Is there a patch available for CVE-2025-58186?

Yes, a patch is available for CVE-2025-58186. Update the affected software to the latest version immediately.

Alpine Linux Go CVE-2025-58186

MEDIUM

N/A vendor:alpine

Information Disclosure

Lifecycle Timeline

Analysis Generated

May 27, 2026 - 22:50 vuln.today

DescriptionCVE.org

Alpine Linux: go fixed in 1.25.2-r0

AnalysisAI

Alpine Linux patched its Go language runtime package at version 1.25.2-r0, addressing an unspecified vulnerability tracked as CVE-2025-58186. The nature, class, and impact of the underlying flaw are not disclosed in available intelligence - no description, CVSS score, CWE classification, or vendor advisory detail accompanies this record beyond the package fix version. With an EPSS score of 0.04% (13th percentile), probabilistic exploitation likelihood is very low at time of analysis.

Technical ContextAI

The affected component is the Go programming language runtime and toolchain as packaged by Alpine Linux, an apk-based Linux distribution commonly used in container and embedded environments. The Alpine package versioning scheme '1.25.2-r0' indicates Go upstream version 1.25.2 built as Alpine package revision 0. No CWE root cause classification is available, making it impossible to characterize the vulnerability class (e.g., memory safety, cryptographic weakness, input validation failure). No CPE strings were provided. The upstream Go project and Alpine Linux security advisories would be the authoritative sources for technical detail, but no reference URLs were included in the available intelligence.

Affected ProductsAI

The affected product is the Go language package as distributed by Alpine Linux. The fix was introduced in Alpine package version 1.25.2-r0, implying versions of the Alpine Go package prior to 1.25.2-r0 are affected. The exact range of vulnerable versions (e.g., which Alpine Linux release branches - edge, v3.x - carry the vulnerable package) is not specified in available data. No CPE strings or vendor advisory URLs were provided. Users should consult the Alpine Linux security tracker at security.alpinelinux.org for precise affected-version and branch information.

RemediationAI

Update the Alpine Linux Go package to version 1.25.2-r0 or later using the standard apk package manager: 'apk upgrade go'. This is the vendor-confirmed fix version per Alpine's own reporting. For container environments built on Alpine, rebuild images using a base layer that pulls the patched Go package. If immediate patching is not feasible, consider restricting network exposure of services compiled with the affected Go runtime, though this is a generic precaution given the unknown vulnerability class - its actual effectiveness cannot be assessed without knowing the attack vector. No official vendor advisory URL was included in available intelligence; consult security.alpinelinux.org or the Alpine Linux aports repository for the full security notice and any documented workarounds.