Log in Start free

Vulnerability · Published Aug 28, 2026 · Assigned by redhat

CVE-2026-82327Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data

Medium 5.5

In plain English

A medium-severity security flaw in Red Hat Enterprise Linux 10 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 94.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in libsolv, a dependency-resolution library used by RPM-based package managers such as dnf and zypper to work with .solv repository cache files. When libsolv rewrites a .solv cache file, it reads directory-id values from the file's compressed filelist data without validating that they fall within the expected range. A corrupted or specially crafted .solv cache file (for example, one left in a torn state after an unclean system shutdown) can cause an out-of-bounds memory write when a tool such as dnf, yum, or zypper next processes it. Successful exploitation is expected to result in a crash of the affected tool (denial of service); it is not expected to allow arbitrary code execution because the out-of-bounds write always stores a fixed, non-attacker-controlled value.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12libsolvno fix listedDEBIAN-CVE-2026-82327
Debian:13libsolvno fix listedDEBIAN-CVE-2026-82327
Debian:14libsolvno fix listedDEBIAN-CVE-2026-82327
Ubuntu:22.04:LTSlibsolvno fix listedUBUNTU-CVE-2026-82327
Ubuntu:24.04:LTSlibsolvno fix listedUBUNTU-CVE-2026-82327
Ubuntu:26.04:LTSlibsolvno fix listedUBUNTU-CVE-2026-82327
Ubuntu:26.10libsolvno fix listedUBUNTU-CVE-2026-82327

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Hardened Images see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat OpenShift Container Platform 4 see references
Red Hat Red Hat Satellite 6 see references
Red Hat Red Hat Satellite 6 see references
Red Hat Red Hat Satellite 6 see references
Red Hat Red Hat Satellite 6 see references
Red Hat Red Hat Update Infrastructure 4 for Cloud Providers see references

Weakness: CWE-129 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References