CVE-2025-4574: Red Hat Directory Server 11

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In crossbeam-channel rust crate, the internal `Channel` type's `Drop` method has a race condition which could, in some circumstances, lead to a double-free that could result in memory corruption.

Affected products

• Red Hat Red Hat Directory Server 11
• Red Hat Red Hat Directory Server 12
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 7
• Red Hat Red Hat Enterprise Linux 8
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Ai Rhoai
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Satellite 6
• Red Hat Red Hat Trusted Artifact Signer
• Red Hat Red Hat Trusted Profile Analyzer

Published 2025-05-13. Last modified 2026-06-30.