openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20434-1 advisory.

    Upgrade openCryptoki to 3.26 (jsc#PED-14609)

    Security fixes:

     - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-     service (bsc#1256673).
     - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).

    Other fixes:

      * Soft: Add support for RSA keys up to 16K bits.
      * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
      * p11sak: Add support for generating RSA keys up to 16K bits.
      * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism     (CKM_SHA512_224_KEY_DERIVATION and CKM_SHA512_256_KEY_DERIVATION).
      * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms     CKM_SHAxxx_KEY_GEN.
      * p11sak: Add support for SHA-HMAC key types and key generation.
      * p11sak: Add support for key wrap and unwrap commands to export and import private and secret keys by     means of key wrapping/unwrapping         with various key wrapping mechanism.
      * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider.
      * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files.
      * Add support for canceling an operation via NULL mechanism pointer at C_XxxInit() call as an     alternative to C_SessionCancel() (PKCS#11 v3.0).
      * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using CKM_IBM_ECDSA_OTHER     and signature/public key aggregation using CKM_IBM_EC_AGGREGATE.
      * p11sak: Add support for generating BLS12-381 EC keys.
      * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host     library v4.2 or later, and         a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16).
      * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires CCA v8.4 or     later).
      * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or     later, or the OQS-provider must be configured).
      * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types.
      * Bug fixes.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20233-1 advisory.

    Upgrade openCryptoki to 3.26 (jsc#PED-14609)

    Security fixes:

     - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-     service (bsc#1256673).
     - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).

    Other fixes:

      * Soft: Add support for RSA keys up to 16K bits.
      * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
      * p11sak: Add support for generating RSA keys up to 16K bits.
      * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism     (CKM_SHA512_224_KEY_DERIVATION and CKM_SHA512_256_KEY_DERIVATION).
      * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms     CKM_SHAxxx_KEY_GEN.
      * p11sak: Add support for SHA-HMAC key types and key generation.
      * p11sak: Add support for key wrap and unwrap commands to export and import private and secret keys by     means of key wrapping/unwrapping         with various key wrapping mechanism.
      * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider.
      * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files.
      * Add support for canceling an operation via NULL mechanism pointer at C_XxxInit() call as an     alternative to C_SessionCancel() (PKCS#11 v3.0).
      * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using CKM_IBM_ECDSA_OTHER     and signature/public key aggregation using CKM_IBM_EC_AGGREGATE.
      * p11sak: Add support for generating BLS12-381 EC keys.
      * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host     library v4.2 or later, and         a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16).
      * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires CCA v8.4 or     later).
      * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or     later, or the OQS-provider must be configured).
      * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types.
      * Bug fixes.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0291-1 advisory.

    - CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or     denial-of-service (bsc#1256673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap     buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local     access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and     invoking C_WrapKey. This can lead to heap corruption, or denial-of-service. (CVE-2026-22791)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
299573	SUSE SLES16 Security Update : openCryptoki (SUSE-SU-2026:20434-1)	Nessus	SuSE Local Security Checks	medium
299146	openSUSE 16 Security Update : openCryptoki (openSUSE-SU-2026:20233-1)	Nessus	SuSE Local Security Checks	medium
296681	SUSE SLES15 Security Update : openCryptoki (SUSE-SU-2026:0291-1)	Nessus	SuSE Local Security Checks	medium
284798	Linux Distros Unpatched Vulnerability : CVE-2026-22791	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-22791

medium

Tenable Plugins

medium

medium

medium

medium