This vulnerability in GnuTLS, used in Red Hat Enterprise Linux 10, involves inefficient algorithmic complexity that can be exploited by an attacker supplying malicious certificates with a large number of name constraints and SANs. This leads to excessive CPU and memory usage, resulting in a denial of service condition. The issue is documented under CVE-2025-14831 with a CVSS 3.1 base score of 5.3 (medium severity). Multiple Red Hat security advisories (e.g., RHSA-2026:13812 and others) provide patches and updated container images that include backported fixes for this vulnerability. The advisories recommend upgrading to these updated images to resolve the issue.

The vulnerability causes denial of service by consuming excessive CPU and memory resources during certificate verification in GnuTLS. This can degrade or disrupt services relying on GnuTLS for TLS operations on affected Red Hat Enterprise Linux 10 systems. There is no impact on confidentiality or integrity reported. No known exploits in the wild have been documented.

Red Hat has released official security advisories with updated container images that include patches for CVE-2025-14831. Users of Red Hat Enterprise Linux 10 and related container images should upgrade to the updated images provided by Red Hat Container Registry as per the advisories (e.g., RHSA-2026:13812). Rebuilding dependent container images to incorporate these fixes is also recommended. Patch status is confirmed as fixed in these updated images. No additional mitigation actions are indicated by the vendor.