Libreswan, a Linux implementation of IPsec and IKE protocols, is affected by four denial of service vulnerabilities: CVE-2026-50721 and CVE-2026-50722 involve denial of service via RSA-SHA1 authentication payloads in IKEv1 and IKEv2 respectively; CVE-2026-12413 involves denial of service via malformed fragmentation in IKEv2; CVE-2026-14957 involves an assertion failure caused by a badly formatted X.509 certificate leading to daemon crash. These vulnerabilities can cause the libreswan daemon process to crash, interrupting secure VPN tunnels. Red Hat Product Security has rated these issues as important and has released updated libreswan packages for Red Hat Enterprise Linux 9 and related distributions to remediate these vulnerabilities.

Successful exploitation of these vulnerabilities results in denial of service conditions by crashing the libreswan daemon process. This disrupts IPsec VPN tunnels, potentially causing loss of secure connectivity. There is no indication of remote code execution or data compromise. No known exploits in the wild have been reported at this time.

Red Hat has released updated libreswan packages that address these vulnerabilities for Red Hat Enterprise Linux 9 and its variants. Users should apply these official security updates promptly to remediate the issues. For detailed update instructions, refer to the Red Hat advisory at https://access.redhat.com/articles/11258. No additional mitigation is indicated by the vendor advisory.