Description
A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.
Metrics
CVSS 3.1 7.5/10
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.18 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | — |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat Discovery 2 | — |
| Red Hat | Red Hat Discovery 2 | — |
| Red Hat | Red Hat Hardened Images | — |
| Red Hat | Red Hat OpenShift AI 3.0 | — |
| Red Hat | Red Hat OpenShift AI 3.0 | — |
| Red Hat | Red Hat OpenShift AI 3.0 | — |
| Red Hat | Red Hat OpenShift AI 3.0 | — |
| Red Hat | Red Hat OpenShift AI 3.0 | — |
| Red Hat | Red Hat OpenShift AI 3.2 | — |
| Red Hat | Red Hat OpenShift AI 3.2 | — |
| Red Hat | Red Hat OpenShift AI 3.2 | — |
| Red Hat | Red Hat OpenShift AI 3.2 | — |
References
- https://access.redhat.com/errata/RHSA-2026:30333
- https://access.redhat.com/errata/RHSA-2026:52674
- https://access.redhat.com/errata/RHSA-2026:52675
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:54760
- https://access.redhat.com/errata/RHSA-2026:54769
- https://access.redhat.com/errata/RHSA-2026:56954
- https://access.redhat.com/errata/RHSA-2026:58558
- https://access.redhat.com/errata/RHSA-2026:58573
- https://access.redhat.com/errata/RHSA-2026:58574
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:61783
- https://access.redhat.com/errata/RHSA-2026:62409
- https://access.redhat.com/errata/RHSA-2026:63041
- https://access.redhat.com/errata/RHSA-2026:63044
- https://access.redhat.com/errata/RHSA-2026:63100
- https://access.redhat.com/errata/RHSA-2026:65839
- https://access.redhat.com/errata/RHSA-2026:65851
- https://access.redhat.com/errata/RHSA-2026:67857
- https://access.redhat.com/errata/RHSA-2026:67935
- https://access.redhat.com/errata/RHSA-2026:70586
- https://access.redhat.com/errata/RHSA-2026:70615
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:82061
- https://access.redhat.com/errata/RHSA-2026:82304
- https://access.redhat.com/errata/RHSA-2026:82322
- https://access.redhat.com/errata/RHSA-2026:82336
- https://access.redhat.com/errata/RHSA-2026:82347
- https://access.redhat.com/errata/RHSA-2026:82354
- https://access.redhat.com/errata/RHSA-2026:82371
- https://access.redhat.com/errata/RHSA-2026:82372
- https://access.redhat.com/errata/RHSA-2026:82857
- https://access.redhat.com/errata/RHSA-2026:82888
- https://access.redhat.com/security/cve/CVE-2026-14164
- https://bugzilla.redhat.com/show_bug.cgi?id=2493411
- https://github.com/libarchive/libarchive/issues/3069
- https://github.com/libarchive/libarchive/pull/3071
- https://github.com/libarchive/libarchive/issues/3069
Timeline
- Published
- Jun 30, 2026
- Last modified
- Nov 6, 2026
- NVD status
- Awaiting Analysis