CVE-2026-42014 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
A use-after-free flaw in GnuTLS allows attackers to cause denial of service or execute code via crafted PIN change requests.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-42014?
CVE-2026-42014 is a medium-severity use after free vulnerability in Cert Manager support for Red Hat OpenShift release 1.17, published on 16 Jun 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.
Weakness: CWE-825
Which versions are affected by CVE-2026-42014?
Linux distribution packages (10)
gnutls SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Micro 5.4 | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Micro 5.5 | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Server 15 SP5-LTSS | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 3.7.3-150400.4.62.1 |
gnutls SUSE:Linux Enterprise Server for SAP Applications 15 SP5 | All versions | 3.7.3-150400.4.62.1 |
How do I fix CVE-2026-42014?
Apply the vendor's patch.
Upgrade to the fixed version. These bugs are found with fuzzing and sanitisers and avoided by memory-safe languages. More about Use after free.
Is CVE-2026-42014 being exploited?
There is no known exploitation of CVE-2026-42014 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2026-42014, AZL-90149, BELL-CVE-2026-42014, DEBIAN-CVE-2026-42014, ECHO-b315-3ec3-9f18, GHSA-m4m5-7xc2-xc7g and 1 more.