Moderate Vulnerability in p11-kit: Stack Exhaustion via Unbounded Recursion
Summary
RLSA-2026:49668: Moderate: p11-kit security update. Affects p11-kit versions < 0:0.26.4-1.el10_2. Fixed in 0:0.26.4-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The p11-kit package is designed to manage PKCS#11 modules, which are essential for cryptographic operations and secure communication. It includes the p11-kit-trust subpackage, which provides a PKCS#11 trust module that manages certificate anchors and blacklists based on configuration files. This functionality is critical for maintaining secure connections and ensuring the integrity of cryptographic operations.
Vulnerability Detail
The vulnerability identified as CVE-2026-13757 involves a stack exhaustion issue caused by unbounded recursion during RPC attribute parsing within the p11-kit package. This flaw can lead to denial of service, as the excessive recursion can exhaust system resources, potentially crashing the application or the system it runs on. The vulnerability is particularly concerning for systems that rely heavily on the p11-kit for cryptographic operations, as it may compromise the availability of these services.
How To Fix
Minimum fixed version
0:0.26.4-1.el10_2
This is the first release that contains the fix.
sudo dnf update p11-kitTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available security update as soon as possible.
Conclusion
The p11-kit package has a moderate vulnerability (CVE-2026-13757) that can lead to stack exhaustion due to unbounded recursion. Users are advised to update to the patched version to ensure the security and availability of their systems. Regular updates and monitoring for vulnerabilities are essential practices for maintaining software security.
See every vulnerability recorded for p11-kit →
FAQ
CVE-2026-13757 is a vulnerability in the p11-kit package that allows for stack exhaustion due to unbounded recursion in RPC attribute parsing.
The primary impact is denial of service, where the application or system may crash due to resource exhaustion, affecting the availability of cryptographic services.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The CVSS score for this vulnerability is 6.2, indicating a moderate severity level.
It is recommended to regularly check for updates and apply them promptly to minimize the risk of vulnerabilities in your software.
Related vulnerabilities
Recent vulnerabilities recorded for p11-kit.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
