{"api_version":"1","generated_at":"2026-10-16T14:57:45+00:00","cve":"CVE-2026-14164","urls":{"html":"https://cve.report/CVE-2026-14164","api":"https://cve.report/api/cve/CVE-2026-14164.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-14164","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-14164"},"summary":{"title":"Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()","description":"A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.","state":"PUBLISHED","assigner":"redhat","published_at":"2026-06-30 07:16:32","updated_at":"2026-10-14 20:17:33"},"problem_types":["CWE-415","CWE-415 Double Free"],"metrics":[{"version":"3.1","source":"secalert@redhat.com","type":"Secondary","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"7.5","severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"}}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:58573","name":"https://access.redhat.com/errata/RHSA-2026:58573","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82061","name":"https://access.redhat.com/errata/RHSA-2026:82061","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65851","name":"https://access.redhat.com/errata/RHSA-2026:65851","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72399","name":"https://access.redhat.com/errata/RHSA-2026:72399","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82857","name":"https://access.redhat.com/errata/RHSA-2026:82857","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72395","name":"https://access.redhat.com/errata/RHSA-2026:72395","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82354","name":"https://access.redhat.com/errata/RHSA-2026:82354","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72394","name":"https://access.redhat.com/errata/RHSA-2026:72394","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72470","name":"https://access.redhat.com/errata/RHSA-2026:72470","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54769","name":"https://access.redhat.com/errata/RHSA-2026:54769","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:62409","name":"https://access.redhat.com/errata/RHSA-2026:62409","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/security/cve/CVE-2026-14164","name":"https://access.redhat.com/security/cve/CVE-2026-14164","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:65839","name":"https://access.redhat.com/errata/RHSA-2026:65839","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:52675","name":"https://access.redhat.com/errata/RHSA-2026:52675","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/libarchive/libarchive/pull/3071","name":"https://github.com/libarchive/libarchive/pull/3071","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:30333","name":"https://access.redhat.com/errata/RHSA-2026:30333","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:70615","name":"https://access.redhat.com/errata/RHSA-2026:70615","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2493411","name":"https://bugzilla.redhat.com/show_bug.cgi?id=2493411","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82304","name":"https://access.redhat.com/errata/RHSA-2026:82304","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:56954","name":"https://access.redhat.com/errata/RHSA-2026:56954","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63044","name":"https://access.redhat.com/errata/RHSA-2026:63044","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:70586","name":"https://access.redhat.com/errata/RHSA-2026:70586","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:67935","name":"https://access.redhat.com/errata/RHSA-2026:67935","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:52674","name":"https://access.redhat.com/errata/RHSA-2026:52674","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:67857","name":"https://access.redhat.com/errata/RHSA-2026:67857","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://github.com/libarchive/libarchive/issues/3069","name":"https://github.com/libarchive/libarchive/issues/3069","refsource":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","name":"https://access.redhat.com/errata/RHSA-2026:58981","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74674","name":"https://access.redhat.com/errata/RHSA-2026:74674","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74460","name":"https://access.redhat.com/errata/RHSA-2026:74460","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:58558","name":"https://access.redhat.com/errata/RHSA-2026:58558","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82336","name":"https://access.redhat.com/errata/RHSA-2026:82336","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82372","name":"https://access.redhat.com/errata/RHSA-2026:82372","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54387","name":"https://access.redhat.com/errata/RHSA-2026:54387","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74459","name":"https://access.redhat.com/errata/RHSA-2026:74459","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:73961","name":"https://access.redhat.com/errata/RHSA-2026:73961","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82347","name":"https://access.redhat.com/errata/RHSA-2026:82347","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:73959","name":"https://access.redhat.com/errata/RHSA-2026:73959","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72475","name":"https://access.redhat.com/errata/RHSA-2026:72475","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74461","name":"https://access.redhat.com/errata/RHSA-2026:74461","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:73960","name":"https://access.redhat.com/errata/RHSA-2026:73960","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74458","name":"https://access.redhat.com/errata/RHSA-2026:74458","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82888","name":"https://access.redhat.com/errata/RHSA-2026:82888","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:54760","name":"https://access.redhat.com/errata/RHSA-2026:54760","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:58574","name":"https://access.redhat.com/errata/RHSA-2026:58574","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63041","name":"https://access.redhat.com/errata/RHSA-2026:63041","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:73909","name":"https://access.redhat.com/errata/RHSA-2026:73909","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74462","name":"https://access.redhat.com/errata/RHSA-2026:74462","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72476","name":"https://access.redhat.com/errata/RHSA-2026:72476","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82371","name":"https://access.redhat.com/errata/RHSA-2026:82371","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:61783","name":"https://access.redhat.com/errata/RHSA-2026:61783","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:73962","name":"https://access.redhat.com/errata/RHSA-2026:73962","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:82322","name":"https://access.redhat.com/errata/RHSA-2026:82322","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:72502","name":"https://access.redhat.com/errata/RHSA-2026:72502","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:74463","name":"https://access.redhat.com/errata/RHSA-2026:74463","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://access.redhat.com/errata/RHSA-2026:63100","name":"https://access.redhat.com/errata/RHSA-2026:63100","refsource":"secalert@redhat.com","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-14164","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-14164","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","version":"unaffected 0:3.7.7-10.el10_2 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","version":"unaffected 0:3.7.7-5.el10_0.1 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:3.5.3-11.el9_8 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","version":"unaffected 0:3.5.3-11.el9_8 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","version":"unaffected 0:3.5.3-5.el9_2.3 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","version":"unaffected 0:3.5.3-5.el9_4.2 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","version":"unaffected 0:3.5.3-7.el9_6.2 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.13","version":"unaffected 413.92.202609080414-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.14","version":"unaffected 414.92.202609011250-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.15","version":"unaffected 415.92.202609140326-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.16","version":"unaffected 416.94.202609140240-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.17","version":"unaffected 417.94.202609191027-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 418.94.202609031320-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.18","version":"unaffected 418.94.202609171815-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.19","version":"unaffected 4.19.9.6.202609021231-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.20","version":"unaffected 4.20.9.6.202609021029-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.21","version":"unaffected 4.21.9.6.202609021100-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4.22","version":"unaffected 4.22.9.8.202608130832-0 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","version":"unaffected 1791371080 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","version":"unaffected 1791371069 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","version":"unaffected 1791788287 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","version":"unaffected 1791378395 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.17","version":"unaffected 1791970484 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","version":"unaffected 1791459707 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","version":"unaffected 1791459711 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","version":"unaffected 1791459759 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","version":"unaffected 1789029076 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.18","version":"unaffected 1791966259 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790223279 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790223719 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790272426 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790589998 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790589912 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790589914 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790589855 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Cert Manager support for Red Hat OpenShift release 1.20","version":"unaffected 1790598593 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","version":"unaffected 1791427182 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat AI Inference Server 3.5","version":"unaffected 1791818357 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Discovery 2","version":"unaffected 1786638573 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Discovery 2","version":"unaffected 1788206196 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Hardened Images","version":"unaffected 3.8.8-2.hum1 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","version":"unaffected 1790276886 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","version":"unaffected 1790276884 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","version":"unaffected 1790277045 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","version":"unaffected 1790276889 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","version":"unaffected 1790276974 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703497 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703506 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703590 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703568 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703586 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","version":"unaffected 1790703494 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","version":"unaffected 1790703542 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1786435241 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1786533457 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1786533449 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1786435483 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1786533529 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1787241211 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1787135742 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","version":"unaffected 1787241260 * rpm","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","version":"","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","version":"","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","version":"","platforms":[]},{"source":"CNA","vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","version":"","platforms":[]}],"timeline":[{"source":"CNA","time":"2026-06-26T00:00:00.000Z","lang":"en","value":"Reported to Red Hat."},{"source":"CNA","time":"2026-05-24T00:00:00.000Z","lang":"en","value":"Made public."}],"solutions":[],"workarounds":[{"source":"CNA","title":"","value":"No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update once it becomes available.","time":"","lang":"en"}],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"14164","cve":"CVE-2026-14164","epss":"0.007920000","percentile":"0.553560000","score_date":"2026-10-14","updated_at":"2026-10-15 00:01:22"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2026-14164","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-06-30T12:20:53.891666Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2026-06-30T12:22:17.042Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["exploit"],"url":"https://github.com/libarchive/libarchive/issues/3069"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.7.7-10.el10_2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.7.7-5.el10_0.1","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.5.3-11.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.5.3-11.el9_8","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.5.3-5.el9_2.3","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.5.3-5.el9_4.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"],"defaultStatus":"affected","packageName":"libarchive","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:3.5.3-7.el9_6.2","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.13::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.13","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"413.92.202609080414-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.14::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.14","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"414.92.202609011250-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.15::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.15","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"415.92.202609140326-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.16::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.16","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"416.94.202609140240-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.17::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"417.94.202609191027-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"418.94.202609031320-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.18::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"418.94.202609171815-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.19::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.19","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.19.9.6.202609021231-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.20::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.20.9.6.202609021029-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.21::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.21","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.21.9.6.202609021100-0","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4.22::el9"],"defaultStatus":"affected","packageName":"openshift/ose-rhel-coreos-9","product":"Red Hat OpenShift Container Platform 4.22","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"4.22.9.8.202608130832-0","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791371080","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791371069","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791788287","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-istio-csr-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791378395","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.17::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-bundle","product":"Cert Manager support for Red Hat OpenShift release 1.17","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791970484","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459707","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459711","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-istio-csr-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791459759","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1789029076","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.18::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-bundle","product":"Cert Manager support for Red Hat OpenShift release 1.18","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791966259","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790223279","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-istio-csr-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790223719","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790272426","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-acmesolver-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790589998","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/jetstack-cert-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790589912","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-istio-csr-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790589914","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-operator-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790589855","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:cert_manager:1.20::el9"],"defaultStatus":"affected","packageName":"cert-manager/cert-manager-trust-manager-rhel9","product":"Cert Manager support for Red Hat OpenShift release 1.20","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790598593","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"defaultStatus":"affected","packageName":"rhaii/vllm-gaudi-rhel9","product":"Red Hat AI Inference Server 3.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791427182","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:ai_inference_server:3.5::el9"],"defaultStatus":"affected","packageName":"rhaii/vllm-spyre-rhel9","product":"Red Hat AI Inference Server 3.5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1791818357","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-server-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786638573","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:discovery:2::el9"],"defaultStatus":"affected","packageName":"discovery/discovery-ui-rhel9","product":"Red Hat Discovery 2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1788206196","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"],"defaultStatus":"affected","packageName":"libarchive-main","product":"Red Hat Hardened Images","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"3.8.8-2.hum1","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-rocm-rhel9","product":"Red Hat OpenShift AI 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790276886","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-tpu-rhel9","product":"Red Hat OpenShift AI 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790276884","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-cpu-rhel9","product":"Red Hat OpenShift AI 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790277045","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-spyre-rhel9","product":"Red Hat OpenShift AI 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790276889","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-cuda-rhel9","product":"Red Hat OpenShift AI 3.0","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790276974","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-tpu-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703497","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-rocm-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703506","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-cpu-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703590","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-spyre-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703568","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-cuda-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703586","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-rocm-rhel9","product":"Red Hat OpenShift AI 3.2","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703494","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"],"defaultStatus":"affected","packageName":"rhai/base-image-neuron-rhel9","product":"Red Hat OpenShift AI 3.4","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1790703542","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-kubernetes-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786435241","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786533457","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/haproxy-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786533449","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786435483","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1786533529","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/cds-kubernetes-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787241211","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/installer-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787135742","versionType":"rpm"}]},{"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"],"defaultStatus":"affected","packageName":"rhui5/rhua-tp-rhel9","product":"Red Hat Update Infrastructure 5","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"1787241260","versionType":"rpm"}]},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unaffected","packageName":"libarchive","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"],"defaultStatus":"unaffected","packageName":"libarchive","product":"Red Hat Enterprise Linux 7","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:8"],"defaultStatus":"unaffected","packageName":"libarchive","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat"},{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"],"defaultStatus":"unaffected","packageName":"openshift/ose-rhel-coreos-8","product":"Red Hat OpenShift Container Platform 4","vendor":"Red Hat"}],"datePublic":"2026-05-24T00:00:00.000Z","descriptions":[{"lang":"en","value":"A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service."}],"metrics":[{"other":{"content":{"namespace":"https://access.redhat.com/security/updates/classification/","value":"Moderate"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-415","description":"Double Free","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-10-14T19:24:49.682Z","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","shortName":"redhat"},"references":[{"name":"RHSA-2026:30333","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:30333"},{"name":"RHSA-2026:52674","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:52674"},{"name":"RHSA-2026:52675","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:52675"},{"name":"RHSA-2026:54387","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54387"},{"name":"RHSA-2026:54760","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54760"},{"name":"RHSA-2026:54769","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:54769"},{"name":"RHSA-2026:56954","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:56954"},{"name":"RHSA-2026:58558","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:58558"},{"name":"RHSA-2026:58573","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:58573"},{"name":"RHSA-2026:58574","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:58574"},{"name":"RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:58981"},{"name":"RHSA-2026:61783","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:61783"},{"name":"RHSA-2026:62409","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:62409"},{"name":"RHSA-2026:63041","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63041"},{"name":"RHSA-2026:63044","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63044"},{"name":"RHSA-2026:63100","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:63100"},{"name":"RHSA-2026:65839","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65839"},{"name":"RHSA-2026:65851","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:65851"},{"name":"RHSA-2026:67857","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:67857"},{"name":"RHSA-2026:67935","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:67935"},{"name":"RHSA-2026:70586","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:70586"},{"name":"RHSA-2026:70615","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:70615"},{"name":"RHSA-2026:72394","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72394"},{"name":"RHSA-2026:72395","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72395"},{"name":"RHSA-2026:72399","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72399"},{"name":"RHSA-2026:72470","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72470"},{"name":"RHSA-2026:72475","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72475"},{"name":"RHSA-2026:72476","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72476"},{"name":"RHSA-2026:72502","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:72502"},{"name":"RHSA-2026:73909","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:73909"},{"name":"RHSA-2026:73959","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:73959"},{"name":"RHSA-2026:73960","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:73960"},{"name":"RHSA-2026:73961","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:73961"},{"name":"RHSA-2026:73962","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:73962"},{"name":"RHSA-2026:74458","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74458"},{"name":"RHSA-2026:74459","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74459"},{"name":"RHSA-2026:74460","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74460"},{"name":"RHSA-2026:74461","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74461"},{"name":"RHSA-2026:74462","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74462"},{"name":"RHSA-2026:74463","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74463"},{"name":"RHSA-2026:74674","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:74674"},{"name":"RHSA-2026:82061","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82061"},{"name":"RHSA-2026:82304","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82304"},{"name":"RHSA-2026:82322","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82322"},{"name":"RHSA-2026:82336","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82336"},{"name":"RHSA-2026:82347","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82347"},{"name":"RHSA-2026:82354","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82354"},{"name":"RHSA-2026:82371","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82371"},{"name":"RHSA-2026:82372","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82372"},{"name":"RHSA-2026:82857","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82857"},{"name":"RHSA-2026:82888","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2026:82888"},{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2026-14164"},{"name":"RHBZ#2493411","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2493411"},{"url":"https://github.com/libarchive/libarchive/issues/3069"},{"url":"https://github.com/libarchive/libarchive/pull/3071"}],"timeline":[{"lang":"en","time":"2026-06-26T00:00:00.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-05-24T00:00:00.000Z","value":"Made public."}],"title":"Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()","workarounds":[{"lang":"en","value":"No mitigation is currently available that meets Red Hat Product Security's standards for usability, deployment, applicability, or stability. Customers are advised to apply the appropriate security update once it becomes available."}],"x_generator":{"engine":"cvelib 1.8.0"},"x_redhatCweChain":"CWE-415: Double Free"}},"cveMetadata":{"assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","assignerShortName":"redhat","cveId":"CVE-2026-14164","datePublished":"2026-06-30T06:29:23.549Z","dateReserved":"2026-06-30T05:30:04.144Z","dateUpdated":"2026-10-14T19:24:49.682Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-06-30 07:16:32","lastModifiedDate":"2026-10-14 20:17:33","problem_types":["CWE-415","CWE-415 Double Free"],"metrics":{"cvssMetricV31":[{"source":"secalert@redhat.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-06-30T12:20:53.891666Z","id":"CVE-2026-14164","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"14164","Ordinal":"1","Title":"Libarchive: double-free vulnerability in rar5 decompression logi","CVE":"CVE-2026-14164","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"14164","Ordinal":"1","NoteData":"A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.","Type":"Description","Title":"Libarchive: double-free vulnerability in rar5 decompression logi"}]}}}