PT-2026-28808 · Red Hat · Red Hat Enterprise Linux 10+5

Published 2026-03-30 · Updated 2026-03-30 · CVE-2026-5121

NVD

A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.

Related Identifiers

CVE-2026-5121

Affected Products

Red Hat Enterprise Linux 10

Red Hat Enterprise Linux 6

Red Hat Enterprise Linux 7

Red Hat Enterprise Linux 8

Red Hat Enterprise Linux 9

Red Hat Openshift Container Platform 4

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-5121 · Security Note
• https://access.redhat.com/security/cve/CVE-2026-5121 · Note
• https://github.com/libarchive/libarchive/pull/2934 · Note