Skip to content
OpenAdvisories

Description

A flaw was found in libarchive. A NULL pointer dereference vulnerability exists in the ACL parsing logic, specifically within the archive_acl_from_text_nl() function. When processing a malformed ACL string (such as a bare "d" or "default" tag without subsequent fields), the function fails to perform adequate validation before advancing the pointer. An attacker can exploit this by providing a maliciously crafted archive, causing an application utilizing the libarchive API (such as bsdtar) to crash, resulting in a Denial of Service (DoS).

Affected products

VendorProductAffectedFixed
Red Hat Red Hat Hardened Images — —
Red Hat Red Hat Enterprise Linux 10 — —
Red Hat Red Hat Enterprise Linux 6 — —
Red Hat Red Hat Enterprise Linux 7 — —
Red Hat Red Hat Enterprise Linux 8 — —
Red Hat Red Hat Enterprise Linux 9 — —
Red Hat Red Hat OpenShift AI (RHOAI) — —
Red Hat Red Hat OpenShift Container Platform 4 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 libarchive 3.8.8-1 —
Debian 13 libarchive No fix yet —
Debian 12 libarchive No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.04 LTS libarchive 3.8.5-1ubuntu2.2 —
Ubuntu 25.10 libarchive No fix yet —
Ubuntu 24.04 LTS libarchive 3.7.2-2ubuntu0.8 —
Ubuntu 22.04 LTS libarchive 3.6.0-1ubuntu1.8 —
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 20.04 LTS libarchive 3.4.0-2ubuntu1.5+esm3 —
ReleasePackageFixed inAdvisory
Red Hat Hardened Images 1 libarchive +1 3.8.7-1.hum1 RHSA-2026:8944

Advisories 2

References