Stack Exhaustion Vulnerability in p11-kit Affecting Red Hat Products
CVE-2026-13757
Key Information:
- Vendor
Red Hat
- Status
- Vendor
- CVE Published:
- 29 June 2026
What is CVE-2026-13757?
A vulnerability exists in p11-kit where the functions responsible for parsing RPC message attributes can lead to a depth-unlimited recursive call when handling nested attribute templates such as CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE. This can be exploited by an unauthenticated attacker with local access to the p11-kit RPC Unix domain socket, allowing them to send specially crafted requests that trigger excessive recursion. As a result, the p11-kit server process may exhaust its stack memory, leading to a crash that affects its functionality and any dependent services.
Affected Version(s)
Cert Manager support for Red Hat OpenShift release 1.20 1790223279
Cert Manager support for Red Hat OpenShift release 1.20 1790223719
Cert Manager support for Red Hat OpenShift release 1.20 1790272426