{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/debian10els/vex/2025/cve-2025-4598-els_os-debian10els.json" } ], "tracking": { "current_release_date": "2026-08-03T13:44:54Z", "generator": { "date": "2026-08-03T13:44:54Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-4598-ELS_OS-DEBIAN10ELS", "initial_release_date": "2025-05-30T14:15:00Z", "revision_history": [ { "date": "2025-05-30T14:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-08-01T22:29:01Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-08-03T13:44:54Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2025-4598" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Debian 10", "product": { "name": "Debian 10", "product_id": "Debian-10", "product_identification_helper": { "cpe": "cpe:2.3:o:debian:debian_linux:10:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Debian" }, { "branches": [ { "category": "product_version", "name": "udev-0:241-7~deb10u10.amd64", "product": { "name": "udev-0:241-7~deb10u10.amd64", "product_id": "udev-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/udev@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-0:241-7~deb10u10.amd64", "product": { "name": "systemd-0:241-7~deb10u10.amd64", "product_id": "systemd-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-tests-0:241-7~deb10u10.amd64", "product": { "name": "systemd-tests-0:241-7~deb10u10.amd64", "product_id": "systemd-tests-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd-tests@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-journal-remote-0:241-7~deb10u10.amd64", "product": { "name": "systemd-journal-remote-0:241-7~deb10u10.amd64", "product_id": "systemd-journal-remote-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd-journal-remote@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libnss-mymachines-0:241-7~deb10u10.amd64", "product": { "name": "libnss-mymachines-0:241-7~deb10u10.amd64", "product_id": "libnss-mymachines-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnss-mymachines@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libsystemd0-0:241-7~deb10u10.amd64", "product": { "name": "libsystemd0-0:241-7~deb10u10.amd64", "product_id": "libsystemd0-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libsystemd0@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-container-0:241-7~deb10u10.amd64", "product": { "name": "systemd-container-0:241-7~deb10u10.amd64", "product_id": "systemd-container-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd-container@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libnss-myhostname-0:241-7~deb10u10.amd64", "product": { "name": "libnss-myhostname-0:241-7~deb10u10.amd64", "product_id": "libnss-myhostname-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnss-myhostname@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libudev-dev-0:241-7~deb10u10.amd64", "product": { "name": "libudev-dev-0:241-7~deb10u10.amd64", "product_id": "libudev-dev-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libudev-dev@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libnss-systemd-0:241-7~deb10u10.amd64", "product": { "name": "libnss-systemd-0:241-7~deb10u10.amd64", "product_id": "libnss-systemd-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnss-systemd@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libpam-systemd-0:241-7~deb10u10.amd64", "product": { "name": "libpam-systemd-0:241-7~deb10u10.amd64", "product_id": "libpam-systemd-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libpam-systemd@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-sysv-0:241-7~deb10u10.amd64", "product": { "name": "systemd-sysv-0:241-7~deb10u10.amd64", "product_id": "systemd-sysv-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd-sysv@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libsystemd-dev-0:241-7~deb10u10.amd64", "product": { "name": "libsystemd-dev-0:241-7~deb10u10.amd64", "product_id": "libsystemd-dev-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libsystemd-dev@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "systemd-coredump-0:241-7~deb10u10.amd64", "product": { "name": "systemd-coredump-0:241-7~deb10u10.amd64", "product_id": "systemd-coredump-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/systemd-coredump@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libnss-resolve-0:241-7~deb10u10.amd64", "product": { "name": "libnss-resolve-0:241-7~deb10u10.amd64", "product_id": "libnss-resolve-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libnss-resolve@241-7~deb10u10?arch=amd64" } } }, { "category": "product_version", "name": "libudev1-0:241-7~deb10u10.amd64", "product": { "name": "libudev1-0:241-7~deb10u10.amd64", "product_id": "libudev1-0:241-7~deb10u10.amd64", "product_identification_helper": { "purl": "pkg:deb/debian/libudev1@241-7~deb10u10?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "Software in the Public Interest, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "udev-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "udev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "udev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/udev@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd-tests@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd-journal-remote@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnss-mymachines@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libsystemd0@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd-container@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnss-myhostname@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libudev-dev@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnss-systemd@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libpam-systemd@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd-sysv@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libsystemd-dev@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/systemd-coredump@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libnss-resolve@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } }, { "category": "product_version", "name": "libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "product": { "name": "libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "product_id": "libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "product_identification_helper": { "purl": "pkg:deb/tuxcare/libudev1@241-7~deb10u10%2Btuxcare.els1?arch=amd64" } } } ], "category": "architecture", "name": "amd64" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "udev-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:udev-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "udev-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libudev1-0:241-7~deb10u10+tuxcare.els1.amd64 as a component of Debian 10", "product_id": "Debian-10:libudev1-0:241-7~deb10u10+tuxcare.els1.amd64" }, "product_reference": "libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "udev-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:udev-0:241-7~deb10u10.amd64" }, "product_reference": "udev-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-tests-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-tests-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-tests-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-journal-remote-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-journal-remote-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-journal-remote-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-mymachines-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-mymachines-0:241-7~deb10u10.amd64" }, "product_reference": "libnss-mymachines-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd0-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libsystemd0-0:241-7~deb10u10.amd64" }, "product_reference": "libsystemd0-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-container-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-container-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-myhostname-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-myhostname-0:241-7~deb10u10.amd64" }, "product_reference": "libnss-myhostname-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libudev-dev-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libudev-dev-0:241-7~deb10u10.amd64" }, "product_reference": "libudev-dev-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-systemd-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-systemd-0:241-7~deb10u10.amd64" }, "product_reference": "libnss-systemd-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libpam-systemd-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libpam-systemd-0:241-7~deb10u10.amd64" }, "product_reference": "libpam-systemd-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-sysv-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-sysv-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-sysv-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libsystemd-dev-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libsystemd-dev-0:241-7~deb10u10.amd64" }, "product_reference": "libsystemd-dev-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-coredump-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:systemd-coredump-0:241-7~deb10u10.amd64" }, "product_reference": "systemd-coredump-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libnss-resolve-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libnss-resolve-0:241-7~deb10u10.amd64" }, "product_reference": "libnss-resolve-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" }, { "category": "default_component_of", "full_product_name": { "name": "libudev1-0:241-7~deb10u10.amd64 as a component of Debian 10", "product_id": "Debian-10:libudev1-0:241-7~deb10u10.amd64" }, "product_reference": "libudev1-0:241-7~deb10u10.amd64", "relates_to_product_reference": "Debian-10" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-4598", "cwe": { "id": "CWE-364", "name": "Signal Handler Race Condition" }, "notes": [ { "category": "description", "text": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\n\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "Debian-10:libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-myhostname-0:241-7~deb10u10.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10.amd64", "Debian-10:libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev1-0:241-7~deb10u10.amd64", "Debian-10:systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-0:241-7~deb10u10.amd64", "Debian-10:systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-container-0:241-7~deb10u10.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10.amd64", "Debian-10:udev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:udev-0:241-7~deb10u10.amd64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4598" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22660", "url": "https://access.redhat.com/errata/RHSA-2025:22660" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:22868", "url": "https://access.redhat.com/errata/RHSA-2025:22868" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:23227", "url": "https://access.redhat.com/errata/RHSA-2025:23227" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2025:23234", "url": "https://access.redhat.com/errata/RHSA-2025:23234" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:0414", "url": "https://access.redhat.com/errata/RHSA-2026:0414" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:1652", "url": "https://access.redhat.com/errata/RHSA-2026:1652" }, { "category": "external", "summary": "https://access.redhat.com/errata/RHSA-2026:18153", "url": "https://access.redhat.com/errata/RHSA-2026:18153" }, { "category": "external", "summary": "https://access.redhat.com/security/cve/CVE-2025-4598", "url": "https://access.redhat.com/security/cve/CVE-2025-4598" }, { "category": "external", "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2369242", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2369242" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2025/05/29/3", "url": "https://www.openwall.com/lists/oss-security/2025/05/29/3" }, { "category": "external", "summary": "http://seclists.org/fulldisclosure/2025/Jun/9", "url": "http://seclists.org/fulldisclosure/2025/Jun/9" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/06/05/1", "url": "http://www.openwall.com/lists/oss-security/2025/06/05/1" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/06/05/3", "url": "http://www.openwall.com/lists/oss-security/2025/06/05/3" }, { "category": "external", "summary": "http://www.openwall.com/lists/oss-security/2025/08/18/3", "url": "http://www.openwall.com/lists/oss-security/2025/08/18/3" }, { "category": "external", "summary": "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598", "url": "https://blogs.oracle.com/linux/post/analysis-of-cve-2025-4598" }, { "category": "external", "summary": "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/", "url": "https://ciq.com/blog/the-real-danger-of-systemd-coredump-cve-2025-4598/" }, { "category": "external", "summary": "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html", "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00022.html" }, { "category": "external", "summary": "https://www.openwall.com/lists/oss-security/2025/08/18/3", "url": "https://www.openwall.com/lists/oss-security/2025/08/18/3" }, { "category": "external", "summary": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html", "url": "https://cert-portal.siemens.com/productcert/html/ssa-082556.html" } ], "release_date": "2025-05-30T14:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-08-03T11:00:44.347875Z", "details": "CVE-2025-4598 is a local-only, high‑complexity race that requires an already‑present unprivileged user to precisely crash a SUID program and force PID reuse before systemd‑coredump inspects /proc, which is difficult and time‑consuming to pull off in practice. The vulnerability affects confidentiality only (no integrity or availability impact) and depends on core‑dump handling being active for the target process, limiting the practical blast radius on centrally managed servers/VMs. Given these constraints and the lack of privilege escalation or remote vector, this can be safely deprioritized relative to remotely exploitable or integrity‑impacting issues.", "product_ids": [ "Debian-10:libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-myhostname-0:241-7~deb10u10.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10.amd64", "Debian-10:libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev1-0:241-7~deb10u10.amd64", "Debian-10:systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-0:241-7~deb10u10.amd64", "Debian-10:systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-container-0:241-7~deb10u10.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10.amd64", "Debian-10:udev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:udev-0:241-7~deb10u10.amd64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "Debian-10:libnss-myhostname-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-myhostname-0:241-7~deb10u10.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-mymachines-0:241-7~deb10u10.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-resolve-0:241-7~deb10u10.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libnss-systemd-0:241-7~deb10u10.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libpam-systemd-0:241-7~deb10u10.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd-dev-0:241-7~deb10u10.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libsystemd0-0:241-7~deb10u10.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev-dev-0:241-7~deb10u10.amd64", "Debian-10:libudev1-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:libudev1-0:241-7~deb10u10.amd64", "Debian-10:systemd-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-0:241-7~deb10u10.amd64", "Debian-10:systemd-container-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-container-0:241-7~deb10u10.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-coredump-0:241-7~deb10u10.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-journal-remote-0:241-7~deb10u10.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-sysv-0:241-7~deb10u10.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:systemd-tests-0:241-7~deb10u10.amd64", "Debian-10:udev-0:241-7~deb10u10+tuxcare.els1.amd64", "Debian-10:udev-0:241-7~deb10u10.amd64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }