---
id: CVE-2026-13757
title: A flaw was found in p11-kit
summary: >-
  A flaw was found in p11-kit. The RPC message attribute parsing functions
  p11_rpc_message_get_attribute() and
  p11_rpc_message_get_attribute_array_value() form a mutually-recursive call
  chain with no recursion depth limit when processing n…
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-674
vendor: redhat
product: hardened_images
affected:
  - hardened_images
  - 'openshift_container_platform >= 4.0, <= 4.22.1'
  - enterprise_linux = 6.0
  - enterprise_linux = 7.0
  - enterprise_linux = 8.0
  - enterprise_linux = 9.0
  - enterprise_linux = 10.0
  - p11-kit
published: '2026-06-29'
updated: '2026-07-11'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-13757'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2026:37469'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/security/cve/CVE-2026-13757'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2494556'
    label: secalert@redhat.com
  - url: 'https://github.com/advisories/GHSA-p2wm-69qx-x25w'
    label: secalert@redhat.com
tags:
  - nvd
epss: 0.00195
epssPercentile: 0.08088
ingestedAt: '2026-07-11T20:15:25.597Z'
---

## Overview

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

## Affected

- `hardened_images`
- `openshift_container_platform >= 4.0, <= 4.22.1`
- `enterprise_linux = 6.0`
- `enterprise_linux = 7.0`
- `enterprise_linux = 8.0`
- `enterprise_linux = 9.0`
- `enterprise_linux = 10.0`
- `p11-kit`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.