VDB
RHSA-2025%3A21132
RHSA-2025%3A21132
PUBLISHED
CVSS 7 HIGH
A flaw was found in database/sql. Concurrent queries can produce unexpected results when a query is cancelled during a Scan method call on returned Rows, creating a race condition. This vulnerability allows an attacker who can initiate and cancel queries to trigger this condition, possibly leading to inconsistent data being returned to the application.
Risk Scores
CVSS 3.1
7
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:eab5894571ed8157e2a7359f49a8f710dbc8a88cf5b14361c36e79339c075540_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-aodh-listener-rhel9@sha256:eab5894571ed8157e2a7359f49a8f710dbc8a88cf5b14361c36e79339c075540_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:08fdb0e0639e87660426a349454923dee95abc7ec5f0b98cf978c16f27ad29e3_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-memcached-rhel9@sha256:08fdb0e0639e87660426a349454923dee95abc7ec5f0b98cf978c16f27ad29e3_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:f485296ccfc60836a042f5321be23b759a616d7f7d4a2bb0ee79d71d9e99c75f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-cinder-backup-rhel9@sha256:f485296ccfc60836a042f5321be23b759a616d7f7d4a2bb0ee79d71d9e99c75f_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-frr-rhel9@sha256:3ad0b8d27214bdda65e8f13d78e787c115fc47d132310d38851630901dc7ced2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-ovn-sb-db-server-rhel9@sha256:b59e08b8cd85d8949494c47d85c5393c7675f09bad22d9c976bbbc04cbd9f911_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:f36a744ad8c99d71052fa56435d551b1392cc06618ac71ae3fa415afb9b7702f_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-barbican-api-rhel9@sha256:f36a744ad8c99d71052fa56435d551b1392cc06618ac71ae3fa415afb9b7702f_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:f15649364dd2462a4120fa65bd68cc2d00332a438042c38c98fe2be2e85d9392_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/nova-rhel9-operator@sha256:f15649364dd2462a4120fa65bd68cc2d00332a438042c38c98fe2be2e85d9392_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/heat-rhel9-operator@sha256:6fd420dacc19333ac66b4bbc518e4a5fc944e12051d6eb73f3d73723288f693e_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-cinder-scheduler-rhel9@sha256:4c01202a93f73d6672c760fdfb6df0c79ca14946f7c0f9a7a89f294c649995cd_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | * |
| Red Hat | registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:9be27b7518683a893c1a6f0fe92cf3775de7854230e94d06f46e3e7d42bc7f9c_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-neutron-sriov-agent-rhel9@sha256:9be27b7518683a893c1a6f0fe92cf3775de7854230e94d06f46e3e7d42bc7f9c_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:343d5d32347b3277f9795aeae970e7f63ddfac4206ce82721a0ef425d7fd5278_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-heat-api-cfn-rhel9@sha256:343d5d32347b3277f9795aeae970e7f63ddfac4206ce82721a0ef425d7fd5278_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:48525a4a9df01c46eb8e55e4e9f70257f72851023b256b49355e867f6a9bbaf0_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/ovn-rhel9-operator@sha256:48525a4a9df01c46eb8e55e4e9f70257f72851023b256b49355e867f6a9bbaf0_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:9da0df81a8bc42db3fbb5cf9252cd348015c89d747087a65de9fb8bcfff269d2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/ee-openstack-ansible-ee-rhel9@sha256:9da0df81a8bc42db3fbb5cf9252cd348015c89d747087a65de9fb8bcfff269d2_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:5719856887da5667e86f25b8ff97714219ef56081d13de0c21f112701638c200_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/openstack-rhel9-operator@sha256:5719856887da5667e86f25b8ff97714219ef56081d13de0c21f112701638c200_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/horizon-rhel9-operator@sha256:aa5117e0d0548c1b6d0e19263f678fee816971d27b67c1125eb0b70bef848db6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | * |
| Red Hat | registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:3a8240a39625a1b38685b11fda1ee266c815af3afae0f587c60d87f4bf909fcb_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/ironic-rhel9-operator@sha256:3a8240a39625a1b38685b11fda1ee266c815af3afae0f587c60d87f4bf909fcb_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:21d7d81891aa0ed395561b66f3d6b0b41d0f75b4c6fd04a8126d1ce4bd1eafe2_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-rabbitmq-rhel9@sha256:21d7d81891aa0ed395561b66f3d6b0b41d0f75b4c6fd04a8126d1ce4bd1eafe2_amd64 |
| Red Hat | registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:7cb4f68e3fa460034efc14832ee0ba130589cdb368f517700abb40e0de6aa4c6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso-operators/glance-rhel9-operator@sha256:7cb4f68e3fa460034efc14832ee0ba130589cdb368f517700abb40e0de6aa4c6_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:26282bba4793f1946fae842b531bd512899ddefbb6eed999cd91c9539d2922b6_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-designate-api-rhel9@sha256:26282bba4793f1946fae842b531bd512899ddefbb6eed999cd91c9539d2922b6_amd64 |
| Red Hat | registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:0090dcd25093c9d2729a587c5897edb07bdb674897d2266919d1b3a3235da437_amd64 as a component of Red Hat OpenStack Services on OpenShift 18 | registry.redhat.io/rhoso/openstack-nova-base-rhel9@sha256:0090dcd25093c9d2729a587c5897edb07bdb674897d2266919d1b3a3235da437_amd64 |
…and 109 more
Timeline
- Nov 12, 2025 CVE Published
- May 7, 2026 CVE Updated
- May 7, 2026 Distribution Patch
- May 7, 2026 Distribution Patch
- May 7, 2026 Security Advisory
- May 7, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2025:21132 advisory
- https://access.redhat.com/security/cve/CVE-2025-47907 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://catalog.redhat.com/software/containers/search advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_21132.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2387083 issue
- https://www.cve.org/CVERecord?id=CVE-2025-47907 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907 advisory
- https://go.dev/cl/693735 advisory
- https://go.dev/issue/74831 advisory
- https://groups.google.com/g/golang-announce/c/x5MKroML2yM advisory
- https://pkg.go.dev/vuln/GO-2025-3849 advisory