Missing initialization of resource in moby - CVE-2025-54410

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU117177

Missing initialization of resource in moby - CVE-2025-54410

Published: October 15, 2025


Vulnerability identifier: #VU117177
CSH Severity: Low
CVSS v4: 1 [CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-54410
CWE-ID: CWE-909
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to Docker fails to re-create iptables rules that isolate bridge networks when firewalld reloads, allowing any container to access all ports on any other container across different bridge networks on the same host. This breaks network segmentation between containers that should be isolated, creating significant risk in multi-tenant environments. A local user can gain unauthorized access to sensitive information on the system.


Affected software

moby
Astronomer with IBM
Guardium Data Security Center (GDSC)
Maximo Application Suite - IoT Component
BIG-IP Next CNF
BIG-IP Next SPK
BIG-IP Next for Kubernetes
Netcool Operations Insight
IBM Maximo Application Suite
watsonx.data
IBM Edge Application Manager

How to mitigate CVE-2025-54410

Install updates from vendor's website.

moby - update to 28.0.0
Astronomer with IBM - update to 1.1.0
Netcool Operations Insight - update to 1.6.15
watsonx.data - update to 2.2.2
Guardium Data Security Center (GDSC) - update to 3.8.5
Maximo Application Suite - IoT Component - addressed in versions 8.7.29, 8.8.26, 9.0.15, 9.1.6
IBM Maximo Application Suite - addressed in versions 8.10.32, 8.11.29, 9.0.18, 9.1.7

External References

Related Security Bulletins