Double-Free Vulnerability in GnuTLS Due to Ownership Handling Flaw
CVE-2025-32988

6.5MEDIUM

Key Information:

Status: Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9
Vendor: CVE Published:; 10 July 2025

What is CVE-2025-32988?

A flaw exists in GnuTLS where incorrect ownership handling in the export logic of Subject Alternative Name (SAN) entries containing an otherName can cause a double-free vulnerability. If an invalid or malformed type-id OID is used, GnuTLS erroneously invokes asn1_delete_structure() on an ASN.1 node that it does not own. This leads to a potential double-free scenario when the parent function or another caller attempts to free the same structure. The vulnerability can be exploited using public GnuTLS APIs, resulting in denial of service or memory corruption, depending on allocator behavior.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch