This Red Hat security advisory (RHSA-2025:9541) addresses two vulnerabilities in Submariner 0.17.6 container images used in Red Hat Advanced Cluster Management for Kubernetes 2.10 on RHEL 9. The first vulnerability (CVE-2025-22868) involves unexpected memory consumption during token parsing in the golang.org/x/oauth2/jws package. The second (CVE-2025-30204) involves excessive memory allocation during header parsing in the golang-jwt/jwt package. These issues could potentially lead to resource exhaustion but no exploitation details are provided. The advisory provides updated container images with bug fixes and enhancements. Red Hat classifies the security impact as Important and recommends applying the update after prior errata. No CVSS scores are available, and no known exploits have been reported.

The vulnerabilities cause unexpected or excessive memory consumption during parsing operations in critical JWT-related Go libraries used by Submariner. This could lead to denial of service or resource exhaustion conditions in affected environments. The advisory does not describe any active exploitation or additional impact such as privilege escalation or data disclosure. The overall security impact is rated Important by Red Hat.

Red Hat has released updated Submariner 0.17.6 container images that fix these vulnerabilities. Users should apply this update after ensuring all previously released errata relevant to their system have been applied. Since this is not a cloud service, remediation requires updating the affected container images and components as per the advisory. There are no indications that additional mitigations or workarounds are necessary.