The vulnerabilities affect BIND, a DNS implementation including a DNS server and resolver library. CVE-2025-40778 involves cache poisoning attacks using unsolicited resource records, while CVE-2025-40780 involves cache poisoning due to a weak pseudo-random number generator. Both vulnerabilities could allow attackers to corrupt DNS cache data, undermining DNS trustworthiness. Red Hat Enterprise Linux 9.2 and related variants are affected. Red Hat has issued updated bind packages to remediate these issues as detailed in advisory RHSA-2025:21887. The advisory classifies the impact as Important and provides multiple updated RPM packages for different architectures. No CVSS scores are provided in the advisory, and no exploits are known in the wild.

Successful exploitation of these vulnerabilities could enable cache poisoning attacks on DNS servers running the affected BIND versions, potentially allowing attackers to redirect DNS queries to malicious destinations. This undermines DNS integrity and can affect network security and trust. However, no known exploits in the wild have been reported. The advisory rates the impact as Important, indicating a high but not critical severity.

Red Hat has released updated bind packages that address these vulnerabilities. Users of affected Red Hat Enterprise Linux 9.2 versions should apply the provided security updates promptly. Detailed update instructions are available at https://access.redhat.com/articles/11258. Since this is not a cloud service, remediation requires manual patching by system administrators. No additional mitigation steps are specified or required beyond applying the official patches.