CVE-2025-11232

kea: To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at...

CVE-2025-11232 is fixed in 5 products on 1 platform, first by RHSA-2025:21038, released October 29, 2025. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
7.5
important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0042
36th percentile

To trigger the issue, three configuration parameters must have specific settings: "hostname-char-set" must be left at the default setting, which is "[^A-Za-z0-9.-]"; "hostname-char-replacement" must be empty (the default); and "ddns-qualifying-suffix" must *NOT* be empty (the default is empty). DDNS updates do not need to be enabled for this issue to manifest. A client that sends certain option content would then cause kea-dhcp4 to exit unexpectedly. This issue affects Kea versions 3.0.1 through 3.0.1 and 3.1.1 through 3.1.2.

Where it's fixed

ProductFixed inFixReleased
Linux
kea · RHEL 10 3.0.1-2.el10_1 RHSA-2025:21038 Oct 29, 2025
kea · ol 10 0:3.0.1-2.el10_1 ELSA-2025-21038 Dec 2, 2025
kea · opensuse-leap 16.0 3.0.3-160000.1.1 OPENSUSE-SU-2026:20452-1 Apr 1, 2026
kea · rocky 10 0:3.0.1-2.el10_1 RLSA-2025:21038 Nov 21, 2025
kea · sles 16.0 3.0.3-160000.1.1 SUSE-SU-2026:20989-1 Apr 1, 2026
kea-doc · almalinux 10 3.0.1-2.el10_1 ALSA-2025:21038 Nov 11, 2025
kea-doc · ol 10 0:3.0.1-2.el10_1 ELSA-2025-21038 Dec 2, 2025
kea-hooks · ol 10 0:3.0.1-2.el10_1 ELSA-2025-21038 Dec 2, 2025
kea-keama · ol 10 0:3.0.1-2.el10_1 ELSA-2025-21038 Dec 2, 2025
kea-libs · ol 10 0:3.0.1-2.el10_1 ELSA-2025-21038 Dec 2, 2025

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.