{ "document": { "aggregate_severity": { "text": "Medium" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "TuxCare License Agreement", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Cloud Linux Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://tuxcare.com/contact/", "name": "TuxCare", "namespace": "https://tuxcare.com/" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.tuxcare.com/csaf/v2/els_os/centos-stream8els/vex/2025/cve-2025-4598-els_os-centos-stream8els.json" } ], "tracking": { "current_release_date": "2026-07-28T14:15:47Z", "generator": { "date": "2026-07-28T14:15:47Z", "engine": { "name": "pyCSAF" } }, "id": "CVE-2025-4598-ELS_OS-CENTOS-STREAM8ELS", "initial_release_date": "2025-05-30T14:15:00Z", "revision_history": [ { "date": "2025-05-30T14:15:00Z", "number": "1", "summary": "Initial version" }, { "date": "2026-07-28T01:26:57Z", "number": "2", "summary": "Official Publication" }, { "date": "2026-07-28T14:15:47Z", "number": "3", "summary": "Update document" } ], "status": "final", "version": "3" }, "title": "Security update on CVE-2025-4598" }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Community Enterprise Operating System 8", "product": { "name": "Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8", "product_identification_helper": { "cpe": "cpe:2.3:o:centos:centos:8:*:*:*:*:*:*:*" } } } ], "category": "product_family", "name": "Community Enterprise Operating System" }, { "branches": [ { "category": "product_version", "name": "systemd-pam-0:239-82.el8.1.x86_64", "product": { "name": "systemd-pam-0:239-82.el8.1.x86_64", "product_id": "systemd-pam-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-pam@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-libs-0:239-82.el8.1.x86_64", "product": { "name": "systemd-libs-0:239-82.el8.1.x86_64", "product_id": "systemd-libs-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-libs@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-container-0:239-82.el8.1.x86_64", "product": { "name": "systemd-container-0:239-82.el8.1.x86_64", "product_id": "systemd-container-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-container@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-journal-remote-0:239-82.el8.1.x86_64", "product": { "name": "systemd-journal-remote-0:239-82.el8.1.x86_64", "product_id": "systemd-journal-remote-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-journal-remote@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-0:239-82.el8.1.x86_64", "product": { "name": "systemd-0:239-82.el8.1.x86_64", "product_id": "systemd-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-devel-0:239-82.el8.1.x86_64", "product": { "name": "systemd-devel-0:239-82.el8.1.x86_64", "product_id": "systemd-devel-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-devel@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-udev-0:239-82.el8.1.x86_64", "product": { "name": "systemd-udev-0:239-82.el8.1.x86_64", "product_id": "systemd-udev-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-udev@239-82.el8.1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-tests-0:239-82.el8.1.x86_64", "product": { "name": "systemd-tests-0:239-82.el8.1.x86_64", "product_id": "systemd-tests-0:239-82.el8.1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-tests@239-82.el8.1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "systemd-libs-0:239-82.el8.1.i686", "product": { "name": "systemd-libs-0:239-82.el8.1.i686", "product_id": "systemd-libs-0:239-82.el8.1.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-libs@239-82.el8.1?arch=i686" } } }, { "category": "product_version", "name": "systemd-container-0:239-82.el8.1.i686", "product": { "name": "systemd-container-0:239-82.el8.1.i686", "product_id": "systemd-container-0:239-82.el8.1.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-container@239-82.el8.1?arch=i686" } } }, { "category": "product_version", "name": "systemd-0:239-82.el8.1.i686", "product": { "name": "systemd-0:239-82.el8.1.i686", "product_id": "systemd-0:239-82.el8.1.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd@239-82.el8.1?arch=i686" } } }, { "category": "product_version", "name": "systemd-devel-0:239-82.el8.1.i686", "product": { "name": "systemd-devel-0:239-82.el8.1.i686", "product_id": "systemd-devel-0:239-82.el8.1.i686", "product_identification_helper": { "purl": "pkg:rpm/centos/systemd-devel@239-82.el8.1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "Red Hat, Inc." }, { "branches": [ { "branches": [ { "category": "product_version", "name": "systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-pam@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-libs@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-container@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-journal-remote@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-devel@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-udev@239-82.el8.1.tuxcare.els1?arch=x86_64" } } }, { "category": "product_version", "name": "systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "product": { "name": "systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "product_id": "systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-tests@239-82.el8.1.tuxcare.els1?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "product": { "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "product_id": "systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-libs@239-82.el8.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "product": { "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "product_id": "systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-container@239-82.el8.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "systemd-0:239-82.el8.1.tuxcare.els1.i686", "product": { "name": "systemd-0:239-82.el8.1.tuxcare.els1.i686", "product_id": "systemd-0:239-82.el8.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd@239-82.el8.1.tuxcare.els1?arch=i686" } } }, { "category": "product_version", "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "product": { "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "product_id": "systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "product_identification_helper": { "purl": "pkg:rpm/tuxcare/systemd-devel@239-82.el8.1.tuxcare.els1?arch=i686" } } } ], "category": "architecture", "name": "i686" } ], "category": "vendor", "name": "TuxCare" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-libs-0:239-82.el8.1.tuxcare.els1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.i686" }, "product_reference": "systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.i686" }, "product_reference": "systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:239-82.el8.1.tuxcare.els1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.i686" }, "product_reference": "systemd-0:239-82.el8.1.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-0:239-82.el8.1.tuxcare.els1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.i686" }, "product_reference": "systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64" }, "product_reference": "systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-pam-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-pam-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-libs-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-libs-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-libs-0:239-82.el8.1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.i686" }, "product_reference": "systemd-libs-0:239-82.el8.1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:239-82.el8.1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-container-0:239-82.el8.1.i686" }, "product_reference": "systemd-container-0:239-82.el8.1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-container-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-container-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-container-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-journal-remote-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-journal-remote-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:239-82.el8.1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-0:239-82.el8.1.i686" }, "product_reference": "systemd-0:239-82.el8.1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-devel-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-devel-0:239-82.el8.1.i686 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.i686" }, "product_reference": "systemd-devel-0:239-82.el8.1.i686", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-udev-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-udev-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" }, { "category": "default_component_of", "full_product_name": { "name": "systemd-tests-0:239-82.el8.1.x86_64 as a component of Community Enterprise Operating System 8", "product_id": "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.x86_64" }, "product_reference": "systemd-tests-0:239-82.el8.1.x86_64", "relates_to_product_reference": "CentOS-Stream-8" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-4598", "cwe": { "id": "CWE-364", "name": "Signal Handler Race Condition" }, "notes": [ { "category": "description", "text": "A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process.\nA SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.", "title": "Vulnerability description" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "CentOS-Stream-8:systemd-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://cve.tuxcare.com/els/cve/CVE-2025-4598" } ], "release_date": "2025-05-30T14:15:00Z", "remediations": [ { "category": "no_fix_planned", "date": "2026-07-28T12:32:27.540828Z", "details": "CVE-2025-4598 is a local-only, high‑complexity race that requires an existing unprivileged user to crash a SUID binary and precisely win a PID‑recycling window; the impact is limited to confidentiality with no integrity or availability effect. It is only relevant on hosts where systemd‑coredump is installed and actively handling dumps and where SUID core dumps are permitted; by default, SUID dumps are suppressed and stored core files are root‑only, so the attack window exists only under specific configurations. Given these stringent prerequisites and the fragile timing required, practical exploitability in centrally managed VM/server environments is very low, so this issue can be safely deprioritized.", "product_ids": [ "CentOS-Stream-8:systemd-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.x86_64" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "CentOS-Stream-8:systemd-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-container-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-devel-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-journal-remote-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.i686", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-libs-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-pam-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-tests-0:239-82.el8.1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.tuxcare.els1.x86_64", "CentOS-Stream-8:systemd-udev-0:239-82.el8.1.x86_64" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ] } ] }