NULL pointer dereference in OpenSSL - CVE-2026-14457

Vulnerability identifier: #VU145419

CSH Severity: Medium

CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-14457

CWE-ID: CWE-476

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to cause a denial of service.

The vulnerability exists due to null pointer dereference in RFC7250 raw public key signature algorithm selection when handling the "signature_algorithms_cert" TLS extension. A remote attacker can send a crafted TLS handshake message to cause a denial of service.

The issue requires raw public keys to be enabled and only a private key, without an associated certificate, to be configured locally.

OpenSSL
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
FreeBSD
SUSE Linux Enterprise Live Patching
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
openssl-3-livepatches-debuginfo
openssl-3-livepatches-debugsource
openssl-3-livepatches
openssl (Ubuntu package)
libopenssl3
openssl-3-debuginfo
openssl-3
libopenssl-3-fips-provider-debuginfo
openssl-3-debugsource
libopenssl3-debuginfo
libopenssl-3-devel
libopenssl-3-fips-provider
libopenssl-3-fips-provider-32bit
libopenssl3-32bit
libopenssl3-32bit-debuginfo
libopenssl-3-fips-provider-32bit-debuginfo
openssl
openssl-debuginfo
openssl-debugsource
openssl-devel
openssl-libs
openssl-perl
openssl-help
openssl (Debian package)

Install security update from vendor's website.

OpenSSL - addressed in versions 3.4.7, 3.5.8, 3.6.4, 4.0.2
openssl-3-livepatches-debuginfo - addressed in versions 0.6-150600.13.19.1, 0.6-150700.16.12.1
openssl-3-livepatches-debugsource - addressed in versions 0.6-150600.13.19.1, 0.6-150700.16.12.1
openssl-3-livepatches - addressed in versions 0.6-150600.13.19.1, 0.6-150700.16.12.1
openssl (Ubuntu package) - addressed in versions 3.0.2-0ubuntu1.29, 3.0.13-0ubuntu3.15, 3.5.5-1ubuntu3.4, 3.5.5-1ubuntu3.5
libopenssl3 - update to 3.5.0-150700.5.50.1
openssl-3-debuginfo - update to 3.5.0-150700.5.50.1
openssl-3 - update to 3.5.0-150700.5.50.1
libopenssl-3-fips-provider-debuginfo - update to 3.5.0-150700.5.50.1
openssl-3-debugsource - update to 3.5.0-150700.5.50.1
libopenssl3-debuginfo - update to 3.5.0-150700.5.50.1
libopenssl-3-devel - update to 3.5.0-150700.5.50.1
libopenssl-3-fips-provider - update to 3.5.0-150700.5.50.1
libopenssl-3-fips-provider-32bit - update to 3.5.0-150700.5.50.1
libopenssl3-32bit - update to 3.5.0-150700.5.50.1
libopenssl3-32bit-debuginfo - update to 3.5.0-150700.5.50.1
libopenssl-3-fips-provider-32bit-debuginfo - update to 3.5.0-150700.5.50.1
openssl - update to 3.5.6-7
openssl-debuginfo - update to 3.5.6-7
openssl-debugsource - update to 3.5.6-7
openssl-devel - update to 3.5.6-7
openssl-libs - update to 3.5.6-7
openssl-perl - update to 3.5.6-7
openssl-help - update to 3.5.6-7
openssl (Debian package) - update to 3.5.7-1~deb13u2

• https://openssl-library.org/news/secadv/20260825.txt

• Multiple vulnerabilities in OpenSSL
• Debian update for openssl
• FreeBSD update for OpenSSL
• Ubuntu update for openssl
• Ubuntu update for openssl
• SUSE update for openssl-3-livepatches
• SUSE update for openssl-3
• SUSE update for openssl-3-livepatches
• openEuler 24.03 LTS SP4 update for openssl