CVE-2025-32908: Red Hat Enterprise Linux 10

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A flaw was found in libsoup. The HTTP/2 server in libsoup may not fully validate the values of pseudo-headers :scheme, :authority, and :path, which may allow a user to cause a denial of service (DoS).

Affected products

• Red Hat Red Hat Enterprise Linux 10: before 0:3.6.5-3.el10_0 (fixed in 0:3.6.5-3.el10_0)
• Red Hat Red Hat Enterprise Linux 6
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9

Published 2025-04-14. Last modified 2026-06-29.