Wind River Support Network

HomeDefectsLIN1023-12130

Fixed

LIN1023-12130 : Security Advisory - libsoup&libsoup-2.4 - CVE-2025-32049

Created: Apr 6, 2025 Updated: Apr 22, 2026

Resolved Date: Apr 20, 2026

Found In Version: 10.23.30.1

Fix Version: 10.23.30.21

Severity: Standard

Applicable for: Wind River Linux LTS 23

Component/s: Userspace

Description

A flaw was found in libsoup. The SoupWebsocketConnection may accept a large WebSocket message, which may cause libsoup to allocate memory and lead to a denial of service (DoS).

CVEs

CVE-2025-32049