SB2025101533 - Missing initialization of resource in Moby

Description

This security bulletin contains information about 1 security vulnerability.

1) Missing initialization of resource (CVE-ID: CVE-2025-54410)

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to Docker fails to re-create iptables rules that isolate bridge networks when firewalld reloads, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. A local user can gain unauthorized access to sensitive information on the system.

Remediation

Install update from vendor's website.

References

• https://firewalld.org/documentation/howto/reload-firewalld.html
• https://github.com/moby/moby/security/advisories/GHSA-4vq8-7jfc-9cvp