Read the docs
TI-2025-16741 Aliases CVE-2025-22869GHSA-hcg3-q754-cr77

Potential denial of service in golang.org/x/crypto

Priority MEDIUM 41CWE-770Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 54 fixed, 16 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-770.

Summary

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00939 61st percentileScored 2026-11-07
Fix Partial golang.org/x/crypto/ssh (golang.org/x/crypto): 0.35.0golang.org/x/crypto (Go): 0.35.0Red Hat: 69 advisoriesRed Hat: 54 fixed, 16 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Go standard librarygolang.org/x/crypto/sshbefore 0.35.00.35.0Patch availableCNA
—golang.org/x/crypto (Go)before 0.35.00.35.0Patch availableGHSA-hcg3-q754-cr77
  • golang.org/x/crypto/ssh VendorGo standard library Affected before 0.35.0 Fixed in 0.35.0 Patch available CNA
  • golang.org/x/crypto (Go) Vendor— Affected before 0.35.0 Fixed in 0.35.0 Patch available GHSA-hcg3-q754-cr77

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:*before 0.35.0VulnerableGo
  • cpe:2.3:a:go:ssh:*:*:*:*:*:go:*:* Versions before 0.35.0 Vulnerable ·Go

Remediation

  • Fix · CNA golang.org/x/crypto/ssh (golang.org/x/crypto) Fixed in 0.35.0
  • Fix · GHSA-hcg3-q754-cr77 golang.org/x/crypto (Go) Fixed in 0.35.0 Advisory →

Red Hat 69 advisories

  • RHSA-2026:3718 Released 2026-03-04 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.15.4
    • Red Hat OpenShift Pipelines 1.15 registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel8
  • RHSA-2026:3462 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2026:3461 Released 2026-02-27 · Red Hat rating Critical
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
Show 66 more Red Hat advisories
  • RHSA-2025:23449 Released 2025-12-17 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.5 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2025:23209 Released 2025-12-15 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.5 (TPU)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-tpu-rhel9
  • RHSA-2025:23205 Released 2025-12-15 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.5 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2025:23204 Released 2025-12-15 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.5 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2025:23202 Released 2025-12-15 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.5 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2025:23080 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server Model Optimization Tools 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/model-opt-cuda-rhel9
  • RHSA-2025:23079 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (ROCm)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-rocm-rhel9
  • RHSA-2025:23078 Released 2025-12-10 · Red Hat rating Important
    Red Hat AI Inference Server 3.2.2 (CUDA)
    • Red Hat AI Inference Server 3.2 registry.redhat.io/rhaiis/vllm-cuda-rhel9
  • RHSA-2025:21704 Released 2025-11-18 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.20 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.20 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/mcg-core-rhel9 +19
  • RHSA-2025:9562 Released 2025-10-21 · Red Hat rating Important
    OpenShift Container Platform 4.20.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.20 registry.redhat.io/openshift4/oc-mirror-plugin-rhel9, registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9 +8
  • RHSA-2025:16160 Released 2025-09-25 · Red Hat rating Important
    OpenShift Container Platform 4.15.58 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9
  • RHSA-2025:16165 Released 2025-09-25 · Red Hat rating Important
    OpenShift Container Platform 4.14.57 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel8
  • RHSA-2025:14820 Released 2025-09-04 · Red Hat rating Important
    OpenShift Container Platform 4.18.23 bug fix and security update
    • Red Hat OpenShift Container Platform 4.18 registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9
  • RHSA-2025:14859 Released 2025-09-04 · Red Hat rating Important
    OpenShift Container Platform 4.16.47 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9, registry.redhat.io/openshift4/ose-multus-admission-controller-rhel9, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9
  • RHSA-2025:14060 Released 2025-08-27 · Red Hat rating Important
    OpenShift Container Platform 4.17.38 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 registry.redhat.io/openshift4/ose-agent-installer-api-server-rhel9, registry.redhat.io/openshift4/ose-agent-installer-node-agent-rhel9, registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9 +2
  • RHSA-2025:13848 Released 2025-08-19 · Red Hat rating Important
    OpenShift Container Platform 4.19.9 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 registry.redhat.io/openshift4/ose-ibmcloud-cluster-api-controllers-rhel9, registry.redhat.io/openshift4/ose-network-metrics-daemon-rhel9
  • RHSA-2025:14048 Released 2025-08-18 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 10.19.0 product release
    • Red Hat OpenShift for Windows Containers 10.19 registry.redhat.io/openshift4-wincw/windows-machine-config-operator-bundle
  • RHSA-2025:11396 Released 2025-07-18 · Red Hat rating Important
    OpenShift API for Data Protection (OADP) 1.4.5 security and bug fix update
    • 9Base-OADP-1.4 oadp/oadp-kubevirt-velero-plugin-rhel9, oadp/oadp-mustgather-rhel9, oadp/oadp-rhel9-operator +5
  • RHSA-2024:11038 Released 2025-06-17 · Red Hat rating Important
    OpenShift Container Platform 4.19.0 bug fix and security update
    • Red Hat OpenShift Container Platform 4.19 openshift4/ose-aws-ebs-csi-driver-rhel9, openshift4/ose-azure-disk-csi-driver-rhel9, openshift4/ose-azure-file-csi-driver-rhel9 +14
  • RHSA-2024:11037 Released 2025-06-17 · Red Hat rating Important
    OpenShift Container Platform 4.19.0 security and extras update
    • Red Hat OpenShift Container Platform 4.19 openshift4/ose-aws-efs-csi-driver-container-rhel9, openshift4/ose-gcp-filestore-csi-driver-rhel9, openshift4/ose-local-storage-diskmaker-rhel9 +3
  • RHSA-2025:9136 Released 2025-06-16 · Red Hat rating Moderate
    Red Hat OpenShift for Windows Containers 10.16.2 product release
    • OpenShift Windows Machine Config Operator 10.16 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2025:8704 Released 2025-06-09 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 10.17.1 product release
    • OpenShift Windows Machine Config Operator 10.17 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2025:8274 Released 2025-05-28 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.14.4 security update
    • Red Hat OpenShift GitOps 1.14 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9 +7
  • RHSA-2025:8244 Released 2025-05-28 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.21.0 release
    • Red Hat OpenShift Dev Spaces 3 devspaces-tech-preview/idea-rhel9, devspaces-tech-preview/jetbrains-ide-rhel9, devspaces/code-rhel9 +11
  • RHSA-2025:8224 Released 2025-05-27 · Red Hat rating Important
    Red Hat OpenShift for Windows Containers 10.18.1 product release
    • OpenShift Windows Machine Config Operator 10.18 registry.redhat.io/openshift4-wincw/windows-machine-config-rhel9-operator
  • RHSA-2025:7702 Released 2025-05-21 · Red Hat rating Important
    OpenShift Container Platform 4.14.52 bug fix and security update
    • Red Hat OpenShift Container Platform 4.14 openshift4/ose-agent-installer-node-agent-rhel9, openshift4/ose-agent-installer-orchestrator-rhel8, openshift4/ose-hypershift-rhel8 +1
  • RHSA-2025:7698 Released 2025-05-21 · Red Hat rating Important
    OpenShift Container Platform 4.15.51 bug fix and security update
    • Red Hat OpenShift Container Platform 4.15 openshift4/ose-hypershift-rhel9
  • RHSA-2025:7753 Released 2025-05-15 · Red Hat rating Important
    Errata Advisory for Red Hat OpenShift GitOps v1.15.2 security update
    • Red Hat OpenShift GitOps 1.15 openshift-gitops-1/argo-rollouts-rhel8, openshift-gitops-1/argocd-extensions-rhel8, openshift-gitops-1/argocd-rhel8 +7
  • RHSA-2025:4731 Released 2025-05-15 · Red Hat rating Important
    OpenShift Container Platform 4.16.40 bug fix and security update
    • Red Hat OpenShift Container Platform 4.16 openshift4/driver-toolkit-rhel9, openshift4/network-tools-rhel9, openshift4/openshift-route-controller-manager-rhel9 +30
  • RHSA-2025:7462 Released 2025-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 10) podman-6:5.4.0-9.el10_0, podman-docker-6:5.4.0-9.el10_0, podman-remote-6:5.4.0-9.el10_0
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) podman-tests-6:5.4.0-9.el10_0
  • RHSA-2025:7484 Released 2025-05-13 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream (v. 10) gvisor-tap-vsock-6:0.8.5-1.el10_0, gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el10_0
  • RHSA-2025:7416 Released 2025-05-13 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream (v. 9) gvisor-tap-vsock-6:0.8.5-1.el9_6, gvisor-tap-vsock-gvforwarder-6:0.8.5-1.el9_6
  • RHSA-2025:7391 Released 2025-05-13 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-5:5.4.0-9.el9_6, podman-docker-5:5.4.0-9.el9_6, podman-plugins-5:5.4.0-9.el9_6 +2
  • RHSA-2025:4666 Released 2025-05-07 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.11.7 container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9 rhacm2/acm-grafana-rhel9, rhacm2/acm-prometheus-config-reloader-rhel9, rhacm2/acm-prometheus-rhel9 +16
  • RHSA-2025:4511 Released 2025-05-06 · Red Hat rating Important
    RHODF-4.18-RHEL-9 security update
    • RHODF 4.18 for RHEL 9 odf4/cephcsi-rhel9, odf4/mcg-rhel9-operator, odf4/ocs-client-console-rhel9 +7
  • RHSA-2025:4502 Released 2025-05-06 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.10.8 container updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9 rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9, rhacm2/acm-governance-policy-framework-addon-rhel9 +41
  • RHSA-2025:4188 Released 2025-04-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.2
    • Builds for Red Hat OpenShift 1.2.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +3
  • RHSA-2025:4171 Released 2025-04-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.3
    • Builds for Red Hat OpenShift 1.3.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +3
  • RHSA-2025:4012 Released 2025-04-23 · Red Hat rating Important
    OpenShift Container Platform 4.17.26 bug fix and security update
    • Red Hat OpenShift Container Platform 4.17 openshift4/ose-agent-installer-orchestrator-rhel9, openshift4/ose-hypershift-rhel9, openshift4/ose-ibm-vpc-block-csi-driver-rhel9 +2
  • RHSA-2025:4002 Released 2025-04-17 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.12.3 container image updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/acm-cli-rhel9, rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-governance-policy-addon-controller-rhel9 +43
  • RHSA-2025:3959 Released 2025-04-16 · Red Hat rating Important
    VolSync 0.11.2 security fixes and enhancements for RHEL 9
    • Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
  • RHSA-2025:3932 Released 2025-04-16 · Red Hat rating Important
    Red Hat OpenShift Dev Spaces 3.20.0 release
    • Red Hat OpenShift Dev Spaces 3 devspaces/devspaces-rhel9-operator, devspaces/pluginregistry-rhel9
  • RHSA-2025:3863 Released 2025-04-14 · Red Hat rating Important
    Red Hat multicluster global hub 1.3.3 bug fixes and container update
    • multicluster-globalhub 1.3 for RHEL 9 multicluster-globalhub/multicluster-globalhub-agent-rhel9, multicluster-globalhub/multicluster-globalhub-grafana-rhel9, multicluster-globalhub/multicluster-globalhub-kessel-inventory-api-rhel9 +4
  • RHSA-2025:3833 Released 2025-04-14 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream (v. 9) gvisor-tap-vsock-6:0.8.5-1.el9_5
  • RHSA-2025:3820 Released 2025-04-10 · Red Hat rating Important
    RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/cosign-rhel9, registry.redhat.io/rhtas/gitsign-rhel9
  • RHSA-2025:3814 Released 2025-04-10 · Red Hat rating Important
    RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/rekor-backfill-redis-rhel9, registry.redhat.io/rhtas/rekor-cli-rhel9, registry.redhat.io/rhtas/rekor-server-rhel9
  • RHSA-2025:3813 Released 2025-04-10 · Red Hat rating Important
    RHTAS 1.1.2 - Red Hat Trusted Artifact Signer Release
    • Red Hat Trusted Artifact Signer 1.1 registry.redhat.io/rhtas/timestamp-authority-rhel9
  • RHSA-2025:3763 Released 2025-04-09 · Red Hat rating Important
    Red Hat Advanced Cluster Management 2.13.2 container image updates
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 rhacm2/acm-cli-rhel9, rhacm2/acm-cluster-permission-rhel9, rhacm2/acm-flightctl-api-rhel9 +47
  • RHSA-2025:3685 Released 2025-04-08 · Red Hat rating Important
    Red Hat Edge Manager Version 0.5.1 (Technology Preview) security fixes
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8 flightctl-0.5.1-2.el8fc, flightctl-selinux-0.5.1-2.el8fc
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 flightctl-0.5.1-2.el9fc, flightctl-agent-0.5.1-2.el9fc, flightctl-selinux-0.5.1-2.el9fc
  • RHSA-2025:3498 Released 2025-04-01 · Red Hat rating Important
    Red Hat multicluster global hub 1.2.2 bug fixes and container update
    • multicluster-globalhub 1.2 for RHEL 9 multicluster-globalhub/multicluster-globalhub-agent-rhel9, multicluster-globalhub/multicluster-globalhub-grafana-rhel9, multicluster-globalhub/multicluster-globalhub-manager-rhel9 +3
  • RHSA-2025:3439 Released 2025-04-01 · Red Hat rating Important
    ACS 4.6 enhancement and security update
    • RHACS 4.6 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
  • RHSA-2025:3437 Released 2025-04-01 · Red Hat rating Important
    ACS 4.5 enhancement and security update
    • RHACS 4.5 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-collector-slim-rhel8 +10
  • RHSA-2025:3438 Released 2025-04-01 · Red Hat rating Important
    ACS 4.7 enhancement and security update
    • RHACS 4.7 for RHEL 8 advanced-cluster-security/rhacs-central-db-rhel8, advanced-cluster-security/rhacs-collector-rhel8, advanced-cluster-security/rhacs-main-rhel8 +9
  • RHSA-2025:3336 Released 2025-03-27 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream (v. 9) podman-4:5.2.2-15.el9_5, podman-docker-4:5.2.2-15.el9_5, podman-plugins-4:5.2.2-15.el9_5 +2
  • RHSA-2025:3268 Released 2025-03-26 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream EUS (v.8.8) aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.aarch64::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.ppc64le::container-tools:rhel8, aardvark-dns-2:1.5.0-2.module+el8.8.0+22334+bb93e398.s390x::container-tools:rhel8 +47
  • RHSA-2025:3266 Released 2025-03-26 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8, buildah-tests-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +40
    • Red Hat Enterprise Linux AppStream E4S (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.ppc64le::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.4) buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.src::container-tools:rhel8, buildah-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8, buildah-tests-1.21.4-4.module+el8.4.0+22947+c10a58d6.x86_64::container-tools:rhel8 +40
  • RHSA-2025:3210 Released 2025-03-26 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream (v. 8) aardvark-dns-2:1.10.1-2.module+el8.10.0+22931+799fd806.aarch64::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22931+799fd806.ppc64le::container-tools:rhel8, aardvark-dns-2:1.10.1-2.module+el8.10.0+22931+799fd806.s390x::container-tools:rhel8 +47
  • RHSA-2025:3186 Released 2025-03-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) podman-4:4.9.4-18.el9_4, podman-docker-4:4.9.4-18.el9_4, podman-plugins-4:4.9.4-18.el9_4 +2
  • RHSA-2025:3185 Released 2025-03-25 · Red Hat rating Important
    gvisor-tap-vsock security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) gvisor-tap-vsock-6:0.7.3-5.el9_4.1
  • RHSA-2025:3184 Released 2025-03-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.2) podman-2:4.4.1-22.el9_2.1, podman-docker-2:4.4.1-22.el9_2.1, podman-gvproxy-2:4.4.1-22.el9_2.1 +3
  • RHSA-2025:3172 Released 2025-03-25 · Red Hat rating Important
    VolSync 0.12.1 security fixes and enhancements for RHEL 9
    • Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9 rhacm2/volsync-operator-bundle, rhacm2/volsync-rhel9
  • RHSA-2025:3175 Released 2025-03-25 · Red Hat rating Important
    container-tools:rhel8 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.aarch64::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.ppc64le::container-tools:rhel8, aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.s390x::container-tools:rhel8 +47
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) aardvark-dns-2:1.0.1-40.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.src::container-tools:rhel8, buildah-1:1.26.9-2.module+el8.6.0+22769+fa0fe772.x86_64::container-tools:rhel8 +47
  • RHSA-2025:3165 Released 2025-03-25 · Red Hat rating Important
    podman security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) podman-2:4.2.0-6.el9_0.3, podman-catatonit-2:4.2.0-6.el9_0.3, podman-docker-2:4.2.0-6.el9_0.3 +4
  • RHSA-2025:3053 Released 2025-03-20 · Red Hat rating Important
    Gatekeeper v3.15.4
    • gatekeeper 3.15 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2025:3052 Released 2025-03-20 · Red Hat rating Important
    Gatekeeper v3.18.0
    • gatekeeper 3.18 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator
  • RHSA-2025:3051 Released 2025-03-20 · Red Hat rating Important
    Gatekeeper v3.17.2
    • gatekeeper 3.17 for RHEL 9 gatekeeper/gatekeeper-operator-bundle, gatekeeper/gatekeeper-rhel9, gatekeeper/gatekeeper-rhel9-operator

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Assisted Installer for Red Hat OpenShift Container Platform 2AffectedNo fix yet
Multicluster Engine for KubernetesAffectedNo fix yet
OpenShift Developer Tools and ServicesAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
OpenShift ServerlessAffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Ceph Storage 8AffectedNo fix yet: Fix deferred
Red Hat Ceph Storage 9AffectedNo fix yet: Fix deferred
Red Hat Edge Manager previewAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Dev SpacesAffectedNo fix yet
Red Hat OpenShift on AWSAffectedNo fix yet
Red Hat Openshift Sandboxed ContainersAffectedNo fix yet
Red Hat Storage 3AffectedNo fix yet
cert-manager Operator for Red Hat OpenShiftAffectedNo fix yet
9Base-OADP-1.4Fixed RHSA-2025:11396
Builds for Red Hat OpenShift 1.2.2Fixed RHSA-2025:4188
Builds for Red Hat OpenShift 1.3.2Fixed RHSA-2025:4171
CNV 4.14 for RHEL 9Fixed—
CNV 4.16 for RHEL 9Fixed—
CNV 4.17 for RHEL 9Fixed—
CNV 4.18 for RHEL 9Fixed—
OpenShift Windows Machine Config Operator 10.16Fixed RHSA-2025:9136
OpenShift Windows Machine Config Operator 10.17Fixed RHSA-2025:8704
OpenShift Windows Machine Config Operator 10.18Fixed RHSA-2025:8224
Quay v3Fixed—
RHACS 4.5 for RHEL 8Fixed RHSA-2025:3437
RHACS 4.6 for RHEL 8Fixed RHSA-2025:3439
RHACS 4.7 for RHEL 8Fixed RHSA-2025:3438
RHODF 4.18 for RHEL 9Fixed RHSA-2025:4511
Red Hat AI Inference Server 3.2Fixed RHSA-2025:23078, RHSA-2025:23079, RHSA-2025:23080, RHSA-2025:23202, RHSA-2025:23204, RHSA-2025:23205, RHSA-2025:23209, RHSA-2025:23449, RHSA-2026:3461, RHSA-2026:3462
Red Hat Advanced Cluster Management for Kubernetes 2.10 for RHEL 9Fixed RHSA-2025:4502
Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9Fixed RHSA-2025:4666
Red Hat Advanced Cluster Management for Kubernetes 2.12 for RHEL 9Fixed RHSA-2025:3959, RHSA-2025:4002
Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 8Fixed RHSA-2025:3685
Red Hat Advanced Cluster Management for Kubernetes 2.13 for RHEL 9Fixed RHSA-2025:3172, RHSA-2025:3685, RHSA-2025:3763
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2025:7462, RHSA-2025:7484
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2025:3210
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:3336, RHSA-2025:3833, RHSA-2025:7391, RHSA-2025:7416
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2025:3266
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2025:3175
Red Hat Enterprise Linux AppStream E4S (v.8.4)Fixed RHSA-2025:3266
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2025:3175
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:3165
Red Hat Enterprise Linux AppStream EUS (v.8.8)Fixed RHSA-2025:3268
Red Hat Enterprise Linux AppStream EUS (v.9.2)Fixed RHSA-2025:3184
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:3185, RHSA-2025:3186
Red Hat Enterprise Linux AppStream TUS (v.8.4)Fixed RHSA-2025:3266
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2025:3175
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2025:7462
Red Hat OpenShift Container Platform 4.14Fixed RHSA-2025:16165, RHSA-2025:7702
Red Hat OpenShift Container Platform 4.15Fixed RHSA-2025:16160, RHSA-2025:7698
Red Hat OpenShift Container Platform 4.16Fixed RHSA-2025:14859, RHSA-2025:4731
Red Hat OpenShift Container Platform 4.17Fixed RHSA-2025:14060, RHSA-2025:4012
Red Hat OpenShift Container Platform 4.18Fixed RHSA-2025:14820
Red Hat OpenShift Container Platform 4.19Fixed RHSA-2024:11037, RHSA-2024:11038, RHSA-2025:13848
Red Hat OpenShift Container Platform 4.20Fixed RHSA-2025:9562
Red Hat OpenShift Dev Spaces 3Fixed RHSA-2025:3932, RHSA-2025:8244
Red Hat OpenShift GitOps 1.14Fixed RHSA-2025:8274
Red Hat OpenShift GitOps 1.15Fixed RHSA-2025:7753
Red Hat OpenShift Pipelines 1.15Fixed RHSA-2026:3718
Red Hat OpenShift for Windows Containers 10.19Fixed RHSA-2025:14048
Red Hat Openshift Data Foundation 4.20Fixed RHSA-2025:21704
Red Hat Trusted Artifact Signer 1.1Fixed RHSA-2025:3813, RHSA-2025:3814, RHSA-2025:3820
gatekeeper 3.15 for RHEL 9Fixed RHSA-2025:3053
gatekeeper 3.17 for RHEL 9Fixed RHSA-2025:3051
gatekeeper 3.18 for RHEL 9Fixed RHSA-2025:3052
multicluster-globalhub 1.2 for RHEL 9Fixed RHSA-2025:3498
multicluster-globalhub 1.3 for RHEL 9Fixed RHSA-2025:3863
Not affected: 34 products
  • 9Base-OADP-1.4
  • Builds for Red Hat OpenShift 1.2.2
  • Builds for Red Hat OpenShift 1.3.2
  • Cryostat 4
  • OpenShift Developer Tools and Services
  • OpenShift Serverless
  • OpenShift Windows Machine Config Operator 10.16
  • OpenShift Windows Machine Config Operator 10.17
  • OpenShift Windows Machine Config Operator 10.18
  • RHODF 4.18 for RHEL 9
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 for RHEL 9
  • Red Hat Edge Manager preview
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 4.14
  • Red Hat OpenShift Container Platform 4.15
  • Red Hat OpenShift Container Platform 4.16
  • Red Hat OpenShift Container Platform 4.17
  • Red Hat OpenShift Container Platform 4.18
  • Red Hat OpenShift Container Platform 4.19
  • Red Hat OpenShift Container Platform 4.20
  • Red Hat OpenShift Dev Spaces 3
  • Red Hat OpenShift Pipelines 1.15
  • Red Hat OpenShift Virtualization 4
  • Red Hat OpenShift for Windows Containers 10.19
  • Red Hat OpenStack Platform 16.2
  • Red Hat OpenStack Platform 17.1
  • Red Hat OpenStack Platform 18.0
  • Red Hat Openshift Data Foundation 4.20
  • Red Hat Trusted Artifact Signer
  • Red Hat Trusted Artifact Signer 1.1
  • cert-manager Operator for Red Hat OpenShift

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-22869
  2. 2026-10-03 Alias added: GHSA-hcg3-q754-cr77
  3. 2026-10-09 Affected versions changed · Red Hat
  4. 2026-10-13 Fix available: Red Hat OpenShift for Windows Containers 10.19 · Red Hat
  5. 2026-10-30 Fix available: CNV 4.14 for RHEL 9, CNV 4.16 for RHEL 9, CNV 4.17 for RHEL 9 +1 · Red Hat
  6. 2026-11-04 Fix available: RHSA-2025:4002 · Red Hat
  7. 2026-11-04 Fix available: RHSA-2025:4188 · Red Hat
  8. 2026-11-04 Fix available: RHSA-2025:4502 · Red Hat
  9. 2026-11-04 Fix available: RHSA-2025:7698 · Red Hat
  10. 2026-11-04 Fix available: RHSA-2025:7702 · Red Hat
  11. 2026-11-04 Fix available: RHSA-2025:8224 · Red Hat

References

Patch 2

Advisory 3

Other 4

  • TI-2020-00578 Improper certificate validation in Microsoft Windows KEVCVSS 3.1HIGH 8.1
  • TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
  • TI-2023-24278 HTTP/2 CONTINUATION flood in net/http CVSS 3.1HIGH 7.5
  • TI-2018-05208 The "go get" implementation in Go 1.9.4, when the -insecure command-line option is used… CVSS 3.1HIGH 8.8
  • TI-2024-16309 Panic when parsing invalid palette-color images in golang.org/x/image CVSS 3.1HIGH 7.5
  • TI-2022-20112 Request smuggling due to improper request handling in golang.org/x/net/http2/h2c CVSS 3.1HIGH 7.5
See all 297 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences