CVE Vulnerabilities

CVE-2025-27365

Use After Free

Published: May 01, 2025 | Modified: Aug 25, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 

Client connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

NameVendorStart VersionEnd Version
Mq_operatorIbm2.0.0 (including)2.0.29 (including)
Mq_operatorIbm2.2.0 (including)2.2.2 (including)
Mq_operatorIbm2.3.0 (including)2.3.3 (including)
Mq_operatorIbm2.4.0 (including)2.4.8 (including)
Mq_operatorIbm3.1.0 (including)3.1.3 (including)
Mq_operatorIbm3.2.0 (including)3.2.10 (including)
Mq_operatorIbm3.0.0 (including)3.0.0 (including)
Mq_operatorIbm3.0.1 (including)3.0.1 (including)
Mq_operatorIbm3.3.0 (including)3.3.0 (including)
Mq_operatorIbm3.4.0 (including)3.4.0 (including)
Mq_operatorIbm3.4.1 (including)3.4.1 (including)
Mq_operatorIbm3.5.0 (including)3.5.0 (including)
Mq_operatorIbm3.5.1 (including)3.5.1 (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.1-r1-eus (including)9.2.0.1-r1-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.2-r1-eus (including)9.2.0.2-r1-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.2-r2-eus (including)9.2.0.2-r2-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.4-r1-eus (including)9.2.0.4-r1-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.5-r1-eus (including)9.2.0.5-r1-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.5-r2-eus (including)9.2.0.5-r2-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.5-r3-eus (including)9.2.0.5-r3-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.6-r1-eus (including)9.2.0.6-r1-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.6-r2-eus (including)9.2.0.6-r2-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.0.6-r3-eus (including)9.2.0.6-r3-eus (including)
Supplied_mq_advanced_container_imagesIbm9.2.3.0-r1 (including)9.2.3.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.2.4.0-r1 (including)9.2.4.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.2.5.0-r1 (including)9.2.5.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.2.5.0-r2 (including)9.2.5.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.2.5.0-r3 (including)9.2.5.0-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.0-r1 (including)9.3.0.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.0-r2 (including)9.3.0.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.0-r3 (including)9.3.0.0-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.1-r1 (including)9.3.0.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.1-r2 (including)9.3.0.1-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.1-r3 (including)9.3.0.1-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.1-r4 (including)9.3.0.1-r4 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.3-r1 (including)9.3.0.3-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.4-r1 (including)9.3.0.4-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.4-r2 (including)9.3.0.4-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.5-r1 (including)9.3.0.5-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.5-r2 (including)9.3.0.5-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.5-r3 (including)9.3.0.5-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.6-r1 (including)9.3.0.6-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.10-r1 (including)9.3.0.10-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.10-r2 (including)9.3.0.10-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.11-r1 (including)9.3.0.11-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.11-r2 (including)9.3.0.11-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.15-r1 (including)9.3.0.15-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.16-r1 (including)9.3.0.16-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.16-r2 (including)9.3.0.16-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.17-r1 (including)9.3.0.17-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.17-r2 (including)9.3.0.17-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.17-r3 (including)9.3.0.17-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.20-r1 (including)9.3.0.20-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.20-r2 (including)9.3.0.20-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.21-r1 (including)9.3.0.21-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.21-r2 (including)9.3.0.21-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.21-r3 (including)9.3.0.21-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.0.25-r1 (including)9.3.0.25-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.1.0-r1 (including)9.3.1.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.1.0-r2 (including)9.3.1.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.1.0-r3 (including)9.3.1.0-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.1.1-r1 (including)9.3.1.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.2.0-r1 (including)9.3.2.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.2.0-r2 (including)9.3.2.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.2.1-r1 (including)9.3.2.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.2.1-r2 (including)9.3.2.1-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.0-r1 (including)9.3.3.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.0-r2 (including)9.3.3.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.1-r1 (including)9.3.3.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.1-r2 (including)9.3.3.1-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.2-r1 (including)9.3.3.2-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.2-r2 (including)9.3.3.2-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.2-r3 (including)9.3.3.2-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.3-r1 (including)9.3.3.3-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.3.3-r2 (including)9.3.3.3-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.4.0-r1 (including)9.3.4.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.4.1-r1 (including)9.3.4.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.5.0-r1 (including)9.3.5.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.5.0-r2 (including)9.3.5.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.3.5.1-r1 (including)9.3.5.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.3.5.1-r2 (including)9.3.5.1-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.0-r1 (including)9.4.0.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.0-r2 (including)9.4.0.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.0-r3 (including)9.4.0.0-r3 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.5-r1 (including)9.4.0.5-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.5-r2 (including)9.4.0.5-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.6-r1 (including)9.4.0.6-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.6-r2 (including)9.4.0.6-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.7-r1 (including)9.4.0.7-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.10-r1 (including)9.4.0.10-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.0.10-r2 (including)9.4.0.10-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.1.0-r1 (including)9.4.1.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.1.0-r2 (including)9.4.1.0-r2 (including)
Supplied_mq_advanced_container_imagesIbm9.4.1.1-r1 (including)9.4.1.1-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.2.0-r1 (including)9.4.2.0-r1 (including)
Supplied_mq_advanced_container_imagesIbm9.4.2.0-r2 (including)9.4.2.0-r2 (including)

Potential Mitigations

References