CVE-2026-4111

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2026
Source publication: Mar 13, 2026
Source updated: Oct 14, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Libarchive: infinite loop denial of service in rar5 decompression via archive_read_data() in libarchive

A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Red Hat Enterprise Linux 10

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.7.7-5.el10_1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 10.0 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 10.0 Extended Update Support
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 10.0 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.7.7-5.el10_0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-7.el9_7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-7.el9_7	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-2.el9_0.3	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-5.el9_2.1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.4 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.4 Extended Update Support
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.4 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-4.el9_4.2	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 9.6 Extended Update Support

Vendor: Red Hat
Product: Red Hat Enterprise Linux 9.6 Extended Update Support
Platforms: Unknown
Default status: affected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat Enterprise Linux 9.6 Extended Update Support · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0:3.5.3-6.el9_6.1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.13

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.13
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.13 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
413.92.202604080111-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.14

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.14
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.14 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
414.92.202605060243-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.15

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.15
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.15 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
415.92.202605060220-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.16

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.16
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.16 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
416.94.202604211449-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.17

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.17
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.17 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
417.94.202605112123-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.18

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.18
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
418.94.202604140044-0	`unaffected`	rpm	*	Unavailable	None listed

Red Hat OpenShift Container Platform 4.19

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4.19
Platforms: Unknown
Default status: affected
Package: openshift/ose-rhel-coreos-9
Package collection: https://access.redhat.com/downloads/content/package-browser/

Red Hat OpenShift Container Platform 4.19 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
4.19.9.6.202604211219-0	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459707	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459711	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-istio-csr-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791459759	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1789029076	`unaffected`	rpm	*	Unavailable	None listed

Cert Manager support for Red Hat OpenShift release 1.18

Vendor: Red Hat
Product: Cert Manager support for Red Hat OpenShift release 1.18
Platforms: Unknown
Default status: affected
Package: cert-manager/cert-manager-operator-bundle
Package collection: https://catalog.redhat.com/software/containers/

Cert Manager support for Red Hat OpenShift release 1.18 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1791966259	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.2

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.2
Platforms: Unknown
Default status: affected
Package: rhaiis/model-opt-cuda-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1780681984	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.2

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.2
Platforms: Unknown
Default status: affected
Package: rhaiis/vllm-cuda-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775740563	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/model-opt-cuda-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1778244559	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/vllm-rocm-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1778244531	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/vllm-spyre-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1778244546	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/vllm-cuda-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775680192	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/vllm-rocm-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775680262	`unaffected`	rpm	*	Unavailable	None listed

Red Hat AI Inference Server 3.3

Vendor: Red Hat
Product: Red Hat AI Inference Server 3.3
Platforms: Unknown
Default status: affected
Package: rhaiis/model-opt-cuda-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat AI Inference Server 3.3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775749857	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-server-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775668717	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Discovery 2

Vendor: Red Hat
Product: Red Hat Discovery 2
Platforms: Unknown
Default status: affected
Package: discovery/discovery-ui-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Discovery 2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1775675922	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Hardened Images

Vendor: Red Hat
Product: Red Hat Hardened Images
Platforms: Unknown
Default status: affected
Package: libarchive-main
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Hardened Images · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
3.8.7-1.hum1	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Insights proxy 1.5

Vendor: Red Hat
Product: Red Hat Insights proxy 1.5
Platforms: Unknown
Default status: affected
Package: insights-proxy/insights-proxy-container-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Insights proxy 1.5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1776868961	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/cds-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1776868774	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/haproxy-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1776868744	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/installer-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1776868772	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Update Infrastructure 5

Vendor: Red Hat
Product: Red Hat Update Infrastructure 5
Platforms: Unknown
Default status: affected
Package: rhui5/rhua-rhel9
Package collection: https://catalog.redhat.com/software/containers/

Red Hat Update Infrastructure 5 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
1776868842	`unaffected`	rpm	*	Unavailable	None listed

Red Hat Enterprise Linux 6

Vendor: Red Hat
Product: Red Hat Enterprise Linux 6
Platforms: Unknown
Default status: unknown
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 7

Vendor: Red Hat
Product: Red Hat Enterprise Linux 7
Platforms: Unknown
Default status: unaffected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Enterprise Linux 8

Vendor: Red Hat
Product: Red Hat Enterprise Linux 8
Platforms: Unknown
Default status: unaffected
Package: libarchive
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: unaffected
Package: openshift/ose-rhel-coreos-8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.