CVE-2026-15028: Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header

Severity: low (CVSS 3.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-10 · updated 2026-10-09
Weakness: CWE-805

Description

A flaw was found in libarchive. This vulnerability allows a remote attacker to trigger a heap overflow by providing a specially crafted tar archive. The issue occurs during the parsing of a PAX extended header containing a malformed SUN.holesdata sparse-file attribute. Successful exploitation could lead to a denial of service, making the system unavailable, or potentially allow for arbitrary code execution, giving the attacker control over the affected system.

Affected products

Red Hat OpenShift Container Platform 4.18: all versions
Red Hat Cost Management On-Premise 1: all versions — fixed in 1791460851
Red Hat Enterprise Linux 10: all versions — fixed in 0:3.7.7-11.el10_2
Red Hat Enterprise Linux 9: all versions
Red Hat Hardened Images: all versions — fixed in 3.8.8-2.1.hum1

How to fix

Upgrade to a fixed version: Red Hat Cost Management On-Premise 1 1791460851; Red Hat Enterprise Linux 10 0:3.7.7-11.el10_2; Red Hat Hardened Images 3.8.8-2.1.hum1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-15028 or the next vulnerability affects your stack