CVE-2025-68972 is a vulnerability in GnuPG where an adversary can exploit the presence of a form feed character (\f) at the end of a plaintext line in a signed message. This manipulation allows the attacker to append additional unsigned text to the message without causing signature verification to fail, resulting in an integrity bypass. The vulnerability affects Red Hat Hardened Images RPM packages of gnupg2 and related components. Red Hat rates this issue as moderate severity due to its potential to enable spoofing of signed communications. No patch or mitigation currently meets Red Hat's standards for ease of use, applicability, or stability.

The vulnerability allows attackers to bypass signature verification integrity checks by appending unsigned text to a signed message, potentially enabling spoofing of signed communications. This undermines the authenticity of signed data in Red Hat Enterprise Linux environments using the affected GnuPG packages. There is no confidentiality or availability impact reported. No known exploits are currently active in the wild.

Red Hat currently does not provide a fix or effective mitigation that meets their criteria for this vulnerability. Users are advised to monitor Red Hat advisories for future updates or fixes. Until a fix is available, no specific mitigation is recommended by Red Hat. Customers with a Technical Account Manager (TAM) can consult directly for guidance.