p11-kit: A flaw was found in p11-kit
CVE-2026-18938 is fixed in 3 products on 1 platform, first by DEBIAN-CVE-2026-18938, released August 22, 2026. It is not reported as exploited. Patch Radar priority: Routine.
A flaw was found in p11-kit. A local attacker, or one with equivalent access to a reachable RPC channel, could exploit an integer overflow vulnerability. By sending specially crafted messages, the attacker can cause the system to miscalculate memory allocation for nested attributes. This leads to a memory corruption issue, specifically a heap out-of-bounds write, which can crash the p11-kit RPC parsing process, resulting in a Denial of Service (DoS). This vulnerability is only exploitable on 32 bit systems.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libp11-kit0 · Ubuntu 18.04.6 LTS (bionic) | 0.23.9-2ubuntu0.1+esm1 | libp11-kit0 0.23.9-2ubuntu0.1+esm1 | Sep 3, 2026 |
| libp11-kit0 · Ubuntu 20.04 LTS (focal) | 0.23.20-1ubuntu0.1+esm1 | libp11-kit0 0.23.20-1ubuntu0.1+esm1 | Sep 3, 2026 |
| libp11-kit0 · Ubuntu 22.04.1 LTS (jammy) | 0.24.0-6ubuntu0.1 | libp11-kit0 0.24.0-6ubuntu0.1 | Sep 3, 2026 |
| libp11-kit0 · Ubuntu 24.04.5 LTS (noble) | 0.25.3-4ubuntu2.2 | libp11-kit0 0.25.3-4ubuntu2.2 | Sep 3, 2026 |
| p11-kit · Debian 14 | 0.26.5-1 | DEBIAN-CVE-2026-18938 | Aug 22, 2026 |
| p11-kit · Ubuntu 18.04.6 LTS (bionic) | 0.23.9-2ubuntu0.1+esm1 | p11-kit 0.23.9-2ubuntu0.1+esm1 | Sep 3, 2026 |
| p11-kit · Ubuntu 20.04 LTS (focal) | 0.23.20-1ubuntu0.1+esm1 | p11-kit 0.23.20-1ubuntu0.1+esm1 | Sep 3, 2026 |
| p11-kit · Ubuntu 22.04.1 LTS (jammy) | 0.24.0-6ubuntu0.1 | p11-kit 0.24.0-6ubuntu0.1 | Sep 3, 2026 |
| p11-kit · Ubuntu 24.04.5 LTS (noble) | 0.25.3-4ubuntu2.2 | p11-kit 0.25.3-4ubuntu2.2 | Sep 3, 2026 |
| p11-kit · opensuse-leap 16.0 | 0.25.5-160000.3.1 | OPENSUSE-SU-2026:22105-1 | Nov 7, 2026 |
| p11-kit · sles 16.0 | 0.25.5-160000.3.1 | SUSE-SU-2026:24255-1 | Nov 7, 2026 |
| p11-kit-modules · Ubuntu 18.04.6 LTS (bionic) | 0.23.9-2ubuntu0.1+esm1 | p11-kit-modules 0.23.9-2ubuntu0.1+esm1 | Sep 3, 2026 |
| p11-kit-modules · Ubuntu 20.04 LTS (focal) | 0.23.20-1ubuntu0.1+esm1 | p11-kit-modules 0.23.20-1ubuntu0.1+esm1 | Sep 3, 2026 |
| p11-kit-modules · Ubuntu 22.04.1 LTS (jammy) | 0.24.0-6ubuntu0.1 | p11-kit-modules 0.24.0-6ubuntu0.1 | Sep 3, 2026 |
| p11-kit-modules · Ubuntu 24.04.5 LTS (noble) | 0.25.3-4ubuntu2.2 | p11-kit-modules 0.25.3-4ubuntu2.2 | Sep 3, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.