Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Critical Denial of Service Vulnerability in Rocky Linux CVE-2025-52881

rocky
Calendar Grey December 18, 2025
Rockylinux Esm H88
An important security update for container-tools in Rocky Linux addresses critical risks of container escape and denial of service.
Important: container-tools:rhel8 security update

Summary

An update is available for module.crun, fuse-overlayfs, module.slirp4netns, python-podman, module.runc, container-selinux, module.podman, module.udica, module.aardvark-dns, module.fuse-overlayfs, cockpit-podman, aardvark-dns, module.conmon, containers-common, libslirp, criu, module.containers-common, crun, module.libslirp, module.containernetworking-plugins, netavark, udica, slirp4netns, skopeo, toolbox, buildah, module.cockpit-podman, oci-seccomp-bpf-hook, containernetworking-plugins, conmon, module.toolbox, module.netavark, runc, module.buildah, module.container-selinux, module.skopeo, podman, module.python-podman, module.oci-seccomp-bpf-hook, module.criu. This update affects Rocky Linux 8. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list


Topics%20covered

Topics Covered

security advisory denial of service important arbitrary write container-tools rocky linux

RPMs

aardvark-dns-2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9.src.rpm

aardvark-dns-2:1.10.1-2.module+el8.10.0+1880+8e896d1b.src.rpm

aardvark-dns-2:1.10.1-2.module+el8.10.0+1874+ce489889.src.rpm

aardvark-dns-2:1.10.1-2.module+el8.10.0+1896+b18fa106.src.rpm

aardvark-dns-2:1.10.1-2.module+el8.10.0+2001+6a33db9f.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1880+8e896d1b.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1896+b18fa106.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1815+5fe7415e.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1948+4b5cd4a9.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1825+623b0c20.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1872+2e18eb19.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1843+6892ab28.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+1874+ce489889.src.rpm

cockpit-podman-0:84.1-1.module+el8.10.0+2001+6a33db9f.src.rpm

conmon-3:2.1.10-1.module+el8.10.0+1874+ce489889.src.rpm

conmon-3:2.1.10-1.module+el8.10.0+1880+8e896d1b.src.rpm

Read the Full Advisory

References

No references

CVES

https://www.cve.org/CVERecord?id=CVE-2025-52881

Severity
important

Name: RLSA-2025:23543
Affected Products: Rocky Linux 8

Fixes

https://bugzilla.redhat.com/show_bug.cgi?id=2404715


Topics%20covered

Topics Covered

security advisory denial of service important arbitrary write container-tools rocky linux

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here