CVE-2025-47907
Incorrect results returned from Rows.Scan in database/sql
CVE-2025-47907 is fixed in 22 products on 1 platform, first by RHSA-2025:20983, released August 7, 2025. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.0
moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0044
38th percentile
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call to the Scan method of the returned Rows can result in unexpected results if other queries are being made in parallel. This can result in a race condition that may overwrite the expected results with those of another query, causing the call to Scan to return either unexpected results from the other query or an error.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| azure-storage-azcopy · sles 15.6 | 10.32.4-150400.9.11.1 | SUSE-SU-2026:2466-1 | Jun 19, 2026 |
| azure-storage-azcopy · sles 15.7 | 10.32.4-150400.9.11.1 | SUSE-SU-2026:2466-1 | Jun 19, 2026 |
| go-toolset · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| go1.23 · opensuse-leap 15.6 | 1.23.12-150000.1.40.1 | SUSE-SU-2025:02759-1 | Aug 12, 2025 |
| go1.23 · sles 15.6 | 1.23.12-150000.1.40.1 | SUSE-SU-2025:02759-1 | Aug 12, 2025 |
| go1.23 · sles 15.7 | 1.23.12-150000.1.40.1 | SUSE-SU-2025:02759-1 | Aug 12, 2025 |
| go1.23-openssl · opensuse-leap 15.6 | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 | Sep 11, 2025 |
| go1.23-openssl · sles 15.6 | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 | Sep 11, 2025 |
| go1.23-openssl · sles 15.7 | 1.23.12-150600.13.9.1 | SUSE-SU-2025:03159-1 | Sep 11, 2025 |
| go1.24 · opensuse-leap 15.6 | 1.24.6-150000.1.32.1 | SUSE-SU-2025:02760-1 | Aug 12, 2025 |
| go1.24 · sles 15.6 | 1.24.6-150000.1.32.1 | SUSE-SU-2025:02760-1 | Aug 12, 2025 |
| go1.24 · sles 15.7 | 1.24.6-150000.1.32.1 | SUSE-SU-2025:02760-1 | Aug 12, 2025 |
| go1.24-openssl · opensuse-leap 15.6 | 1.24.6-150600.13.9.1 | SUSE-SU-2025:03158-1 | Sep 11, 2025 |
| go1.24-openssl · sles 15.6 | 1.24.6-150600.13.9.1 | SUSE-SU-2025:03158-1 | Sep 11, 2025 |
| go1.24-openssl · sles 15.7 | 1.24.6-150600.13.9.1 | SUSE-SU-2025:03158-1 | Sep 11, 2025 |
| go1.25 · opensuse-leap 15.6 | 1.25.0-150000.1.5.1 | SUSE-SU-2025:02924-1 | Aug 20, 2025 |
| go1.25 · sles 15.6 | 1.25.0-150000.1.5.1 | SUSE-SU-2025:02924-1 | Aug 20, 2025 |
| go1.25 · sles 15.7 | 1.25.0-150000.1.5.1 | SUSE-SU-2025:02924-1 | Aug 20, 2025 |
| go1.25-openssl · opensuse-leap 15.6 | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 | Jan 26, 2026 |
| go1.25-openssl · sles 15.6 | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 | Jan 26, 2026 |
| go1.25-openssl · sles 15.7 | 1.25.6-150600.13.9.1 | SUSE-SU-2026:0298-1 | Jan 26, 2026 |
| golang · RHEL 10 | 1.24.6-1.el10_0 | RHSA-2025:13941 | Sep 18, 2025 |
| golang · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-bin · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-bin · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-docs · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-docs · almalinux 10 | 1.24.6-1.el10_0.alma.1 | ALSA-2025:13941 | Aug 18, 2025 |
| golang-docs · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-misc · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-misc · almalinux 10 | 1.24.6-1.el10_0.alma.1 | ALSA-2025:13941 | Aug 18, 2025 |
| golang-misc · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-race · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-shared · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-src · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-src · almalinux 10 | 1.24.6-1.el10_0.alma.1 | ALSA-2025:13941 | Aug 18, 2025 |
| golang-src · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| golang-tests · RHEL 9 | 0:1.24.6-1.el9_6 | RHSA-2025:13935 | Aug 18, 2025 |
| golang-tests · almalinux 10 | 1.24.6-1.el10_0.alma.1 | ALSA-2025:13941 | Aug 18, 2025 |
| golang-tests · amzn 2023 | 1.24.6-1.amzn2023.0.1 | ALAS2023-2025-1161 | Aug 22, 2025 |
| govulncheck-vulndb · opensuse-leap 15.6 | 0.0.20250814T182633-150000.1.98.1 | SUSE-SU-2025:02912-1 | Aug 19, 2025 |
| govulncheck-vulndb · sles 15.6 | 0.0.20250814T182633-150000.1.98.1 | SUSE-SU-2025:02912-1 | Aug 19, 2025 |
| podman · RHEL 10 | 5.6.0-5.el10_1 | RHSA-2025:20983 | Aug 7, 2025 |
| podman · RHEL 9 | 6:5.6.0-6.el9_7 | RHSA-2025:20909 | Nov 11, 2025 |
| podman · almalinux 10 | 7:5.6.0-5.el10_1 | ALSA-2025:20983 | Nov 11, 2025 |
| podman · almalinux 9 | 6:5.6.0-6.el9_7 | ALSA-2025:20909 | Nov 11, 2025 |
| podman · ol 10 | 7:5.6.0-6.0.1.el10_1 | ELSA-2025-20983 | Dec 3, 2025 |
| podman · ol 9 | 6:5.6.0-6.0.1.el9_7 | ELSA-2025-20909 | Nov 25, 2025 |
| podman-docker · RHEL 9 | 6:5.6.0-6.el9_7 | RHSA-2025:20909 | Nov 11, 2025 |
| podman-docker · almalinux 10 | 7:5.6.0-5.el10_1 | ALSA-2025:20983 | Nov 11, 2025 |
| podman-docker · almalinux 9 | 6:5.6.0-6.el9_7 | ALSA-2025:20909 | Nov 11, 2025 |
| podman-docker · ol 10 | 7:5.6.0-6.0.1.el10_1 | ELSA-2025-20983 | Dec 3, 2025 |
| podman-docker · ol 9 | 6:5.6.0-6.0.1.el9_7 | ELSA-2025-20909 | Nov 25, 2025 |
| podman-plugins · RHEL 9 | 6:5.6.0-6.el9_7 | RHSA-2025:20909 | Nov 11, 2025 |
| podman-plugins · almalinux 9 | 6:5.6.0-6.el9_7 | ALSA-2025:20909 | Nov 11, 2025 |
| podman-plugins · ol 9 | 6:5.6.0-6.0.1.el9_7 | ELSA-2025-20909 | Nov 25, 2025 |
| podman-remote · RHEL 9 | 6:5.6.0-6.el9_7 | RHSA-2025:20909 | Nov 11, 2025 |
| podman-remote · almalinux 10 | 7:5.6.0-5.el10_1 | ALSA-2025:20983 | Nov 11, 2025 |
| podman-remote · almalinux 9 | 6:5.6.0-6.el9_7 | ALSA-2025:20909 | Nov 11, 2025 |
| podman-remote · ol 10 | 7:5.6.0-6.0.1.el10_1 | ELSA-2025-20983 | Dec 3, 2025 |
| podman-remote · ol 9 | 6:5.6.0-6.0.1.el9_7 | ELSA-2025-20909 | Nov 25, 2025 |
| podman-tests · RHEL 9 | 6:5.6.0-6.el9_7 | RHSA-2025:20909 | Nov 11, 2025 |
| podman-tests · almalinux 10 | 7:5.6.0-5.el10_1 | ALSA-2025:20983 | Nov 11, 2025 |
| podman-tests · almalinux 9 | 6:5.6.0-6.el9_7 | ALSA-2025:20909 | Nov 11, 2025 |
| podman-tests · ol 10 | 7:5.6.0-6.0.1.el10_1 | ELSA-2025-20983 | Dec 3, 2025 |
| podman-tests · ol 9 | 6:5.6.0-6.0.1.el9_7 | ELSA-2025-20909 | Nov 25, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.