CVE-2025-5791: Red Hat Enterprise Linux 10

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the erroneous inclusion of the root group in the access list.

Affected products

• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Openshift Sandboxed Containers 1.1
• Red Hat Red Hat Trusted Profile Analyzer

Published 2025-06-06. Last modified 2026-06-17.