P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsing
Priority LOW 27CWE-674Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 12 fixed, 5 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-674.
Summary
A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00154 4th percentileScored 2026-11-07
Fix Partial Red Hat: 24 advisoriesRed Hat: 12 fixed, 5 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 0.26.4-1.el10_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 0.26.4-1.el9_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 0.26.4-1.el9_8 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791378395 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223279 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223719 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790272426 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589998 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589912 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589914 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589855 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Cost Management 4 | — | 1790844333 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1786638573 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1786634825 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 0.26.2-1.2.hum1 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 0.26.4-1.hum1 | Patch available | CNA |
| Red Hat | Red Hat Insights proxy 1.5 | — | 1786433656 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786435241 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533457 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533449 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786435483 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533529 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241211 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787135742 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241260 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — | No fix listed | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 0.26.4-1.el10_2 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 0.26.4-1.el9_8 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 0.26.4-1.el9_8 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791378395 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223279 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223719 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790272426 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589998 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Cost Management 4 VendorRed Hat Affected — Fixed in 1790844333 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1786638573 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1786634825 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 0.26.2-1.2.hum1 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 0.26.4-1.hum1 Patch available CNA
- Red Hat Insights proxy 1.5 VendorRed Hat Affected — Fixed in 1786433656 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786435241 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533457 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533449 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786435483 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533529 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241211 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787135742 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241260 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* | 4.0 – 4.22.1 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Red Hat |
| cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Red Hat |
| cpe:2.3:a:p11-kit_project:p11-kit:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | P11-kit Project |
- cpe:2.3:a:redhat:hardened_images:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:* Versions 4.0 – 4.22.1 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
- cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat
- cpe:2.3:a:p11-kit_project:p11-kit:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·P11-kit Project
Remediation
Red Hat 24 advisories
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
Show 21 more Red Hat advisories
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.1
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:81201 Released 2026-10-12 · Red Hat rating ImportantCost Management Metrics Operator Update
- Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:58981 Released 2026-08-24 · Red Hat rating CriticalRed Hat Update Infrastructure 5.3 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:54760 Released 2026-08-13 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:54387 Released 2026-08-12 · Red Hat rating ImportantRed Hat Update Infrastructure 5.2 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
- RHSA-2026:53371 Released 2026-08-11 · Red Hat rating ImportantInsights proxy Container Image
- Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
- RHSA-2026:49667 Released 2026-08-03 · Red Hat rating Moderatep11-kit security update
- Red Hat Enterprise Linux AppStream (v. 9) p11-kit-devel-0.26.4-1.el9_8, p11-kit-server-0.26.4-1.el9_8
- Red Hat Enterprise Linux BaseOS (v. 9) p11-kit-0.26.4-1.el9_8, p11-kit-client-0.26.4-1.el9_8, p11-kit-trust-0.26.4-1.el9_8
- RHSA-2026:49668 Released 2026-08-03 · Red Hat rating Moderatep11-kit security update
- Red Hat Enterprise Linux AppStream (v. 10) p11-kit-devel-0.26.4-1.el10_2, p11-kit-server-0.26.4-1.el10_2
- Red Hat Enterprise Linux BaseOS (v. 10) p11-kit-0.26.4-1.el10_2, p11-kit-client-0.26.4-1.el10_2, p11-kit-trust-0.26.4-1.el10_2
- RHSA-2026:38342 Released 2026-07-12 · Red Hat rating ModerateRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images mingw32-p11-kit-0.26.4-1.hum1@noarch@public-hummingbird-aarch64-rpms, mingw32-p11-kit-0.26.4-1.hum1@noarch@public-hummingbird-x86_64-rpms, mingw64-p11-kit-0.26.4-1.hum1@noarch@public-hummingbird-aarch64-rpms +12
- RHSA-2026:37469 Released 2026-07-10 · Red Hat rating ModerateRed Hat Hardened Images RPMs Security Update
- Red Hat Hardened Images mingw32-p11-kit-0.26.2-1.2.hum1@noarch@public-hummingbird-aarch64-rpms, mingw32-p11-kit-0.26.2-1.2.hum1@noarch@public-hummingbird-x86_64-rpms, mingw64-p11-kit-0.26.2-1.2.hum1@noarch@public-hummingbird-aarch64-rpms +12
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6 and 7 more products — RHSA-2026:54387
4 records Highest priority Priority LOW 4 LOW
Other records, highest priority first
- TI-2026-40178 Double free in Red Hat Enterprise Linux 10Priority LOW 29
- TI-2026-40180 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat…Priority LOW 26
- TI-2026-40179 Out-of-bounds read in Red Hat Enterprise Linux 10Priority LOW 19
- Advisory ·
Red Hat Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 12 more products — RHSA-2026:54760
2 records Highest priority Priority HIGH 1 HIGH, 1 LOW
Other records, highest priority first
- TI-2026-12003 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()Priority HIGH 72
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 7 | Affected | No fix yet: Fix deferred |
| Red Hat Enterprise Linux 8 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 4 | Affected | No fix yet: Fix deferred |
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet: Fix deferred |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502 |
| Cost Management 4 | Fixed | RHSA-2026:81201 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:54760 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:49668 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:49667 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:49668 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:49667 |
| Red Hat Hardened Images | Fixed | RHSA-2026:37469, RHSA-2026:38342 |
| Red Hat Insights proxy 1.5 | Fixed | RHSA-2026:53371 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:54387, RHSA-2026:58981 |
Not affected: 4 products
- Cert Manager support for Red Hat OpenShift release 1.20
- Cost Management 4
- Red Hat OpenShift AI (RHOAI)
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-13757
- 2026-10-03 Alias added: GHSA-p2wm-69qx-x25w
- 2026-10-12 Fix available: costmanagement/costmanagement-metrics-rhel9-operator@1790844333 · CNA
- 2026-10-12 1 new reference · CNA
- 2026-10-13 Fix available: RHSA-2026:81201 · Red Hat
- 2026-10-13 Fix available: Cost Management 4 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791378395, cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076 +5 · CNA
- 2026-10-14 6 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
- 2026-11-05 Affected versions changed · Red Hat
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · Red Hat
References
Advisory 26
- RHSA-2026:37469
- RHSA-2026:38342
- RHSA-2026:49667
- RHSA-2026:49668
- RHSA-2026:53371
- RHSA-2026:54387
- RHSA-2026:54760
- RHSA-2026:58981
- RHSA-2026:72394
- RHSA-2026:72395
- RHSA-2026:72399
- RHSA-2026:72470
- RHSA-2026:72475
- RHSA-2026:72476
- RHSA-2026:72502
- RHSA-2026:81201
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82336
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82372
- RHSA-2026:82857
- RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-13757
- RHBZ#2494556
More Red Hat Enterprise Linux vulnerabilities
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
- TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
- TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
- TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
Sources
- CVE-2026-13757 · CVE Program
- CVE-2026-13757 · NVD
- FIRST EPSS
- GHSA-p2wm-69qx-x25w · GitHub Advisory Database · CC BY 4.0
- CVE-2026-13757 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences