9.1
Critical
CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA
Description
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 8 8100020250918211722.823393 | earliest → < 8100020250918211722.823393f5 | 8100020250918211722.823393f5 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020250924104944.792 | earliest → < 8020020250924104944.792f4060 | 8020020250924104944.792f4060 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020250923175408.5 | earliest → < 8040020250923175408.5b01ab7e | 8040020250923175408.5b01ab7e |
| Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020250923175408.5 | earliest → < 8040020250923175408.5b01ab7e | 8040020250923175408.5b01ab7e |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020250916174421 | earliest → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020250916174421 | earliest → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020250916174421 | earliest → < 8060020250916174421.ada582f1 | 8060020250916174421.ada582f1 |
Show the 7 other branches Hide the 7 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020250918152850 | earliest → < 8080020250918152850.b0a6ceea | 8080020250918152850.b0a6ceea |
| Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020250918152850 | earliest → < 8080020250918152850.b0a6ceea | 8080020250918152850.b0a6ceea |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.4 Extended Update Support | Versions not published | |
| Red Hat Enterprise Linux 6 | Versions not published |
Other CVEs of Red Hat Enterprise Linux 10
The 1456 CVEs of Red Hat Enterprise Linux 10 →
CVE-2026-123876
Podman: containers-common: containers-common: default seccomp af_vsock/netlink_audit deny rules bypassable via 32-bit truncation
4.4
Medium
CVE-2026-120749
Dbus: dbus-daemon: dbus-daemon aborts (reply_serial != 0) when a broadcast from the driver cannot be delivered to a monitored bus
6.2
Medium
CVE-2026-123037
Ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of cve-2024-9902)
6.7
Medium
CVE-2026-123151
Gdb: gdb: stack buffer overflow in parse_tsv_definition via stale rs->buf tail
Not rated