Libreswan, a Linux implementation of IPsec and IKE, is affected by four security issues: CVE-2026-50721 and CVE-2026-50722 describe denial of service vulnerabilities via RSA-SHA1 (PKCS#1 v1.5) authentication payloads in IKEv1 and IKEv2 respectively; CVE-2026-12413 is a denial of service via malformed fragmentation in IKEv2; CVE-2026-14957 involves an assertion failure triggered by a badly formatted X.509 certificate, causing the daemon process to crash. These vulnerabilities can disrupt VPN tunnels by crashing or denying service to the Libreswan daemon. Red Hat has issued an important security advisory RHSA-2026:57741 with updates for Red Hat Enterprise Linux 9.6 Extended Update Support and related products to remediate these issues.

Successful exploitation of these vulnerabilities results in denial of service conditions against the Libreswan daemon, causing it to crash or become unresponsive. This disrupts IPsec VPN tunnels relying on Libreswan, potentially impacting secure network communications. There is no indication of privilege escalation or data compromise. No known exploits in the wild have been reported at this time.

Red Hat has released security updates for Libreswan in Red Hat Enterprise Linux 9.6 Extended Update Support and related variants. Applying these official patches will remediate the denial of service and crash vulnerabilities. Users should follow Red Hat's guidance at https://access.redhat.com/articles/11258 to update to the fixed package versions. No additional mitigation steps are indicated by the vendor advisory.