CVE-2025-12105
High · 7.5CVSS
7.5
EPSS
0.5%
Published
Oct 23, 2025
CISA due date
—
The record
A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to manage HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed twice due to missing state synchronization. This leads to a use-after-free memory access, potentially crashing the affected application. Attackers could exploit this behavior remotely by triggering specific HTTP/2 read and cancel sequences, resulting in a denial-of-service condition.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | libsoup | 0 | 3.4.4-150600.3.21.1 |
| SUSE:Linux Enterprise Server 15 SP6-LTSS | libsoup | 0 | 3.4.4-150600.3.21.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | libsoup | 0 | 3.4.4-150600.3.21.1 |
| SUSE:Linux Micro 6.0 | libsoup | 0 | 3.4.2-13.1 |
| openSUSE:Leap 15.6 | libsoup | 0 | 3.4.4-150600.3.21.1 |
| openSUSE:Leap 16.0 | libsoup | 0 | 3.6.6-160000.1.1 |
| openSUSE:Tumbleweed | libsoup | 0 | 3.6.5-9.1 |
Related vulnerabilities
- CVE-2026-2708 A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. Also affects libsoup
- CVE-2026-2369 A flaw was found in libsoup. Also affects libsoup
- CVE-2026-2443 A flaw was identified in libsoup, a widely used HTTP library in GNOME-based systems. Also affects libsoup
- CVE-2026-1761 A flaw was found in libsoup. Also affects libsoup
- CVE-2026-1760 A flaw was found in SoupServer. Also affects libsoup
- CVE-2026-1539 A flaw was found in the libsoup HTTP library that can cause proxy authentication… Also affects libsoup
- CVE-2026-1536 A flaw was found in libsoup. Also affects libsoup
- CVE-2026-1467 A flaw was found in libsoup, an HTTP client library. Also affects libsoup