RHSA-2026:49668MediumCVSS 6.2

Red Hat Security Advisory: p11-kit security update

Published
August 3, 2026
Last Modified
August 12, 2026

🔗 CVE IDs covered (1)

CVE-2026-13757 →

📋 Description

CVE-2026-13757 — p11-kit: Stack exhaustion via unbounded recursion in RPC attribute parsing

🎯 Affected products63

  • Red Hat Enterprise Linux AppStream (v. 10)
  • Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-0:0.26.4-1.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-client-debuginfo-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-debuginfo-0:0.26.4-1.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debugsource-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • p11-kit-debugsource-0:0.26.4-1.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)
  • p11-kit-debugsource-0:0.26.4-1.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)
  • +33 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: This CVE requires same-user access to the p11-kit RPC Unix domain socket (/run/user/<uid>/p11-kit/pkcs11-*). Any process running as the socket-owning user can trigger the crash without further authentication. If p11-kit is managed via systemd --user, ensure `Restart=on-failure` is set in the unit file so that a crash is automatically recovered without manual intervention. Red Hat recommends updating p11-kit to version 0.26.3 or later, which introduces a recursion depth limit in the RPC attribute parsing and fully addresses this flaw.

🔗 References (4)