CVE-2025-24813 is a security vulnerability in the tomcat9 servlet container used in Red Hat Enterprise Linux 10. The flaw allows potential remote code execution, information disclosure, or information corruption triggered by a partial PUT request. Red Hat Product Security has rated this issue as moderate severity and issued an advisory (RHSA-2025:7494) with updated tomcat9 packages to fix the problem. The advisory covers multiple architectures and extended update support versions of Red Hat Enterprise Linux 10. No CVSS score is provided in the advisory, but the impact includes serious risks such as RCE and data compromise.

The vulnerability could allow an attacker to execute arbitrary code remotely, disclose sensitive information, or corrupt data by exploiting the partial PUT handling in tomcat9. This could compromise the confidentiality, integrity, and availability of affected systems running Red Hat Enterprise Linux 10 with tomcat9. The issue is rated moderate severity by Red Hat, indicating a significant but not critical risk.

Red Hat has released updated tomcat9 packages for Red Hat Enterprise Linux 10 and its variants to address CVE-2025-24813. Users should apply these official security updates promptly. Detailed instructions and package downloads are available in the Red Hat advisory RHSA-2025:7494 at https://access.redhat.com/errata/RHSA-2025:7494 and https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the vendor-provided update.