CVE-2026-14164: Red Hat Cert Manager Support For Red Hat Openshift Release 1.20

High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days.

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

Affected products

Red Hat Cert Manager Support For Red Hat Openshift Release 1.20: before 1790223279 (fixed in 1790223279); before 1790223719 (fixed in 1790223719); before 1790272426 (fixed in 1790272426); before 1790589998 (fixed in 1790589998); before 1790589912 (fixed in 1790589912); before 1790589914 (fixed in 1790589914); …
Red Hat Red Hat Discovery 2: before 1786638573 (fixed in 1786638573); before 1788206196 (fixed in 1788206196)
Red Hat Red Hat Enterprise Linux 10: before 0:3.7.7-10.el10_2 (fixed in 0:3.7.7-10.el10_2)
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: before 0:3.7.7-5.el10_0.1 (fixed in 0:3.7.7-5.el10_0.1)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7
Red Hat Red Hat Enterprise Linux 8
Red Hat Red Hat Enterprise Linux 9: before 0:3.5.3-11.el9_8 (fixed in 0:3.5.3-11.el9_8)
Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:3.5.3-5.el9_2.3 (fixed in 0:3.5.3-5.el9_2.3)
Red Hat Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions: before 0:3.5.3-5.el9_4.2 (fixed in 0:3.5.3-5.el9_4.2)
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: before 0:3.5.3-7.el9_6.2 (fixed in 0:3.5.3-7.el9_6.2)
Red Hat Red Hat Hardened Images: before 3.8.8-2.hum1 (fixed in 3.8.8-2.hum1)
Red Hat Red Hat Openshift Ai 3.0: before 1790276886 (fixed in 1790276886); before 1790276884 (fixed in 1790276884); before 1790277045 (fixed in 1790277045); before 1790276889 (fixed in 1790276889); before 1790276974 (fixed in 1790276974)
Red Hat Red Hat Openshift Ai 3.2: before 1790703497 (fixed in 1790703497); before 1790703506 (fixed in 1790703506); before 1790703590 (fixed in 1790703590); before 1790703568 (fixed in 1790703568); before 1790703586 (fixed in 1790703586); before 1790703494 (fixed in 1790703494)
Red Hat Red Hat Openshift Ai 3.4: before 1790703542 (fixed in 1790703542)
Red Hat Red Hat Openshift Container Platform 4
Red Hat Red Hat Openshift Container Platform 4.13: before 413.92.202609080414-0 (fixed in 413.92.202609080414-0)
Red Hat Red Hat Openshift Container Platform 4.14: before 414.92.202609011250-0 (fixed in 414.92.202609011250-0)
Red Hat Red Hat Openshift Container Platform 4.15: before 415.92.202609140326-0 (fixed in 415.92.202609140326-0)
Red Hat Red Hat Openshift Container Platform 4.16: before 416.94.202609140240-0 (fixed in 416.94.202609140240-0)
Red Hat Red Hat Openshift Container Platform 4.17: before 417.94.202609191027-0 (fixed in 417.94.202609191027-0)
Red Hat Red Hat Openshift Container Platform 4.18: before 418.94.202609031320-0 (fixed in 418.94.202609031320-0); before 418.94.202609171815-0 (fixed in 418.94.202609171815-0)
Red Hat Red Hat Openshift Container Platform 4.19: before 4.19.9.6.202609021231-0 (fixed in 4.19.9.6.202609021231-0)
Red Hat Red Hat Openshift Container Platform 4.20: before 4.20.9.6.202609021029-0 (fixed in 4.20.9.6.202609021029-0)
Red Hat Red Hat Openshift Container Platform 4.21: before 4.21.9.6.202609021100-0 (fixed in 4.21.9.6.202609021100-0)
and 2 more

Published 2026-06-30. Last modified 2026-10-08.