Skip to content
fr Sign in
7.8 High

CVE-2025-61731 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of…

Description

Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content. The "#cgo pkg-config:" directive in a Go source file provides command-line arguments to provide to the Go pkg-config command. An attacker can provide a "--log-file" argument to this directive, causing pkg-config to write to an attacker-controlled location.

Affected products and versions

Product Affected versions Fixed in
cmd/go 1.25 1.25.0 → < 1.25.6 1.25.6
cmd/go 1.24 earliest → < 1.24.12 1.24.12
Red Hat Enterprise Linux AppStream EUS (v. 10.0) Versions not published
Red Hat Enterprise Linux AppStream (v. 10) Versions not published
Red Hat Enterprise Linux AppStream (v. 8) Versions not published
Red Hat Enterprise Linux AppStream AUS (v. 8.2) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) Versions not published
Red Hat Enterprise Linux AppStream AUS (v.8.6) Versions not published
Show the 42 other branches
Product Affected versions Fixed in
Red Hat Enterprise Linux AppStream E4S (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.6) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream TUS (v.8.8) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.0) Versions not published
Red Hat Enterprise Linux AppStream E4S (v.9.2) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.4) Versions not published
Red Hat Enterprise Linux AppStream EUS (v.9.6) Versions not published
Red Hat Enterprise Linux AppStream (v. 9) Versions not published
Red Hat Hardened Images 1.25 earliest → < 1.25.9-1.hum1 1.25.9-1.hum1
Red Hat OpenShift Container Platform 4.12 1777001645 earliest → < 1777001645 1777001645
Red Hat OpenShift Container Platform 4.13 1779889628 earliest → < 1779889628 1779889628
Red Hat OpenShift Container Platform 4.14 1777997544 earliest → < 1777997544 1777997544
Red Hat OpenShift Container Platform 4.15 1777478134 earliest → < 1777478134 1777478134
Red Hat OpenShift Container Platform 4.16 1779254541 earliest → < 1779254541 1779254541
Red Hat OpenShift Container Platform 4.17 1778710215 earliest → < 1778710215 1778710215
Red Hat OpenShift Container Platform 4.18 1776976721 earliest → < 1776976721 1776976721
Red Hat OpenShift Container Platform 4.19 1772167335 earliest → < 1772167335 1772167335
Red Hat OpenShift Container Platform 4.20 1772141838 earliest → < 1772141838 1772141838
Red Hat OpenShift Service Mesh 2.6 1772083861 earliest → < 1772083861 1772083861
Red Hat OpenShift Service Mesh 3.0 1774294372 earliest → < 1774294372 1774294372
Red Hat OpenShift Service Mesh 3.1 1774293851 earliest → < 1774293851 1774293851
Red Hat OpenShift Service Mesh 3.2 1774294809 earliest → < 1774294809 1774294809
Red Hat Enterprise Linux 8 Versions not published
Red Hat OpenShift Virtualization 4 Versions not published
Red Hat OpenShift Service Mesh 3 1774294372 earliest → < 1774294372 1774294372
Red Hat Enterprise Linux 10 Versions not published
Red Hat Enterprise Linux 10.0 Extended Update Support Versions not published
Red Hat Enterprise Linux 8.2 Advanced Update Support 8020020260408140623.02 earliest → < 8020020260408140623.02f7cb7a 8020020260408140623.02f7cb7a
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 8040020260408080443.5081 earliest → < 8040020260408080443.5081a262 8040020260408080443.5081a262
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 8040020260408080443.5081 earliest → < 8040020260408080443.5081a262 8040020260408080443.5081a262
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 8060020260409063558.97 earliest → < 8060020260409063558.97d7f71f 8060020260409063558.97d7f71f
Red Hat Enterprise Linux 8.6 Telecommunications Update Service 8060020260409063558.97 earliest → < 8060020260409063558.97d7f71f 8060020260409063558.97d7f71f
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions 8060020260409063558.97 earliest → < 8060020260409063558.97d7f71f 8060020260409063558.97d7f71f
Red Hat Enterprise Linux 8.8 Telecommunications Update Service 8080020260331223648.6 earliest → < 8080020260331223648.6b4b45d8 8080020260331223648.6b4b45d8
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 8080020260331223648.6 earliest → < 8080020260331223648.6b4b45d8 8080020260331223648.6b4b45d8
Red Hat Enterprise Linux 9 Versions not published
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions Versions not published
Red Hat Enterprise Linux 9.4 Extended Update Support Versions not published
Red Hat Enterprise Linux 9.6 Extended Update Support Versions not published
Red Hat OpenShift Container Platform 4.2 1772141838 earliest → < 1772141838 1772141838

References

Timeline

  1. Published
  2. Last modified

Other CVEs of cmd/go

The 23 CVEs of cmd/go →
CVE-2026-94444 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/fips140 and operates a… 7.8 High CVE-2026-94447 Previously, a user operating inside of a malicious Go project that defines a bogus golang.org/toolchain go.sum entry and… 7.8 High CVE-2026-56865 A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to… 8.4 High CVE-2026-56864 A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log 7.5 High
Track this CVE