CVE-2025-49796: Libxml: type confusion leads to denial of service (dos)

Severity: critical (CVSS 9.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-06-16 · updated 2026-10-08
Weakness: CWE-125

Description

A vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.

Affected products

Red Hat cert-manager operator for Red Hat OpenShift 1.16: all versions — fixed in v1.16.5-1760515757
Red Hat OpenShift Container Platform 4.18: all versions — fixed in 418.94.202510230424-0
Red Hat OpenShift File Integrity Operator - FIO 1: all versions — fixed in v1.3
Red Hat Discovery 2: all versions — fixed in 2.0.1-1754478727
Red Hat Enterprise Linux 10: all versions — fixed in 0:2.12.5-7.el10_0
Red Hat Enterprise Linux 7 Extended Lifecycle Support: all versions — fixed in 0:2.9.1-6.el7_9.10
Red Hat Enterprise Linux 8: all versions — fixed in 0:2.9.7-21.el8_10.1
Red Hat Enterprise Linux 8.2 Advanced Update Support: all versions — fixed in 0:2.9.7-9.el8_2.3
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: all versions — fixed in 0:2.9.7-9.el8_4.6
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: all versions — fixed in 0:2.9.7-9.el8_4.6
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: all versions — fixed in 0:2.9.7-13.el8_6.10
Red Hat Enterprise Linux 8.6 Telecommunications Update Service: all versions — fixed in 0:2.9.7-13.el8_6.10
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: all versions — fixed in 0:2.9.7-13.el8_6.10
Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 0:2.9.7-16.el8_8.9
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 0:2.9.7-16.el8_8.9
Red Hat Enterprise Linux 9: all versions — fixed in 0:2.9.13-10.el9_6
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions: all versions — fixed in 0:2.9.13-1.el9_0.5
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:2.9.13-3.el9_2.7
Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 0:2.9.13-10.el9_4
Red Hat Hardened Images: all versions — fixed in 2.15.2-0.3.hum1
Red Hat Insights proxy 1.5: all versions — fixed in 1.5.5-1754504343
Red Hat OpenShift Container Platform 4.12: all versions — fixed in 412.86.202510291903-0
Red Hat OpenShift Container Platform 4.13: all versions — fixed in 413.92.202510150118-0
Red Hat OpenShift Container Platform 4.14: all versions — fixed in 414.92.202510211419-0
Red Hat OpenShift Container Platform 4.15: all versions — fixed in 415.92.202609140326-0
Red Hat OpenShift Container Platform 4.16: all versions — fixed in 416.94.202609011112-0
Red Hat OpenShift Container Platform 4.17: all versions — fixed in 417.94.202510112152-0
Red Hat OpenShift Container Platform 4.19: all versions — fixed in 4.19.9.6.202510140714-0
Red Hat OpenShift Container Platform 4.20: all versions — fixed in 4.20.9.6.202509251656-0
Red Hat Web Terminal 1.11 on RHEL 9: all versions — fixed in 1.11-19, 1.11-8

How to fix

Upgrade to a fixed version: Red Hat cert-manager operator for Red Hat OpenShift 1.16 v1.16.5-1760515757; Red Hat OpenShift Container Platform 4.18 418.94.202510230424-0; Red Hat OpenShift File Integrity Operator - FIO 1 v1.3; Red Hat Discovery 2 2.0.1-1754478727; Red Hat Enterprise Linux 10 0:2.12.5-7.el10_0; Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:2.9.1-6.el7_9.10; Red Hat Enterprise Linux 8 0:2.9.7-21.el8_10.1; Red Hat Enterprise Linux 8.2 Advanced Update Support 0:2.9.7-9.el8_2.3; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:2.9.7-9.el8_4.6; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:2.9.7-9.el8_4.6; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:2.9.7-13.el8_6.10; Red Hat Enterprise Linux 8.6 Telecommunications Update Service 0:2.9.7-13.el8_6.10. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-49796 or the next vulnerability affects your stack