# CVE-2025-6170: Libxml2: stack buffer overflow in xmllint interactive shell command handling

Status: published. Published: 2025-06-16. Updated: 2026-11-02.

A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files. When a user inputs an overly long command, the program does not check the input size properly, which can cause it to crash. This issue might allow attackers to run harmful code in rare configurations without modern protections.

## Remediation

- workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to a widespread installation base, or stability. It is strongly recommended to apply the upstream patch once available. (source: CNA: redhat)

## Affected products and versions

-  /  (libxml2): ≥ 0; < 2.14.5 (affected, semver). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10 (libxml2): ≥ 0:2.12.5-10.el10_2.2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support (libxml2): ≥ 0:2.12.5-9.el10_0.2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8 (libxml2): ≥ 0:2.9.7-21.el8_10.6; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support (libxml2): ≥ 0:2.9.7-9.el8_4.20; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On (libxml2): ≥ 0:2.9.7-9.el8_4.20; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support (libxml2): ≥ 0:2.9.7-13.el8_6.15; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On (libxml2): ≥ 0:2.9.7-13.el8_6.15; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service (libxml2): ≥ 0:2.9.7-16.el8_8.15; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions (libxml2): ≥ 0:2.9.7-16.el8_8.15; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9 (libxml2): ≥ 0:2.9.13-14.el9_8.2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (libxml2): ≥ 0:2.9.13-3.el9_2.12; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions (libxml2): ≥ 0:2.9.13-13.el9_4.2; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support (libxml2): ≥ 0:2.9.13-12.el9_6.3; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 (cert-manager/jetstack-cert-manager-acmesolver-rhel9): ≥ 1791371080; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 (cert-manager/jetstack-cert-manager-rhel9): ≥ 1791371069; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 (cert-manager/cert-manager-operator-rhel9): ≥ 1791788287; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 (cert-manager/cert-manager-istio-csr-rhel9): ≥ 1791378395; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.17 (cert-manager/cert-manager-operator-bundle): ≥ 1791970484; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 (cert-manager/jetstack-cert-manager-acmesolver-rhel9): ≥ 1791459707; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 (cert-manager/jetstack-cert-manager-rhel9): ≥ 1791459711; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 (cert-manager/cert-manager-istio-csr-rhel9): ≥ 1791459759; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 (cert-manager/cert-manager-operator-rhel9): ≥ 1789029076; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.18 (cert-manager/cert-manager-operator-bundle): ≥ 1791966259; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/jetstack-cert-manager-rhel9): ≥ 1790223279; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/cert-manager-istio-csr-rhel9): ≥ 1790223719; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/cert-manager-operator-rhel9): ≥ 1790272426; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/jetstack-cert-manager-acmesolver-rhel9): ≥ 1790589998; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/jetstack-cert-manager-rhel9): ≥ 1790589912; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/cert-manager-istio-csr-rhel9): ≥ 1790589914; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/cert-manager-operator-rhel9): ≥ 1790589855; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Cert Manager support for Red Hat OpenShift release 1.20 (cert-manager/cert-manager-trust-manager-rhel9): ≥ 1790598593; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.2 (rhaiis/model-opt-cuda-rhel9): ≥ 1790621714; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.2 (rhaiis/vllm-cuda-rhel9): ≥ 1790621718; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.2 (rhaiis/vllm-rocm-rhel9): ≥ 1790621713; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/vllm-rocm-rhel9): ≥ 1791425869; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/vllm-gaudi-rhel9): ≥ 1791427182; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/model-opt-cuda-rhel9): ≥ 1791803821; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/vllm-cuda-rhel9): ≥ 1791473631; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/vllm-spyre-rhel9): ≥ 1791818357; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat AI Inference Server 3.5 (rhaii/vllm-cpu-rhel9): ≥ 1791473614; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Discovery 2 (discovery/discovery-server-rhel9): ≥ 1784821670; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Discovery 2 (discovery/discovery-ui-rhel9): ≥ 1784821750; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/disk-image-cuda-rhel9): ≥ 1793206758; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-aws-cuda-rhel9): ≥ 1793194817; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-azure-cuda-rhel9): ≥ 1793194815; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-azure-rocm-rhel9): ≥ 1793194834; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-cuda-rhel9): ≥ 1793135861; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-gcp-cuda-rhel9): ≥ 1793194815; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux AI 3.5 (rhelai3/bootc-rocm-rhel9): ≥ 1793135863; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Hardened Images (libxml2-main): ≥ 2.15.2-0.3.hum1; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Insights proxy 1.5 (insights-proxy/insights-proxy-container-rhel9): ≥ 1786433656; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.0 (rhai/base-image-rocm-rhel9): ≥ 1790276886; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.0 (rhai/base-image-tpu-rhel9): ≥ 1790276884; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.0 (rhai/base-image-cpu-rhel9): ≥ 1790277045; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.0 (rhai/base-image-spyre-rhel9): ≥ 1790276889; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.0 (rhai/base-image-cuda-rhel9): ≥ 1790276974; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-tpu-rhel9): ≥ 1790703497; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-rocm-rhel9): ≥ 1790703506; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-cpu-rhel9): ≥ 1790703590; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-spyre-rhel9): ≥ 1790703568; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-cuda-rhel9): ≥ 1790703586; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.2 (rhai/base-image-rocm-rhel9): ≥ 1790703494; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-cpu-rhel9): ≥ 1790703615; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-tpu-rhel9): ≥ 1790703516; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-rocm-6.4-rhel9): ≥ 1790703524; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-cuda-13.0-rhel9): ≥ 1790703601; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-rocm-7.0-rhel9): ≥ 1790703516; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-cuda-12.9-rhel9): ≥ 1790703608; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-spyre-rhel9): ≥ 1790703579; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-neuron-rhel9): ≥ 1790703516; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-cuda-13.0-rhel9): ≥ 1791231820; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.3 (rhai/base-image-cuda-12.9-rhel9): ≥ 1791232257; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-neuron-rhel9): ≥ 1790703542; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-tpu-rhel9): ≥ 1790703539; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-gaudi-rhel9): ≥ 1790703553; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-cpu-rhel9): ≥ 1790703631; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-spyre-rhel9): ≥ 1790703597; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-cuda-13.0-rhel9): ≥ 1790703641; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-cuda-12.9-rhel9): ≥ 1790703630; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-rocm-7.1-rhel9): ≥ 1790703541; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.4 (rhai/base-image-rocm-6.4-rhel9): ≥ 1790703545; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-gaudi-rhel9): ≥ 1790703552; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-cpu-rhel9): ≥ 1790703656; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-neuron-rhel9): ≥ 1790703557; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-rubin-rhel9): ≥ 1790703707; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-cuda-13.0-rhel9): ≥ 1790703645; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-tpu-rhel9): ≥ 1790703554; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-rocm-7.14-rhel9): ≥ 1790703554; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-spyre-rhel9): ≥ 1790703630; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat OpenShift AI 3.5 (rhai/base-image-cuda-12.9-rhel9): ≥ 1790703706; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/cds-kubernetes-rhel9): ≥ 1784794818; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/cds-rhel9): ≥ 1784794778; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/haproxy-rhel9): ≥ 1784795112; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/installer-rhel9): ≥ 1784794289; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/rhua-rhel9): ≥ 1784795076; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/cds-kubernetes-tp-rhel9): ≥ 1787241211; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/installer-tp-rhel9): ≥ 1787135742; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Update Infrastructure 5 (rhui5/rhua-tp-rhel9): ≥ 1787241260; < * (unaffected, rpm). Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 6 (libxml2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat Enterprise Linux 7 (libxml2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat JBoss Core Services (libxml2): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift/ose-rhel-coreos-8): Version range not reported. Source: CNA: redhat
- Red Hat / Red Hat OpenShift Container Platform 4 (openshift/ose-rhel-coreos-9): Version range not reported. Source: CNA: redhat
- Siemens / RUGGEDCOM RST2428P: ≥ 0; < V4.0 (affected, custom). Source: ADP: siemens-SADP

## Severity and prioritization

- CVSS 3.1: 2.5 (low); CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L; source: CNA: redhat

- CISA KEV: No listing in collected sources

- EPSS: 0.32% as of 2026-11-01; percentile 25.34%

- SSVC: exploitation none; automatable no; technical impact partial; source ADP: CISA-ADP

- Weaknesses: CWE-121

## Exploit evidence

No exploit evidence in collected sources. This is not proof of no exploitation.

## References

- https://access.redhat.com/errata/RHSA-2026:36734 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:39304 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:39317 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:44481 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:46836 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:53371 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:58981 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:70596 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:70639 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72394 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72395 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72399 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72470 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72475 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72476 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:72502 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73859 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73909 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73929 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73930 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73959 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73960 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73961 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:73962 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74359 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74360 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74361 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74362 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74363 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74364 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74365 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74450 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74458 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74459 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74460 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74461 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74462 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74463 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74674 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74677 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74678 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74679 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74681 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74683 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74685 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74687 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74688 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:74771 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:7519 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75652 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75654 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75655 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75657 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75658 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75659 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:75660 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:76042 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:79118 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:79119 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:79120 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:79121 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:80756 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:81127 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82059 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82061 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82066 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82304 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82322 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82336 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82347 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82354 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82368 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82371 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82372 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82415 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82857 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:82888 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:92449 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:92452 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/errata/RHSA-2026:93473 (CNA: redhat; vendor-advisory, x_refsource_REDHAT)

- https://access.redhat.com/security/cve/CVE-2025-6170 (CNA: redhat; vdb-entry, x_refsource_REDHAT)

- https://bugzilla.redhat.com/show_bug.cgi?id=2372952 (CNA: redhat; issue-tracking, x_refsource_REDHAT)

- https://gitlab.gnome.org/GNOME/libxml2/-/issues/941 (CNA: redhat)

- https://lists.debian.org/debian-lts-announce/2025/07/msg00014.html (ADP: CVE)

- https://cert-portal.siemens.com/productcert/html/ssa-253495.html (ADP: siemens-SADP)

## Provenance

- CNA: redhat: https://www.cve.org/CVERecord?id=CVE-2025-6170; retrieved 2026-11-02; source updated 2026-11-02

- FIRST EPSS: https://api.first.org/data/v1/epss?cve=CVE-2025-6170; retrieved 2026-11-02; source updated Not reported

Revision: 454ff6b8af8a4ef30a2ab874c6e4bc7f082de1e7daf38a38c8a37fc80dc531cc

Canonical: https://y2.dev/cve/CVE-2025-6170