CVE-2025-54409

Name of the Vulnerable Software and Affected Versions: AIDE versions 0.13 through 0.19.1

Description: AIDE, an advanced intrusion detection environment, contains a null pointer dereference issue. An attacker can crash the program during report printing or database listing after setting extended file attributes with an empty attribute value or with a key containing a comma. A local user might exploit this to cause a local denial of service.

Recommendations: Update to version 0.19.2 or later. As a workaround, remove the xattrs group from rules matching files on affected file systems.