Red Hat Enterprise Linux Authorization Vulnerabilities

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have authorization-related vulnerabilities. These vulnerabilities stem from the clevis-PKCS11 pin component; the clevis-pkcs11-afunix-socket-unlock daemon creates AFUNIX sockets without explicitly restricting permissions or verifying client...

Red Hat Enterprise Linux information leakage vulnerability

Red Hat Enterprise Linux versions 7, 8, 9, and 10 have a vulnerability related to information leakage. This vulnerability stems from the clevis-decrypt-pkcs11 script in clevis PKCS11, which passes the PKCS11 token PIN as a command-line parameter to the pkcs11-tool. This could allow any local user...

CVE-2026-109976: Out-of-bounds Write

A flaw was found in the clevis PKCS11 pin. The clevis-pkcs11-afunix-socket-unlock daemon crashes when an AFUNIX client connects to the data socket without a bound address, due to an integer underflow in the getpeername result handling. This causes a denial of service, preventing LUKS disk...

Red Hat Enterprise Linux buffer error vulnerability

Red Hat Enterprise Linux versions 10 and 9 have a buffer error vulnerability. This vulnerability stems from integer underflow in the processing of the getpeername result from the clevis PKCS11 pin library. When an AFUNIX client connects to a data socket without binding an address, it can cause th...