CVE-2025-25207 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-25207 Interim 1 4 2026-03-05T01:12:04Z current 2025-07-12T06:45:19Z 2026-03-05T01:12:04Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-25207 The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with developer persona access can add a large number of those callbacks to be executed by Authorino and as the authentication policy is enforced by a single instance of the service, this leada to a Denial of Service in Authorino while processing the post-authorization callbacks. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings Container suse/sl-micro/6.0/baremetal-os-container:latest Image SLE-Micro-Azure Image SLE-Micro-BYOS-Azure SUSE Linux Enterprise Server 16.0 openSUSE Tumbleweed govulncheck-vulndb-0.0.20250612T141001-1.1 govulncheck-vulndb-0.0.20250814T182633-160000.1.2 kernel-firmware-all-20241128-slfo.1.1_2.1 kernel-firmware-amdgpu-20241128-slfo.1.1_2.1 kernel-firmware-ath10k-20241128-slfo.1.1_2.1 kernel-firmware-ath11k-20241128-slfo.1.1_2.1 kernel-firmware-ath12k-20241128-slfo.1.1_2.1 kernel-firmware-atheros-20241128-slfo.1.1_2.1 kernel-firmware-bluetooth-20241128-slfo.1.1_2.1 kernel-firmware-bnx2-20241128-slfo.1.1_2.1 kernel-firmware-brcm-20241128-slfo.1.1_2.1 kernel-firmware-chelsio-20241128-slfo.1.1_2.1 kernel-firmware-dpaa2-20241128-slfo.1.1_2.1 kernel-firmware-i915-20241128-slfo.1.1_2.1 kernel-firmware-intel-20241128-slfo.1.1_2.1 kernel-firmware-iwlwifi-20241128-slfo.1.1_2.1 kernel-firmware-liquidio-20241128-slfo.1.1_2.1 kernel-firmware-marvell-20241128-slfo.1.1_2.1 kernel-firmware-media-20241128-slfo.1.1_2.1 kernel-firmware-mediatek-20241128-slfo.1.1_2.1 kernel-firmware-mellanox-20241128-slfo.1.1_2.1 kernel-firmware-mwifiex-20241128-slfo.1.1_2.1 kernel-firmware-network-20241128-slfo.1.1_2.1 kernel-firmware-nfp-20241128-slfo.1.1_2.1 kernel-firmware-nvidia-20241128-slfo.1.1_2.1 kernel-firmware-platform-20241128-slfo.1.1_2.1 kernel-firmware-prestera-20241128-slfo.1.1_2.1 kernel-firmware-qcom-20241128-slfo.1.1_2.1 kernel-firmware-qlogic-20241128-slfo.1.1_2.1 kernel-firmware-radeon-20241128-slfo.1.1_2.1 kernel-firmware-realtek-20241128-slfo.1.1_2.1 kernel-firmware-serial-20241128-slfo.1.1_2.1 kernel-firmware-sound-20241128-slfo.1.1_2.1 kernel-firmware-ti-20241128-slfo.1.1_2.1 kernel-firmware-ueagle-20241128-slfo.1.1_2.1 kernel-firmware-usb-network-20241128-slfo.1.1_2.1 python311-dnspython-2.4.2-2.1 kernel-firmware-all-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-amdgpu-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-ath10k-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-ath11k-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-ath12k-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-atheros-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-bluetooth-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-bnx2-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-brcm-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-chelsio-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-dpaa2-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-i915-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-intel-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-iwlwifi-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-liquidio-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-marvell-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-media-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-mediatek-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-mellanox-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-mwifiex-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-network-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-nfp-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-nvidia-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-platform-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-prestera-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-qcom-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-qlogic-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-radeon-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-realtek-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-serial-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-sound-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-ti-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-ueagle-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest kernel-firmware-usb-network-20241128-slfo.1.1_2.1 as a component of Container suse/sl-micro/6.0/baremetal-os-container:latest python311-dnspython-2.4.2-2.1 as a component of Image SLE-Micro-Azure python311-dnspython-2.4.2-2.1 as a component of Image SLE-Micro-BYOS-Azure govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 govulncheck-vulndb-0.0.20250612T141001-1.1 as a component of openSUSE Tumbleweed The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with developer persona access can add a large number of those callbacks to be executed by Authorino and as the authentication policy is enforced by a single instance of the service, this leada to a Denial of Service in Authorino while processing the post-authorization callbacks. CVE-2025-25207 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-all-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-amdgpu-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-ath10k-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-ath11k-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-ath12k-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-atheros-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-bluetooth-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-bnx2-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-brcm-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-chelsio-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-dpaa2-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-i915-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-intel-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-iwlwifi-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-liquidio-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-marvell-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-media-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-mediatek-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-mellanox-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-mwifiex-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-network-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-nfp-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-nvidia-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-platform-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-prestera-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-qcom-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-qlogic-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-radeon-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-realtek-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-serial-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-sound-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-ti-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-ueagle-20241128-slfo.1.1_2.1 Container suse/sl-micro/6.0/baremetal-os-container:latest:kernel-firmware-usb-network-20241128-slfo.1.1_2.1 Image SLE-Micro-Azure:python311-dnspython-2.4.2-2.1 Image SLE-Micro-BYOS-Azure:python311-dnspython-2.4.2-2.1 SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250612T141001-1.1 moderate