# CVE-2026-14164

## Summary

- **CVE ID:** CVE-2026-14164
- **Severity:** HIGH
- **CVSS Score:** 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
- **CWE:** CWE-415
- **Published:** Jun 30, 2026
- **Last Modified:** Sep 17, 2026

## Description

A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain stale after being freed during unpacking state reinitialization. Subsequent processing of another archive entry can trigger a second free of the same memory region, resulting in a double-free condition. Successful exploitation may cause applications using the vulnerable libarchive API to terminate unexpectedly, leading to a denial of service.

## Affected Products

- Red Hat — Red Hat Hardened Images (3.8.8-2.hum1)
- Red Hat — Red Hat Enterprise Linux 10 (0:3.7.7-10.el10_2)
- Red Hat — Red Hat Enterprise Linux 9 (0:3.5.3-11.el9_8)
- Red Hat — Red Hat Update Infrastructure 5 (1786435241)
- Red Hat — Red Hat Update Infrastructure 5 (1786533457)
- Red Hat — Red Hat Update Infrastructure 5 (1786533449)
- Red Hat — Red Hat Update Infrastructure 5 (1786435483)
- Red Hat — Red Hat Update Infrastructure 5 (1786533529)
- Red Hat — Red Hat Discovery 2 (1786638573)
- Red Hat — Red Hat OpenShift Container Platform 4.22 (4.22.9.8.202608130832-0)
- Red Hat — Red Hat Enterprise Linux 10.0 Extended Update Support (0:3.7.7-5.el10_0.1)
- Red Hat — Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions (0:3.5.3-5.el9_2.3)
- Red Hat — Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions (0:3.5.3-5.el9_4.2)
- Red Hat — Red Hat Enterprise Linux 9.6 Extended Update Support (0:3.5.3-7.el9_6.2)
- Red Hat — Red Hat Update Infrastructure 5 (1787241211)
- Red Hat — Red Hat Update Infrastructure 5 (1787135742)
- Red Hat — Red Hat Update Infrastructure 5 (1787241260)
- Red Hat — Red Hat Discovery 2 (1788206196)
- Red Hat — Red Hat OpenShift Container Platform 4.20 (4.20.9.6.202609021029-0)
- Red Hat — Red Hat OpenShift Container Platform 4.21 (4.21.9.6.202609021100-0)
- Red Hat — Red Hat OpenShift Container Platform 4.19 (4.19.9.6.202609021231-0)
- Red Hat — Red Hat OpenShift Container Platform 4.14 (414.92.202609011250-0)
- Red Hat — Red Hat OpenShift Container Platform 4.18 (418.94.202609031320-0)

## References

- [CNA](https://access.redhat.com/security/cve/CVE-2026-14164)
- [CNA](https://bugzilla.redhat.com/show_bug.cgi?id=2493411)
- [CNA](https://github.com/libarchive/libarchive/issues/3069)
- [CNA](https://github.com/libarchive/libarchive/pull/3071)
- [CNA](https://access.redhat.com/errata/RHSA-2026:30333)
- [CNA](https://access.redhat.com/errata/RHSA-2026:52675)
- [CNA](https://access.redhat.com/errata/RHSA-2026:52674)
- [CNA](https://access.redhat.com/errata/RHSA-2026:54387)
- [CNA](https://access.redhat.com/errata/RHSA-2026:54760)
- [CNA](https://access.redhat.com/errata/RHSA-2026:54769)
- [CNA](https://access.redhat.com/errata/RHSA-2026:56954)
- [CNA](https://access.redhat.com/errata/RHSA-2026:58573)
- [CNA](https://access.redhat.com/errata/RHSA-2026:58574)
- [CNA](https://access.redhat.com/errata/RHSA-2026:58558)
- [CNA](https://access.redhat.com/errata/RHSA-2026:58981)
- [CNA](https://access.redhat.com/errata/RHSA-2026:61783)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63100)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63041)
- [CNA](https://access.redhat.com/errata/RHSA-2026:63044)
- [CNA](https://access.redhat.com/errata/RHSA-2026:62409)
- [CNA](https://access.redhat.com/errata/RHSA-2026:65851)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.49%
- **EPSS Percentile:** 40.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._