Loading story…
Red Hat released security updates for CVE-2026-14164, a Moderate-severity double-free flaw in libarchive's RAR5 decompression logic. The bug stems from a dangling filtered_buf pointer in init_unpack() within archive_read_support_format_rar5.c, allowing a specially crafted RAR5 archive to trigger a second free of the same memory. Red Hat said the issue can crash affected applications and cause denial of service, with impact centered on availability rather than confidentiality or integrity.
The vendor published multiple advisories covering RHEL 9 support streams, including RHSA-2026:58558 for RHEL 9.6, RHSA-2026:58573 for RHEL 9.4 channels, and RHSA-2026:58574 for RHEL 9.2 SAP and lifecycle variants, with updated libarchive packages released across x86_64, aarch64, ppc64le, and s390x. Red Hat's bug tracking also said fixes extend to other products, including RHEL 10 and OpenShift Container Platform 4.22. Tenable published a Nessus detection plugin for exposed RHEL 9 systems and noted that, at publication, no known exploits were available.
See real exploitation activity before you spend the cycle.
5 events from the most recent confirmed update back to the earliest known activity.
Red Hat published advisory RHSA-2026:58574 for RHEL 9.2 Update Services for SAP Solutions and related lifecycle variants. The advisory released libarchive 3.5.3-5.el9_2.3 packages to fix CVE-2026-14164 across multiple architectures.
Red Hat published advisory RHSA-2026:58573 for RHEL 9.4 update channels including SAP Solutions, AUS, and Extended Life Cycle variants. The update released libarchive 3.5.3-5.el9_4.2 packages to remediate CVE-2026-14164.
Red Hat published advisory RHSA-2026:58558 for RHEL 9.6 Extended Update Support and related channels, releasing libarchive 3.5.3-7.el9_6.2 to fix CVE-2026-14164 across x86_64, aarch64, ppc64le, and s390x variants.
CVE-2026-14164, a double-free flaw in libarchive's RAR5 decompression logic caused by a dangling filtered_buf pointer in init_unpack(), was published. The issue can be triggered by a crafted RAR5 archive to cause an application crash and denial of service.
Red Hat documented CVE-2026-14164 in Bugzilla entry 2493411, describing the double-free in archive_read_support_format_rar5.c and noting that crafted RAR5 archives could trigger a second free and crash affected applications.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
5 references tracked. Mallory keeps watching after this page renders.
tenable.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourceaccess.redhat.com
Open sourcebugzilla.redhat.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Red Hat released **Important** libarchive security updates for affected RHEL 7 ELS, RHEL 8, and RHEL 9 releases and subscription channels, including OpenShift Container Platform and RHEL-based middleware containers. The updates remediate `CVE-2026-4424`, a heap out-of-bounds read in RAR processing: a crafted archive can exploit an LZSS dictionary-size validation error after PPMd-to-LZSS transitions to expose heap memory through `archive_read_data()` before CRC validation. Systems that automatically process untrusted archives may be remotely triggerable without authentication or user interaction. The releases also fix `CVE-2026-5121`, an ISO9660 zisofs parsing integer overflow that can allocate an undersized buffer and copy attacker-controlled data beyond its bounds. The resulting heap overflow can potentially enable arbitrary code execution on **32-bit** targets, subject to allocator- and platform-specific heap grooming; 64-bit systems do not exhibit the same integer wraparound. Organizations should update libarchive and associated `bsdtar`, `bsdcat`, and `bsdcpio` packages using the applicable Red Hat advisory—for example, RHEL 9 packages `3.5.3-9.el9_7`, RHEL 8 packages `3.3.3-7.el8_10`, and RHEL 7 ELS packages `3.1.2-14.el7_9.2`—or later supported versions.
Aug 25, 2026
Red Hat released multiple **Important** security advisories for `gstreamer1-plugins-bad-free` across **Red Hat Enterprise Linux 9 and 10**, fixing two GStreamer vulnerabilities tracked as **`CVE-2026-59691`** and **`CVE-2026-59692`**. The first flaw is a heap out-of-bounds write in `rfbsrc/librfb` Hextile handling when processing a **16bpp framebuffer**, while the second is a stack buffer overflow in `openssl_verify_callback` tied to a **DTLS certificate Subject DN**. The advisories cover standard and extended support channels, including RHEL 9.4, 9.6, 9.8, and RHEL 10.0 product variants. Updated packages were issued for multiple architectures, including **`x86_64`**, **`aarch64`**, **`ppc64le`**, and **`s390x`**, with package versions including `1.22.1-6.el9_4.6`, `1.22.12-5.el9_6.6`, `1.22.12-7.el9_8.3`, `1.24.11-3.el10_0.6`, and `1.26.7-2.el10_2.6`. Affected offerings also include **Extended Update Support**, **Extended Life Cycle**, **SAP Solutions update services**, **4-years-of-updates/support variants**, and **CodeReady Linux Builder** repositories. Red Hat instructed customers to apply the updated packages through standard patching processes to remediate affected systems.
Aug 20, 2026
Red Hat released **RHSA-2025:13598** for Red Hat Enterprise Linux 10, updating kernel packages to remediate seven Moderate-severity vulnerabilities across `x86_64`, `aarch64`, `ppc64le`, and `s390x` systems, including applicable Extended Update Support and lifecycle channels. The flaws include a double-free condition, memory-management races, out-of-bounds reads, invalid memory access, and hardware-related kernel issues. Among the fixed issues, **CVE-2025-38079** affects the AF_ALG `algif_hash` socket `hash_accept` path: a local low-privileged attacker may trigger a double free and slab use-after-free through `accept(2)` under a specific `MSG_MORE` and `crypto_ahash_import` failure condition, potentially causing memory corruption or code execution. **CVE-2025-38084** fixes a hugetlb page-table race during virtual-memory-area splitting, while **CVE-2025-38159** corrects an rtw88 Wi-Fi-driver out-of-bounds read that could disclose memory or crash the kernel; preventing the `rtw88` module from loading is a temporary mitigation. Organizations should install the updated kernel and reboot affected RHEL 10 hosts.
Aug 26, 2026