Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()
Priority HIGH 72CWE-415Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 32 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-415 and the CVSS impact.
Summary
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00792 56th percentileScored 2026-11-07
Fix Partial Red Hat: 51 advisoriesRed Hat: 32 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | 3.7.7-10.el10_2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | 3.7.7-5.el10_0.1 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 3.5.3-11.el9_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 3.5.3-11.el9_8 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | 3.5.3-5.el9_2.3 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | 3.5.3-5.el9_4.2 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | 3.5.3-7.el9_6.2 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202609080414-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202609011250-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202609140326-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202609140240-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 417.94.202609191027-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202609031320-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — | 418.94.202609171815-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — | 4.19.9.6.202609021231-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — | 4.20.9.6.202609021029-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — | 4.21.9.6.202609021100-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | — | 4.22.9.8.202608130832-0 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371080 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791371069 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791788287 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791378395 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — | 1791970484 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459707 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459711 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791459759 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1789029076 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — | 1791966259 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223279 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790223719 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790272426 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589998 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589912 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589914 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790589855 | Patch available | CNA |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — | 1790598593 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791427182 | Patch available | CNA |
| Red Hat | Red Hat AI Inference Server 3.5 | — | 1791818357 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1786638573 | Patch available | CNA |
| Red Hat | Red Hat Discovery 2 | — | 1788206196 | Patch available | CNA |
| Red Hat | Red Hat Hardened Images | — | 3.8.8-2.hum1 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276886 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276884 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790277045 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276889 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.0 | — | 1790276974 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703497 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703506 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703590 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703568 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703586 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.2 | — | 1790703494 | Patch available | CNA |
| Red Hat | Red Hat OpenShift AI 3.4 | — | 1790703542 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786435241 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533457 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533449 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786435483 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1786533529 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241211 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787135742 | Patch available | CNA |
| Red Hat | Red Hat Update Infrastructure 5 | — | 1787241260 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift AI (RHOAI) | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | Not affected | CNA |
| Red Hat | Red Hat OpenShift Container Platform 5 | — | — | No fix listed | CNA |
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.7.7-10.el10_2 Patch available CNA
- Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 3.7.7-5.el10_0.1 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.5.3-11.el9_8 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.5.3-11.el9_8 Patch available CNA
- Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.5.3-5.el9_2.3 Patch available CNA
- Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.5.3-5.el9_4.2 Patch available CNA
- Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 3.5.3-7.el9_6.2 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202609080414-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202609011250-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202609140326-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202609140240-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202609191027-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609031320-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.18 VendorRed Hat Affected — Fixed in 418.94.202609171815-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.19 VendorRed Hat Affected — Fixed in 4.19.9.6.202609021231-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.20 VendorRed Hat Affected — Fixed in 4.20.9.6.202609021029-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.21 VendorRed Hat Affected — Fixed in 4.21.9.6.202609021100-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.22 VendorRed Hat Affected — Fixed in 4.22.9.8.202608130832-0 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371080 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791371069 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791788287 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791378395 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.17 VendorRed Hat Affected — Fixed in 1791970484 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459707 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459711 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791459759 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1789029076 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.18 VendorRed Hat Affected — Fixed in 1791966259 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223279 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790223719 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790272426 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589998 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589912 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589914 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790589855 Patch available CNA
- Cert Manager support for Red Hat OpenShift release 1.20 VendorRed Hat Affected — Fixed in 1790598593 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791427182 Patch available CNA
- Red Hat AI Inference Server 3.5 VendorRed Hat Affected — Fixed in 1791818357 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1786638573 Patch available CNA
- Red Hat Discovery 2 VendorRed Hat Affected — Fixed in 1788206196 Patch available CNA
- Red Hat Hardened Images VendorRed Hat Affected — Fixed in 3.8.8-2.hum1 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276886 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276884 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790277045 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276889 Patch available CNA
- Red Hat OpenShift AI 3.0 VendorRed Hat Affected — Fixed in 1790276974 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703497 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703506 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703590 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703568 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703586 Patch available CNA
- Red Hat OpenShift AI 3.2 VendorRed Hat Affected — Fixed in 1790703494 Patch available CNA
- Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1790703542 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786435241 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533457 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533449 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786435483 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1786533529 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241211 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787135742 Patch available CNA
- Red Hat Update Infrastructure 5 VendorRed Hat Affected — Fixed in 1787241260 Patch available CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift AI (RHOAI) VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE names CNA · 36
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/o:redhat:enterprise_linux:10.2 | 10.2 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux_eus:10.0 | 10.0 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/o:redhat:enterprise_linux:9::baseos | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.2::baseos | 9.2 | — | Red Hat |
| cpe:/a:redhat:rhel_e4s:9.4::appstream | 9.4 | — | Red Hat |
| cpe:/o:redhat:rhel_e4s:9.4::baseos | 9.4 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.6::appstream | 9.6 | — | Red Hat |
| cpe:/o:redhat:rhel_eus:9.6::baseos | 9.6 | — | Red Hat |
- cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
- cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/o:redhat:enterprise_linux:9::baseos Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.2::baseos Versions 9.2 — ·Red Hat
- cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
- cpe:/o:redhat:rhel_e4s:9.4::baseos Versions 9.4 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
- cpe:/o:redhat:rhel_eus:9.6::baseos Versions 9.6 — ·Red Hat
Show 26 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:openshift:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:openshift:4.18::el9 | 4.18 | — | Red Hat |
| cpe:/a:redhat:openshift:4.19::el9 | 4.19 | — | Red Hat |
| cpe:/a:redhat:openshift:4.20::el9 | 4.20 | — | Red Hat |
| cpe:/a:redhat:openshift:4.21::el9 | 4.21 | — | Red Hat |
| cpe:/a:redhat:openshift:4.22::el9 | 4.22 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.17::el9 | 1.17 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.18::el9 | 1.18 | — | Red Hat |
| cpe:/a:redhat:cert_manager:1.20::el9 | 1.20 | — | Red Hat |
| cpe:/a:redhat:ai_inference_server:3.5::el9 | 3.5 | — | Red Hat |
| cpe:/a:redhat:discovery:2::el9 | 2 | — | Red Hat |
| cpe:/a:redhat:hummingbird:1 | 1 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.0::el9 | 3.0 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.2::el9 | 3.2 | — | Red Hat |
| cpe:/a:redhat:openshift_ai:3.4::el9 | 3.4 | — | Red Hat |
| cpe:/a:redhat:rhui:5::el9 | 5 | — | Red Hat |
| cpe:/o:redhat:rhel_els:6 | 6 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8 | 8 | — | Red Hat |
| cpe:/a:redhat:openshift_ai | — | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
| cpe:/a:redhat:openshift:5 | 5 | — | Red Hat |
- cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:openshift:4.18::el9 Versions 4.18 — ·Red Hat
- cpe:/a:redhat:openshift:4.19::el9 Versions 4.19 — ·Red Hat
- cpe:/a:redhat:openshift:4.20::el9 Versions 4.20 — ·Red Hat
- cpe:/a:redhat:openshift:4.21::el9 Versions 4.21 — ·Red Hat
- cpe:/a:redhat:openshift:4.22::el9 Versions 4.22 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.17::el9 Versions 1.17 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.18::el9 Versions 1.18 — ·Red Hat
- cpe:/a:redhat:cert_manager:1.20::el9 Versions 1.20 — ·Red Hat
- cpe:/a:redhat:ai_inference_server:3.5::el9 Versions 3.5 — ·Red Hat
- cpe:/a:redhat:discovery:2::el9 Versions 2 — ·Red Hat
- cpe:/a:redhat:hummingbird:1 Versions 1 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.0::el9 Versions 3.0 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.2::el9 Versions 3.2 — ·Red Hat
- cpe:/a:redhat:openshift_ai:3.4::el9 Versions 3.4 — ·Red Hat
- cpe:/a:redhat:rhui:5::el9 Versions 5 — ·Red Hat
- cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8 Versions 8 — ·Red Hat
- cpe:/a:redhat:openshift_ai Versions — — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
- cpe:/a:redhat:openshift:5 Versions 5 — ·Red Hat
Remediation
Red Hat 51 advisories
- RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
- RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
Show 48 more Red Hat advisories
- RHSA-2026:82371 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference 3.5.2 (spyre)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-spyre-rhel9
- RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.18.2
- Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82336 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.1
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.17.2
- Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:82061 Released 2026-10-13 · Red Hat rating CriticalRed Hat AI Inference Tech Preview 3.5.2 (Gaudi)
- Red Hat AI Inference Server 3.5 registry.redhat.io/rhaii/vllm-gaudi-rhel9
- RHSA-2026:74674 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.4.3 (Neuron)
- Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
- RHSA-2026:70615 Released 2026-10-01 · Red Hat rating ImportantOpenShift Container Platform 4.18.56 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609171815-0, rhcos-ppc64le-418.94.202609171815-0, rhcos-s390x-418.94.202609171815-0 +1
- RHSA-2026:70586 Released 2026-10-01 · Red Hat rating ImportantOpenShift Container Platform 4.17.58 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 rhcos-aarch64-417.94.202609191027-0, rhcos-ppc64le-417.94.202609191027-0, rhcos-s390x-417.94.202609191027-0 +1
- RHSA-2026:74463 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 7.0)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74462 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CUDA 12.9)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:74461 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (Spyre)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:74460 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (CPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:74459 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (ROCm 6.4)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:74458 Released 2026-10-01 · Red Hat rating ImportantRed Hat AI Base Images 3.2.3 (TPU)
- Red Hat OpenShift AI 3.2 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73962 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cuda)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
- RHSA-2026:73961 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (spyre)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
- RHSA-2026:73960 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (cpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
- RHSA-2026:73959 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (tpu)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
- RHSA-2026:73909 Released 2026-09-30 · Red Hat rating ImportantRed Hat AI Base Images 3.0.3 (rocm)
- Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
- RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
- RHSA-2026:72476 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72475 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72470 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:72399 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
- RHSA-2026:72395 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
- RHSA-2026:72394 Released 2026-09-28 · Red Hat rating Importantcert-manager Operator for Red Hat OpenShift 1.20.1
- Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
- RHSA-2026:67857 Released 2026-09-28 · Red Hat rating ImportantOpenShift Container Platform 4.15.69 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 rhcos-aarch64-415.92.202609140326-0, rhcos-ppc64le-415.92.202609140326-0, rhcos-s390x-415.92.202609140326-0 +1
- RHSA-2026:67935 Released 2026-09-24 · Red Hat rating ImportantOpenShift Container Platform 4.16.71 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 rhcos-aarch64-416.94.202609140240-0, rhcos-ppc64le-416.94.202609140240-0, rhcos-s390x-416.94.202609140240-0 +1
- RHSA-2026:65839 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.13.71 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 rhcos-x86_64-413.92.202609080414-0
- RHSA-2026:65851 Released 2026-09-17 · Red Hat rating ImportantOpenShift Container Platform 4.18.55 bug fix and security update
- Red Hat OpenShift Container Platform 4.18 rhcos-aarch64-418.94.202609031320-0, rhcos-ppc64le-418.94.202609031320-0, rhcos-s390x-418.94.202609031320-0 +1
- RHSA-2026:62409 Released 2026-09-14 · Red Hat rating ImportantOpenShift Container Platform 4.14.73 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 rhcos-aarch64-414.92.202609011250-0, rhcos-ppc64le-414.92.202609011250-0, rhcos-s390x-414.92.202609011250-0 +1
- RHSA-2026:63044 Released 2026-09-09 · Red Hat rating ImportantOpenShift Container Platform 4.19.46 bug fix and security update
- Red Hat OpenShift Container Platform 4.19 rhcos-aarch64-4.19.9.6.202609021231-0, rhcos-ppc64le-4.19.9.6.202609021231-0, rhcos-s390x-4.19.9.6.202609021231-0 +1
- RHSA-2026:63041 Released 2026-09-08 · Red Hat rating ImportantOpenShift Container Platform 4.21.32 bug fix and security update
- Red Hat OpenShift Container Platform 4.21 rhcos-aarch64-4.21.9.6.202609021100-0, rhcos-ppc64le-4.21.9.6.202609021100-0, rhcos-s390x-4.21.9.6.202609021100-0 +1
- RHSA-2026:63100 Released 2026-09-08 · Red Hat rating ImportantOpenShift Container Platform 4.20.37 bug fix and security update
- Red Hat OpenShift Container Platform 4.20 rhcos-aarch64-4.20.9.6.202609021029-0, rhcos-ppc64le-4.20.9.6.202609021029-0, rhcos-s390x-4.20.9.6.202609021029-0 +1
- RHSA-2026:61783 Released 2026-08-31 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:58981 Released 2026-08-24 · Red Hat rating CriticalRed Hat Update Infrastructure 5.3 Technology Preview security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
- RHSA-2026:58573 Released 2026-08-24 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream E4S (v.9.4) bsdtar-3.5.3-5.el9_4.2, libarchive-devel-3.5.3-5.el9_4.2
- Red Hat Enterprise Linux BaseOS E4S (v.9.4) libarchive-3.5.3-5.el9_4.2
- RHSA-2026:58574 Released 2026-08-24 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream E4S (v.9.2) bsdtar-3.5.3-5.el9_2.3
- Red Hat Enterprise Linux BaseOS E4S (v.9.2) libarchive-3.5.3-5.el9_2.3
- RHSA-2026:58558 Released 2026-08-24 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream EUS (v.9.6) bsdtar-3.5.3-7.el9_6.2, libarchive-devel-3.5.3-7.el9_6.2
- Red Hat Enterprise Linux BaseOS EUS (v.9.6) libarchive-3.5.3-7.el9_6.2
- RHSA-2026:56954 Released 2026-08-19 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream EUS (v. 10.0) bsdtar-3.7.7-5.el10_0.1, libarchive-devel-3.7.7-5.el10_0.1
- Red Hat Enterprise Linux BaseOS EUS (v. 10.0) libarchive-3.7.7-5.el10_0.1
- RHSA-2026:54769 Released 2026-08-18 · Red Hat rating ImportantOpenShift Container Platform 4.22.10 bug fix and security update
- Red Hat OpenShift Container Platform 4.22 rhcos-aarch64-4.22.9.8.202608130832-0, rhcos-ppc64le-4.22.9.8.202608130832-0, rhcos-s390x-4.22.9.8.202608130832-0 +1
- RHSA-2026:54760 Released 2026-08-13 · Red Hat rating ImportantA Subscription Management tool for finding and reporting Red Hat product usage
- Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
- RHSA-2026:54387 Released 2026-08-12 · Red Hat rating ImportantRed Hat Update Infrastructure 5.2 security update
- Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-rhel9, registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9 +2
- RHSA-2026:52674 Released 2026-08-10 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream (v. 9) bsdtar-3.5.3-11.el9_8, libarchive-devel-3.5.3-11.el9_8
- Red Hat Enterprise Linux BaseOS (v. 9) libarchive-3.5.3-11.el9_8
- RHSA-2026:52675 Released 2026-08-10 · Red Hat rating Moderatelibarchive security update
- Red Hat Enterprise Linux AppStream (v. 10) bsdtar-3.7.7-10.el10_2, libarchive-devel-3.7.7-10.el10_2
- Red Hat Enterprise Linux BaseOS (v. 10) libarchive-3.7.7-10.el10_2
- RHSA-2026:30333 Released 2026-06-26 · Red Hat rating ModerateRed Hat Hardened Images RPMs bug fix and enhancement update
- Red Hat Hardened Images bsdcat-3.8.8-2.hum1@aarch64, bsdcat-3.8.8-2.hum1@x86_64, bsdcpio-3.8.8-2.hum1@aarch64 +10
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Advisory ·
Red Hat Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 and 12 more products — RHSA-2026:54760
2 records Highest priority Priority HIGH 1 HIGH, 1 LOW
Other records, highest priority first
- TI-2026-11598 P11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingPriority LOW 27
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Container Platform 5 | Affected | No fix yet |
| Cert Manager support for Red Hat OpenShift release 1.17 | Fixed | RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82336, RHSA-2026:82888 |
| Cert Manager support for Red Hat OpenShift release 1.18 | Fixed | RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857 |
| Cert Manager support for Red Hat OpenShift release 1.20 | Fixed | RHSA-2026:72394, RHSA-2026:72395, RHSA-2026:72399, RHSA-2026:72470, RHSA-2026:72475, RHSA-2026:72476, RHSA-2026:72502 |
| Red Hat AI Inference Server 3.5 | Fixed | RHSA-2026:82061, RHSA-2026:82371 |
| Red Hat Discovery 2 | Fixed | RHSA-2026:54760, RHSA-2026:61783 |
| Red Hat Enterprise Linux AppStream (v. 10) | Fixed | RHSA-2026:52675 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2026:52674 |
| Red Hat Enterprise Linux AppStream E4S (v.9.2) | Fixed | RHSA-2026:58574 |
| Red Hat Enterprise Linux AppStream E4S (v.9.4) | Fixed | RHSA-2026:58573 |
| Red Hat Enterprise Linux AppStream EUS (v. 10.0) | Fixed | RHSA-2026:56954 |
| Red Hat Enterprise Linux AppStream EUS (v.9.6) | Fixed | RHSA-2026:58558 |
| Red Hat Enterprise Linux BaseOS (v. 10) | Fixed | RHSA-2026:52675 |
| Red Hat Enterprise Linux BaseOS (v. 9) | Fixed | RHSA-2026:52674 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.2) | Fixed | RHSA-2026:58574 |
| Red Hat Enterprise Linux BaseOS E4S (v.9.4) | Fixed | RHSA-2026:58573 |
| Red Hat Enterprise Linux BaseOS EUS (v. 10.0) | Fixed | RHSA-2026:56954 |
| Red Hat Enterprise Linux BaseOS EUS (v.9.6) | Fixed | RHSA-2026:58558 |
| Red Hat Hardened Images | Fixed | RHSA-2026:30333 |
| Red Hat OpenShift AI 3.0 | Fixed | RHSA-2026:73909, RHSA-2026:73959, RHSA-2026:73960, RHSA-2026:73961, RHSA-2026:73962 |
| Red Hat OpenShift AI 3.2 | Fixed | RHSA-2026:74458, RHSA-2026:74459, RHSA-2026:74460, RHSA-2026:74461, RHSA-2026:74462, RHSA-2026:74463 |
| Red Hat OpenShift AI 3.4 | Fixed | RHSA-2026:74674 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2026:65839 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2026:62409 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2026:67857 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2026:67935 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2026:70586 |
| Red Hat OpenShift Container Platform 4.18 | Fixed | RHSA-2026:65851, RHSA-2026:70615 |
| Red Hat OpenShift Container Platform 4.19 | Fixed | RHSA-2026:63044 |
| Red Hat OpenShift Container Platform 4.20 | Fixed | RHSA-2026:63100 |
| Red Hat OpenShift Container Platform 4.21 | Fixed | RHSA-2026:63041 |
| Red Hat OpenShift Container Platform 4.22 | Fixed | RHSA-2026:54769 |
| Red Hat Update Infrastructure 5 | Fixed | RHSA-2026:54387, RHSA-2026:58981 |
Not affected: 8 products
- Cert Manager support for Red Hat OpenShift release 1.20
- Red Hat Discovery 2
- Red Hat Enterprise Linux 6
- Red Hat Enterprise Linux 7
- Red Hat Enterprise Linux 8
- Red Hat OpenShift AI (RHOAI)
- Red Hat OpenShift Container Platform 4
- Red Hat Update Infrastructure 5
Timeline
- 2026-10-02 Threatist record created from CVE-2026-14164
- 2026-10-03 Alias added: GHSA-xq96-f7x8-gfx3
- 2026-10-09 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +8 · CNA
- 2026-10-13 Fix available: rhaii/vllm-gaudi-rhel9@1791427182 · CNA
- 2026-10-13 1 new reference · CNA
- 2026-10-13 Fix available: RHSA-2026:82061 · Red Hat
- 2026-10-13 Fix available: Red Hat AI Inference Server 3.5 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82371 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82336 · Red Hat
- 2026-10-14 Fix available: cert-manager/cert-manager-istio-csr-rhel9@1791378395, cert-manager/cert-manager-istio-csr-rhel9@1791459759, cert-manager/cert-manager-operator-rhel9@1789029076 +6 · CNA
- 2026-10-14 7 new references · CNA
- 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
- 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
- 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
- 2026-10-15 Fix available: cert-manager/cert-manager-operator-bundle@1791966259, cert-manager/cert-manager-operator-bundle@1791970484 · CNA
- 2026-10-15 2 new references · CNA
- 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18 · Red Hat
- 2026-10-31 Affected versions changed · CNA
- 2026-10-31 Affected versions changed · Red Hat
- 2026-11-06 Affected versions changed · CNA
- 2026-11-06 Affected versions changed · Red Hat
References
Advisory 51
- RHSA-2026:30333
- RHSA-2026:52674
- RHSA-2026:52675
- RHSA-2026:54387
- RHSA-2026:54760
- RHSA-2026:54769
- RHSA-2026:56954
- RHSA-2026:58558
- RHSA-2026:58573
- RHSA-2026:58574
- RHSA-2026:58981
- RHSA-2026:61783
- RHSA-2026:62409
- RHSA-2026:63041
- RHSA-2026:63044
- RHSA-2026:63100
- RHSA-2026:65839
- RHSA-2026:65851
- RHSA-2026:67857
- RHSA-2026:67935
- RHSA-2026:70586
- RHSA-2026:70615
- RHSA-2026:72394
- RHSA-2026:72395
- RHSA-2026:72399
- RHSA-2026:72470
- RHSA-2026:72475
- RHSA-2026:72476
- RHSA-2026:72502
- RHSA-2026:73909
- RHSA-2026:73959
- RHSA-2026:73960
- RHSA-2026:73961
- RHSA-2026:73962
- RHSA-2026:74458
- RHSA-2026:74459
- RHSA-2026:74460
- RHSA-2026:74461
- RHSA-2026:74462
- RHSA-2026:74463
- RHSA-2026:74674
- RHSA-2026:82061
- RHSA-2026:82304
- RHSA-2026:82322
- RHSA-2026:82336
- RHSA-2026:82347
- RHSA-2026:82354
- RHSA-2026:82371
- RHSA-2026:82372
- RHSA-2026:82857
- RHSA-2026:82888
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-14164 · CVE Program
- CVE-2026-14164 · NVD
- FIRST EPSS
- GHSA-xq96-f7x8-gfx3 · GitHub Advisory Database · CC BY 4.0
- CVE-2026-14164 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences