Cyber Resilience

CVE-2026-13757

DoS in Redhat Enterprise Linux 10.0 … 9.0

Published
29 June 2026
Modified
13 July 2026
Patch / advisory
CVSS Score v3.1 6.2
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0014 3th percentile
Risk Priority 35 floored blend · peak EPSS

Summary

CVE-2026-13757 is a medium-severity Uncontrolled Recursion (CWE-674) vulnerability in Redhat Enterprise Linux. Its CVSS base score is 6.2 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 3th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-6 (Least Privilege) and SI-10 (Information Input Validation) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

A flaw was found in p11-kit. The RPC message attribute parsing functions p11_rpc_message_get_attribute() and p11_rpc_message_get_attribute_array_value() form a mutually-recursive call chain with no recursion depth limit when processing nested CKA_WRAP_TEMPLATE, CKA_UNWRAP_TEMPLATE, and CKA_DERIVE_TEMPLATE attributes. An unauthenticated attacker with local access to…

more

the p11-kit RPC Unix domain socket can send a specially crafted request with deeply nested template attributes, causing stack exhaustion and crashing the p11-kit server process and its dependent services.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Why these techniques?

Uncontrolled recursion in local RPC attribute parsing directly enables application-layer DoS via crafted input (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v19.0

CVEs Like This One

CVE-2026-2100Same product: P11-Kit Project P11-Kit
CVE-2026-0990Same product: Redhat Enterprise Linux
CVE-2026-0989Same product: Redhat Enterprise Linux
CVE-2026-55653Same product: Redhat Enterprise Linux
CVE-2026-6844Same product: Redhat Enterprise Linux
CVE-2026-5745Same product: Redhat Enterprise Linux
CVE-2026-4426Same product: Redhat Enterprise Linux
CVE-2026-6845Same product: Redhat Enterprise Linux
CVE-2026-0966Same product: Redhat Enterprise Linux
CVE-2026-9149Same product: Redhat Enterprise Linux

Affected Assets

redhat
hardened images
all versions
redhat
openshift container platform
4.0 — 4.22.1
redhat
enterprise linux
10.0, 6.0, 7.0, 8.0, 9.0
p11-kit project
p11-kit
all versions

Mitigating Controls

Control response

Prevent
Stop it (NIST 800-53)
  • SI-10 Information Input Validation
  • AC-6 Least Privilege
  • SC-7 Boundary Protection
Detect
Catch it (NIST detect / respond)

Harden
Shrink the surface (DISA STIG)

Validate
Prove the fix (OWASP ASVS)

Mitigating Controls (NIST 800-53 r5) AI

prevent

Directly mitigates the uncontrolled recursion in p11_rpc_message_get_attribute* by requiring validation of nested CKA_*_TEMPLATE attributes before processing.

prevent

Restricts which processes or users may connect to the p11-kit RPC Unix domain socket, reducing the attack surface for the crafted nested-attribute DoS.

prevent

Enforces boundary controls on the local RPC socket (e.g., socket permissions, SELinux labeling) so that only authorized local clients can reach the vulnerable parser.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 mostly match
prevents

Secure SDLC practices directly prevent coding errors such as missing recursion limits or termination conditions.

DE.CM-09 partial match
prevents

Runtime monitoring of compute resources can detect excessive consumption caused by uncontrolled recursion.

ID.RA-01 partial match
prevents

Vulnerability identification processes can discover and record uncontrolled recursion flaws before deployment.

PR.IR-04 partial match
prevents

Capacity monitoring and resource provisioning can absorb or limit the impact of runaway recursion.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

detects

Security testing in development can detect excessive recursion via static analysis or fuzzing.

prevents

Secure development life cycle requires controls that prevent uncontrolled recursion through design and code review.

prevents

Application security requirements can mandate recursion limits or stack-depth checks.

prevents

Secure system architecture principles include resource-management and input-validation rules that limit recursion.

prevents

Secure coding standards directly prohibit or constrain recursive constructs that could exhaust stack or memory.

detects

Capacity management includes monitoring and limits that mitigate resource exhaustion from runaway recursion.

References