CVE-2025-45984.7MediumCWE-364

CVE-2025-4598: Systemd-coredump: race condition that allows a local attacker to crash a suid program and gain read access to the resulting core dump

Red Hat · Red Hat Enterprise Linux 10

Vendor fix available · Affected: Red Hat Enterprise Linux 10 · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.3%probability of exploitation in the next 30 days

70th percentile

050100

Higher than 70% of scored CVEs

4.7MediumCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process. A SUID binary or process has a special type of permission, which allows the process to run with the file owner's permissions, regardless of the user executing the binary. This allows the process to access more restricted data than unprivileged users or processes would be able to. An attacker can leverage this flaw by forcing a SUID process to crash and force the Linux kernel to recycle the process PID before systemd-coredump can analyze the /proc/pid/auxv file. If the attacker wins the race condition, they gain access to the original's SUID process coredump file. They can read sensitive content loaded into memory by the original binary, affecting data confidentiality.

Affected products19

From the CVE record. A product or version that is not listed is unknown, not unaffected.

systemd-coredumpbefore 252.37; from 253.0 before 253.32; from 254.0 before 254.25; from 255.0 before 255.19; from 256.0 before 256.14; from 257.0 before 257.6
Red Hat · Red Hat Enterprise Linux 10Versions not stated
Red Hat · Red Hat Enterprise Linux 9Versions not stated
Red Hat · Red Hat Enterprise Linux 9Versions not stated
Red Hat · Red Hat Ceph Storage 7Versions not stated
Red Hat · Red Hat Ceph Storage 8Versions not stated
Red Hat · Red Hat Ceph Storage 8Versions not stated
Red Hat · Red Hat Discovery 2Versions not stated
Red Hat · Red Hat Discovery 2Versions not stated
Red Hat · Red Hat Insights proxy 1.5Versions not stated
Red Hat · Red Hat Enterprise Linux 10Versions not stated
Red Hat · Red Hat Enterprise Linux 10Versions not stated
Red Hat · Red Hat Enterprise Linux 7Versions not stated
Red Hat · Red Hat Enterprise Linux 7Versions not stated
Red Hat · Red Hat Enterprise Linux 8Versions not stated
Red Hat · Red Hat Enterprise Linux 9Versions not stated
Red Hat · Red Hat OpenShift Container Platform 4Versions not stated
Red Hat · Red Hat OpenShift Container Platform 4Versions not stated
Red Hat · Red Hat OpenShift Container Platform 4Versions not stated

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Signal Handler Race Condition · Race Conditions
Vendor: Red Hat
Published: May 2025
Band: Possible (1 to 10%), May 2025

CoverageNo articles yet

No CyberSIXT article names CVE-2025-4598 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

7 more references are in the CVE record.