CVE-2025-22869 is a denial of service vulnerability in the key exchange mechanism of the golang.org/x/crypto/ssh library. This library is used by Red Hat Gatekeeper (a validating webhook with auditing capabilities for Kubernetes policies) and Podman (a container management tool). The vulnerability allows an attacker to cause a denial of service during SSH key exchange. Red Hat has issued security advisories and released updated packages for Gatekeeper (v3.18.0 and later) and Podman (notably versions around 4.2.0 and others) to address this issue. The fix involves updating the golang.org/x/crypto/ssh dependency to a version that mitigates the denial of service condition. No active exploitation has been reported.

Successful exploitation of this vulnerability could cause denial of service conditions in Gatekeeper and Podman components that rely on the vulnerable SSH library. This could disrupt Kubernetes policy enforcement or container management operations. There are no reports of active exploitation in the wild. The impact is rated as high due to potential service disruption.

Red Hat has released official security updates that fix this vulnerability. Users should apply the provided patches and update Gatekeeper to version 3.18.0 or later, and Podman to the updated versions as specified in the Red Hat advisories. No additional mitigations are required beyond applying these updates. Refer to Red Hat advisory RHSA-2025:3052 for Gatekeeper and RHSA-2025:3165 for Podman for detailed update instructions.