Red Hat Security Advisory: ACS 4.7 enhancement and security update
This release of RHACS 4.7.1 addresses the following security vulnerabilities: - CVE-2025-22869 - CVE-2025-27144
AI Analysis
Technical Summary
This security advisory from Red Hat addresses two vulnerabilities (CVE-2025-22869 and CVE-2025-27144) affecting Red Hat Advanced Cluster Security for Kubernetes (RHACS) 4.7.0. The vulnerabilities fall under CWE-770, which relates to allocation of resources without limits or throttling. The update to RHACS 4.7.1 includes fixes for these vulnerabilities. The advisory covers multiple architectures including x86_64, ppc64le, s390x, and aarch64 on RHEL 8. No CVSS score is provided, and no known exploitation has been reported. The vendor advisory explicitly instructs users to upgrade to 4.7.1 to resolve the issues.
Potential Impact
The vulnerabilities could allow improper resource allocation or exhaustion in RHACS 4.7.0, potentially impacting the stability or security of Kubernetes cluster security management. The high severity rating indicates significant risk if left unpatched. However, no active exploitation has been observed. The impact is limited to affected versions prior to 4.7.1.
Mitigation Recommendations
Red Hat has released RHACS 4.7.1 which contains fixes for the identified vulnerabilities. Users running RHACS 4.7.0 are advised to upgrade to 4.7.1 promptly. No additional mitigation steps are indicated by the vendor advisory. Patch status is confirmed as an official fix available in version 4.7.1.
Red Hat Security Advisory: ACS 4.7 enhancement and security update
Description
This release of RHACS 4.7.1 addresses the following security vulnerabilities: - CVE-2025-22869 - CVE-2025-27144
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This security advisory from Red Hat addresses two vulnerabilities (CVE-2025-22869 and CVE-2025-27144) affecting Red Hat Advanced Cluster Security for Kubernetes (RHACS) 4.7.0. The vulnerabilities fall under CWE-770, which relates to allocation of resources without limits or throttling. The update to RHACS 4.7.1 includes fixes for these vulnerabilities. The advisory covers multiple architectures including x86_64, ppc64le, s390x, and aarch64 on RHEL 8. No CVSS score is provided, and no known exploitation has been reported. The vendor advisory explicitly instructs users to upgrade to 4.7.1 to resolve the issues.
Potential Impact
The vulnerabilities could allow improper resource allocation or exhaustion in RHACS 4.7.0, potentially impacting the stability or security of Kubernetes cluster security management. The high severity rating indicates significant risk if left unpatched. However, no active exploitation has been observed. The impact is limited to affected versions prior to 4.7.1.
Mitigation Recommendations
Red Hat has released RHACS 4.7.1 which contains fixes for the identified vulnerabilities. Users running RHACS 4.7.0 are advised to upgrade to 4.7.1 promptly. No additional mitigation steps are indicated by the vendor advisory. Patch status is confirmed as an official fix available in version 4.7.1.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:3438
- Cve Count
- 2
- Additional Cves
- ["CVE-2025-27144"]
Threat ID: 6a160973e29bf47b5063c9fd
Added to database: 05/26/2026, 20:58:27 UTC
Last enriched: 08/14/2026, 22:11:37 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 30
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.