CVE-2026-42014: Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin
A flaw was found in GnuTLS. The gnutlspkcs11tokensetpin function, used for changing the Security Officer PIN, can lead to a use-after-free vulnerability. This occurs when an attacker attempts to change the PIN with a NULL old PIN for a token that lacks a protected authentication path.
Other sources
libgnutls: Fix use-after-free in gnutlspkcs11tokensetpin Changing the Security Officer PIN with gnutlspkcs11tokensetpin() with oldpin == NULL for a token lacking a protected authentication path led to a use-after-free.
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gnutls28to a version that resolves this vulnerability.Fixed in 3.7.1-5+deb11u10Fixed in 3.7.9-2+deb12u7Fixed in 3.8.9-3+deb13u4Fixed in 3.8.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-42014?
The severity of CVE-2026-42014 is medium with a CVSS score of 6.6.
How do I fix CVE-2026-42014?
To fix CVE-2026-42014, update your GnuTLS to version 3.8.3-11 or later.
What is the impact of CVE-2026-42014?
CVE-2026-42014 can lead to a use-after-free vulnerability that may allow an attacker to potentially exploit the system.
Which software is affected by CVE-2026-42014?
CVE-2026-42014 affects GnuTLS versions including Microsoft azl3 gnutls 3.8.3-11 and Debian/gnutls28.
How can an attacker exploit CVE-2026-42014?
An attacker can exploit CVE-2026-42014 by attempting to change the Security Officer PIN with a NULL old PIN on an unsecured token.