CVE-2025-6395: Gnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-07-10 · updated 2026-09-01
Weakness: CWE-476

Description

A NULL pointer dereference flaw was found in the GnuTLS software in _gnutls_figure_common_ciphersuite().

Affected products

Red Hat OpenShift Container Platform 4.18: all versions
Red Hat Ceph Storage 7: all versions — fixed in 7
Red Hat Discovery 2: all versions — fixed in 2.3.0-1760554384
Red Hat Enterprise Linux 10: all versions — fixed in 0:3.8.9-9.el10_0.14
Red Hat Enterprise Linux 8: all versions — fixed in 0:3.6.16-8.el8_10.4
Red Hat Enterprise Linux 9: all versions — fixed in 0:3.8.3-6.el9_6.2
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:3.7.6-21.el9_2.4
Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 0:3.8.3-4.el9_4.4
Red Hat Insights proxy 1.5: all versions — fixed in 1.5.7-1759331989

How to fix

Upgrade to a fixed version: Red Hat Ceph Storage 7 7; Red Hat Discovery 2 2.3.0-1760554384; Red Hat Enterprise Linux 10 0:3.8.9-9.el10_0.14; Red Hat Enterprise Linux 8 0:3.6.16-8.el8_10.4; Red Hat Enterprise Linux 9 0:3.8.3-6.el9_6.2; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:3.7.6-21.el9_2.4; Red Hat Enterprise Linux 9.4 Extended Update Support 0:3.8.3-4.el9_4.4; Red Hat Insights proxy 1.5 1.5.7-1759331989. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-6395 or the next vulnerability affects your stack