CVE-2025-32911 Use after free in Red Hat Enterprise Linux 10
A malicious HTTP client can trigger a use-after-free in libsoup, potentially causing memory corruption, crashes, or code execution in server applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-32911?
CVE-2025-32911 is a critical use after free vulnerability in Red Hat Enterprise Linux 10, published on 15 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A use-after-free type vulnerability was found in libsoup, in the soup_message_headers_get_content_disposition() function. This flaw allows a malicious HTTP client to cause memory corruption in the libsoup server.
Weakness: CWE-590
Which versions are affected by CVE-2025-32911?
How do I fix CVE-2025-32911?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2025-32911 being exploited?
There is no known exploitation of CVE-2025-32911 in the wild and no public exploit code.
Sources
Also known as AZL-60489, AZL-60547, DEBIAN-CVE-2025-32911, GHSA-fp4x-j6ch-w8q5, ROOT-OS-DEBIAN-12-CVE-2025-32911, UBUNTU-CVE-2025-32911.