The socat utility, which facilitates bi-directional byte streams between various channels, contains a vulnerability (CVE-2024-54661) that allows arbitrary file overwrite due to predictable temporary file usage in the /tmp directory. This security flaw affects multiple Red Hat Enterprise Linux 9 variants and socat versions. Red Hat Product Security has released updated socat packages to fix this issue, as detailed in advisory RHSA-2025:10353. The vulnerability is classified under CWE-377, indicating insecure temporary file handling. No CVSS score is provided, but the severity is rated moderate by Red Hat.

The vulnerability permits an attacker to overwrite arbitrary files by exploiting predictable temporary file names in the /tmp directory used by socat. This could potentially lead to unauthorized modification of files on affected systems. However, no known exploits are reported in the wild, and the overall security impact is considered moderate by Red Hat.

Red Hat has released updated socat packages that address this vulnerability. Users should apply the security update as described in Red Hat advisory RHSA-2025:10353 and the linked article https://access.redhat.com/articles/11258. Applying these official patches will remediate the arbitrary file overwrite issue. There is no indication that additional mitigation steps are required beyond applying the update.