Improper input validation in MySQL Cluster - CVE-2025-30722

Vulnerability identifier: #VU107533

CSH Severity: Medium

CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green

CVE-ID: CVE-2025-30722

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

Affected software:
MySQL Cluster
SUSE Linux Enterprise Server 15 SP3
Galera for Ericsson 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Anolis OS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Slackware Linux
SUSE Package Hub 15
Server Applications Module
openSUSE Leap
openEuler
Ubuntu
MySQL Server
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
mecab
Judy
Judy-devel
mysql-selinux (Red Hat package)
asio-devel
mecab-ipadic-EUCJP
mecab-ipadic
mysql-server-8.0 (Ubuntu package)
mysql-libs
mysql-test
mysql-server
mysql-help
mysql-errmsg
mysql-devel
mysql-debugsource
mysql-debuginfo
mysql-config
mysql-common
mysql
mysql (Red Hat package)
mysql-server (Ubuntu package)
mysql8.4 (Red Hat package)
mariadb
mariadb-backup
mariadb-common
mariadb-config
mariadb-gssapi-server
mariadb-debuginfo
mariadb-debugsource
mariadb-devel
mariadb-embedded
mariadb-embedded-devel
mariadb-errmsg
mariadb-oqgraph-engine
mariadb-pam
mariadb-rocksdb-engine
mariadb-server
mariadb-server-galera
mariadb-server-utils
mariadb-test
mariadb (Red Hat package)
libmariadbd19
mariadb-bench
libmariadbd19-debuginfo
mariadb-tools
mariadb-client
mariadb-tools-debuginfo
libmariadbd-devel
mariadb-galera
mariadb-bench-debuginfo
mariadb-rpm-macros
mariadb-errormessages
mariadb-client-debuginfo
mariadb-test-debuginfo
mariadb-10.6 (Ubuntu package)
mariadb (Ubuntu package)
mariadb10.11 (Red Hat package)
galera
galera (Red Hat package)

The vulnerability allows a remote authenticated user to gain access to sensitive information.

The vulnerability exists due to improper input validation within the Cluster: General component in MySQL Cluster. A remote authenticated user can exploit this vulnerability to gain access to sensitive information.

Install updates from vendor's website.

• https://www.oracle.com/security-alerts/cpuapr2025.html