RHSA-2025:23234MediumCVSS 6.2

Red Hat Security Advisory: Red Hat Ceph Storage

Published
December 16, 2025
Last Modified
September 8, 2026

🔗 CVE IDs covered (2)

CVE-2025-4598 →CVE-2025-9714 →

📋 Description

CVE-2025-4598 — systemd-coredump: race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump CVE-2025-9714 — libxslt: libxml2: Inifinite recursion at exsltDynMapFunction function in libexslt/dynamic.c

🎯 Affected products20

  • Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:2948da59e125936f88275352373396b5e8fe8552c2fccb4eef0122b329e8fd86_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:3248d1c8a0e5944e571be24d3aa0c188478fa7c8ce1049247e047c2bfbd0ce4a_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:422ff213185d6d7828217266262f78f32d7d4910783916e8ed1a203062cbcaeb_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/grafana-rhel9@sha256:e468d68b98ee628b68580ab65223a7b09c54e463cc07f030b087af64aa430f2e_arm64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:06442a924c3efff1c077ff316661ef4133f351f72ca60ccf1eeec45deacebede_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:10bb1bf6e58604488998652bf8a9ab81ed9373030bed5e95572145716e71e4a3_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/keepalived-rhel9@sha256:9ba6f61f42066f946b761360d08b8f8114d8bed87364c206f5ce4df63a03f592_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:7ba9953f452becf20f89c2782fb5bf408bc96219ace5764943b78e07963cabf0_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:ccaca0c393ff2ec3f4177fd5627fc55fbe1cb8706fbfc96b7bddb02de80a1ade_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-7-rhel9@sha256:cfaf2a3c9513bd280265b0e2ca5f7d60022a2e362027becfeb2c133179925523_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:1fda63e06ffffe25eae770f98f9db3a628627a81c7a830064ac8ac0256fe4d97_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:2aaf7260c5a04318f176fd0bbfb278f11ea0dae523a775ba596ca87096169771_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-haproxy-rhel9@sha256:d9d045f74a6602f6536642511880eb3819056412c9ec7195537d04ff2192ac99_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:36cc9fde56dd1fd380b5c9f5bdd4e837980eeeb26bbcc776b05be748e23bd2bf_ppc64le as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:59232f6b74da7b47602f8d800bdaff4019431e0672b848f382bf0b07c639dc0c_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/rhceph-promtail-rhel9@sha256:c746dede748b7fed2dc144b481a2338448fed9a885d2add3dd8c56bd81dc4930_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:1e41b14d3d94ba1f2a7b2350d31ce55fad9cba15fbc4addb2249029e5d05ad2d_amd64 as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:22549436a7705ad158bad40441d6d8fb29466fffd9efb2832febdeb4e5c21412_s390x as a component of Red Hat Ceph Storage 7
  • registry.redhat.io/rhceph/snmp-notifier-rhel9@sha256:f4efe2a624caaf3f01c5c1638158ade6dfc3bff384796a7b73a41fa6ce9e8976_ppc64le as a component of Red Hat Ceph Storage 7

✅ Remediation

The container images provided by this update can be downloaded from the Red Hat container registry at registry.redhat.io using the "podman pull" command. Workaround: This issue can be mitigated by disabling the capability of the system to generate a coredump for SUID binaries. The perform that, the following command can be ran as `root` user: ~~~ echo 0 > /proc/sys/fs/suid_dumpable ~~~ While this mitigates this vulnerability while it's not possible to update the systemd package, it disables the capability of analyzing crashes for such binaries. Workaround: The impact of this flaw may be reduced by setting strict resource limits to the stack size of processes at the operational system level. This can be achieved either through the 'ulimit' shell built-in or the 'limits.conf' file.

🔗 References (6)