Red Hat Security Advisory: keylime-agent-rust security update
Affects Red Hat keylime-agent-rustSource GCVE Database
Not known to be exploited.
Data as of 5 Nov 2026, 18:48 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 13 May 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 5 Nov 2026.
What to do
AI-suggested
Red Hat has released updated keylime-agent-rust packages that fix this vulnerability. Users should apply the official security update as described in Red Hat advisory RHSA-2025:7313 and the linked update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the update.
Description
A use-after-free vulnerability (CVE-2025-24898) exists in the rust-openssl component used by the keylime-agent-rust in Red Hat Enterprise Linux 9. This flaw involves the ssl::select_next_proto function. Red Hat has issued a security update addressing this issue with a moderate severity rating.
References
- access.redhat.com/errata/RHSA-2025:7313 (opens in a new tab)
- docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.6_release_notes/index (opens in a new tab)
- access.redhat.com/security/updates/classification/ (opens in a new tab)
- bugzilla.redhat.com/show_bug.cgi?id=2343573 (opens in a new tab)
- security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_7313.json (opens in a new tab)