdu
В условиях отсутствия обновлений безопасности от производителя рекомендуется придерживаться “Рекомендаций по безопасной настройке операционных систем LINUX”, изложенных в методическом документе ФСТЭК России, утверждённом 25 декабря 2022 года.
Использование рекомендаций:
Для Linux:
https://lore.kernel.org/linux-cve-announce/2025070322-CVE-2025-38106-8de3@gregkh/
https://git.kernel.org/stable/c/ac0b8b327a5677dc6fecdf353d808161525b1ff0
https://git.kernel.org/stable/c/af8c13f9ee040b9a287ba246cf0055f7c77b7cc8
https://git.kernel.org/stable/c/d0932758a0a77b38ba1b39564f3b7aba12407061
Для программных продуктов Red Hat Inc.:
https://access.redhat.com/security/cve/CVE-2025-38106
Для ОС Astra Linux:
обновить пакет linux-6.12 до 6.12.34-1.astra1+ci2 или более высокой версии, используя рекомендации производителя: https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0811SE18
Vulnerable Software (12)
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: astra 1.8
{ "version_end_excluding": "6.15.3", "version_start_including": "6.15.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: astra 1.8
{ "version_end_excluding": "6.12.34", "version_start_including": "6.9.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: astra 1.8
{ "version_end_excluding": "6.16 rc2"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 10
{ "version_end_excluding": "6.15.3", "version_start_including": "6.15.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 10
{ "version_end_excluding": "6.12.34", "version_start_including": "6.9.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 10
{ "version_end_excluding": "6.16 rc2"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: linux *
{ "version_end_excluding": "6.15.3", "version_start_including": "6.15.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: linux *
{ "version_end_excluding": "6.12.34", "version_start_including": "6.9.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: linux *
{ "version_end_excluding": "6.16 rc2"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 9
{ "version_end_excluding": "6.15.3", "version_start_including": "6.15.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 9
{ "version_end_excluding": "6.12.34", "version_start_including": "6.9.0"}
Source: bdu
Type: Configuration
Vendor: сообщество свободного программного обеспечения
Product: linux_kernel
Operating System: red hat enterprise linux 9
{ "version_end_excluding": "6.16 rc2"}
Source: bdu