CVE-2025-9714: 
Linux Debian vulnerability analysis and mitigation

CVE-2025-9714 is a vulnerability discovered in libxml2, specifically affecting the 'exsltDynMapFunction' function in libexslt/dynamic.c. The vulnerability was identified due to the absence of a recursion depth check. The issue affects multiple versions of libxml2, including versions up to 2.14.5 (Debian Tracker).

The vulnerability exists in the libxml2 library's XSLT processing component, specifically in the 'exsltDynMapFunction' function located in libexslt/dynamic.c. The core issue stems from the absence of a recursion depth check mechanism. The vulnerability has been assigned a CVSS v3.1 base score of 6.2 (medium severity), with the attack vector being local, attack complexity low, and requiring no privileges or user interaction (Snyk).

According to the CVSS metrics, while there is no direct impact on confidentiality and integrity, the vulnerability can result in a total loss of availability. This can lead to the attacker being able to fully deny access to resources in the impacted component, either through sustained attacks or persistent conditions (Snyk).

A fix has been implemented in version 2.14.5+dfsg-0.2 of libxml2. The patch is available through the official commit at the GNOME GitLab repository. For systems unable to update immediately, there are currently no documented workarounds (Debian Tracker).