CVE-2026-4111: Loop with Unreachable Exit Condition ('Infinite Loop') in Red Hat Red Hat Enterprise Linux 10
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
AI Analysis
Technical Summary
This vulnerability exists in the archive_read_data() function of the libarchive library's RAR5 decompression logic. When a specially crafted RAR5 archive is processed, internal logic can enter an infinite loop due to an unreachable exit condition, causing the decompression routine to consume CPU resources continuously. The archive appears structurally valid and passes checksum validation, preventing affected applications from detecting the issue before processing. This results in a denial-of-service condition. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with no confidentiality or integrity impact but high impact on availability. Red Hat has published multiple advisories and released fixes for affected products including Red Hat Enterprise Linux 10 and OpenShift Container Platform 4.19. Users are advised to upgrade to the updated packages and container images provided by Red Hat.
Potential Impact
The vulnerability allows attackers to cause a persistent denial-of-service (DoS) condition by triggering an infinite loop in the RAR5 decompression routine of libarchive. This results in continuous CPU resource consumption, potentially degrading or halting services that automatically process RAR5 archives. There is no impact on confidentiality or integrity. No known exploits are reported in the wild as of the latest advisories.
Mitigation Recommendations
Red Hat has released official security updates and patches for affected products, including Red Hat Enterprise Linux 10 and OpenShift Container Platform 4.19. Users should apply these updates promptly to remediate the vulnerability. For OpenShift Container Platform 4.19, updated container images and RPM packages are available, and users should follow Red Hat's documented upgrade procedures using the OpenShift CLI or web console. No additional mitigations are required beyond applying the official fixes.
CVE-2026-4111: Loop with Unreachable Exit Condition ('Infinite Loop') in Red Hat Red Hat Enterprise Linux 10
Description
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
CVSS v3.1
Score 7.5high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability exists in the archive_read_data() function of the libarchive library's RAR5 decompression logic. When a specially crafted RAR5 archive is processed, internal logic can enter an infinite loop due to an unreachable exit condition, causing the decompression routine to consume CPU resources continuously. The archive appears structurally valid and passes checksum validation, preventing affected applications from detecting the issue before processing. This results in a denial-of-service condition. The vulnerability has a CVSS 3.1 base score of 7.5 (high severity) with no confidentiality or integrity impact but high impact on availability. Red Hat has published multiple advisories and released fixes for affected products including Red Hat Enterprise Linux 10 and OpenShift Container Platform 4.19. Users are advised to upgrade to the updated packages and container images provided by Red Hat.
Potential Impact
The vulnerability allows attackers to cause a persistent denial-of-service (DoS) condition by triggering an infinite loop in the RAR5 decompression routine of libarchive. This results in continuous CPU resource consumption, potentially degrading or halting services that automatically process RAR5 archives. There is no impact on confidentiality or integrity. No known exploits are reported in the wild as of the latest advisories.
Mitigation Recommendations
Red Hat has released official security updates and patches for affected products, including Red Hat Enterprise Linux 10 and OpenShift Container Platform 4.19. Users should apply these updates promptly to remediate the vulnerability. For OpenShift Container Platform 4.19, updated container images and RPM packages are available, and users should follow Red Hat's documented upgrade procedures using the OpenShift CLI or web console. No additional mitigations are required beyond applying the official fixes.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-03-13T11:33:42.645Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Epss Score
- 0.00035
- Epss Percentile
- 0.10223
- Epss Date
- 2026-04-26
- Gcve Source
- db.gcve.eu
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/errata/RHSA-2026:10065","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:5063","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:5080","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:6647","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7093","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7105","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7106","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7239","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7329","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:7335","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8423","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8746","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8747","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8748","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8865","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:8944","vendor":"Red Hat"},{"url":"https://access.redhat.com/errata/RHSA-2026:9832","vendor":"Red Hat"},{"url":"https://access.redhat.com/security/cve/CVE-2026-4111","vendor":"Red Hat"}]
Threat ID: 69b3fc832f860ef943d17f88
Added to database: 03/13/2026, 12:01:07 UTC
Last enriched: 07/15/2026, 09:24:51 UTC
Last updated: 07/31/2026, 19:22:59 UTC
Views: 458
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.