Skip to main content
EPSS 0.2%top 93%

CVE-2025-57848: Incorrect Default Permissions in Red Hat RHEL-8-CNV-4.12

0
Medium
Published: 10/23/2025 (10/23/2025, 20:10:31 UTC)
Source: GCVE Database
Vendor/Project: Red Hat
Product: RHEL-8-CNV-4.12

Description

Red Hat has released OpenShift Virtualization 4.14.16 images as a product enhancement advisory. This update includes bug fixes and enhancements but does not list any specific fixes for CVE-2025-57848 or other vulnerabilities. The advisory does not provide details on the nature of CVE-2025-57848 beyond its association with CWE-276 (Incorrect Default Permissions). No active exploits are known in the wild. No affected versions are explicitly stated in the advisory.

CVSS v3.1

Score 6.4medium

Attack Vector
Local
Attack Complexity
High
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected software

Affected versions
Red HatOpenShift VirtualizationCNV 4.19 for RHEL 9arm64container-native-virtualization/aaq-controller-rhel9@sha256:ca980ef4328f94464753d0071491e26def185a98985a83ae9abed34e8f94c31b_arm64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 08/06/2026, 18:46:58 UTC

Technical Analysis

The advisory announces the availability of OpenShift Virtualization 4.14.16 images, which include updates to packages and images that fix several bugs and add enhancements. CVE-2025-57848 is referenced but no specific details or fixes are described for this CVE in the advisory. The vulnerability is associated with CWE-276, indicating an issue related to incorrect default permissions. The advisory does not specify affected versions or remediation details for this CVE. No known exploits are reported.

Potential Impact

The impact is considered low severity as per the advisory metadata. The vulnerability relates to incorrect default permissions, which could potentially lead to unauthorized access or privilege escalation if exploited. However, no active exploitation is known, and the advisory does not describe any direct impact scenarios or consequences.

Mitigation Recommendations

The advisory is a product enhancement release containing updated images. Users should apply the OpenShift Virtualization 4.14.16 update after ensuring all previously released errata relevant to their system have been applied. No specific patch or fix details for CVE-2025-57848 are provided, so users should follow Red Hat's standard update procedures. Patch status is not explicitly confirmed for this CVE; check the vendor advisory for the latest remediation guidance.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHEA-2026:0511
Cve Count
1

Threat ID: 6a74cf98bf8831d5391afcba

Added to database: 08/06/2026, 18:16:56 UTC

Last enriched: 08/06/2026, 18:46:58 UTC

Last updated: 09/22/2026, 13:47:41 UTC

Views: 39

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

PRO

Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses