Log in Start free

Vulnerability · Published Jun 30, 2026 · Assigned by redhat

CVE-2026-14164Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()

High 7.5

In plain English

A high-severity double free in Cert Manager support for Red Hat OpenShift release 1.17 from Red Hat. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.8%top 43.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10bsdtar3.7.7-10.el10_2ALSA-2026:52675
AlmaLinux:9bsdtar3.5.3-11.el9_8ALSA-2026:52674
AlmaLinux:10libarchive3.7.7-10.el10_2ALSA-2026:52675
AlmaLinux:9libarchive3.5.3-11.el9_8ALSA-2026:52674
AlmaLinux:10libarchive-devel3.7.7-10.el10_2ALSA-2026:52675
AlmaLinux:9libarchive-devel3.5.3-11.el9_8ALSA-2026:52674
Debian:12libarchive3.6.2-1+deb12u5DEBIAN-CVE-2026-14164
Debian:13libarchiveno fix listedDEBIAN-CVE-2026-14164
Debian:14libarchive3.8.8-1DEBIAN-CVE-2026-14164
Rocky Linux:10libarchive0:3.7.7-10.el10_2RLSA-2026:52675
Rocky Linux:9libarchive0:3.5.3-11.el9_8RLSA-2026:52674
Ubuntu:22.04:LTSlibarchive3.6.0-1ubuntu1.8UBUNTU-CVE-2026-14164
Ubuntu:24.04:LTSlibarchive3.7.2-2ubuntu0.8UBUNTU-CVE-2026-14164
Ubuntu:25.10libarchiveno fix listedUBUNTU-CVE-2026-14164
Ubuntu:26.04:LTSlibarchive3.8.5-1ubuntu2.2UBUNTU-CVE-2026-14164

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions see references
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support see references
Red Hat Red Hat OpenShift Container Platform 4.13 see references
Red Hat Red Hat OpenShift Container Platform 4.14 see references
Red Hat Red Hat OpenShift Container Platform 4.15 see references
Red Hat Red Hat OpenShift Container Platform 4.16 see references
Red Hat Red Hat OpenShift Container Platform 4.17 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.18 see references
Red Hat Red Hat OpenShift Container Platform 4.19 see references
Red Hat Red Hat OpenShift Container Platform 4.20 see references
Red Hat Red Hat OpenShift Container Platform 4.21 see references
Red Hat Red Hat OpenShift Container Platform 4.22 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.17 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.18 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.20 see references
Red Hat Cert Manager support for Red Hat OpenShift release 1.20 see references

Weakness: CWE-415 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References