The libxml2 library, which implements various XML standards, contains a stack buffer overflow vulnerability in the xmllint interactive shell command handling (CVE-2025-6170). Red Hat has issued a security advisory (RHSA-2026:36734) describing this low severity issue and providing updated packages for Red Hat Enterprise Linux 8 on multiple architectures including x86_64, s390x, ppc64le, and aarch64. The advisory references a fix available in libxml2 version 2.9.7-21.el8_10.6. No CVSS score is provided in the advisory, but the impact is considered low. No known exploits in the wild have been reported.

The vulnerability is a stack buffer overflow in the xmllint interactive shell command handling, which could potentially lead to memory corruption. However, Red Hat rates the security impact as low, indicating limited risk or difficulty in exploitation. There are no known exploits in the wild. The issue affects multiple architectures of Red Hat Enterprise Linux 8.

Red Hat has released updated libxml2 packages that address this vulnerability. Users of Red Hat Enterprise Linux 8 should apply the security update as described in Red Hat advisory RHSA-2026:36734 and the referenced article https://access.redhat.com/articles/11258. Applying this update will remediate the vulnerability. No additional mitigation steps are indicated by the vendor.