openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and invoking C_WrapKey. This can lead to heap corruption, or denial-of-service.

The remote Ubuntu 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8707-1 advisory.

    It was discovered that primitive decoders in openCryptoki produced integer underflows when the encoded     length was zero. An attacker could possibly use this issue to trigger out-of-bounds reads.
    (CVE-2026-40253)

    It was discovered that openCryptoki incorrectly handled symlinks. An attacker in the token-group could     possibly use this issue to achieve privilege escalation or access sensitive information. (CVE-2026-23893)

    It was discovered that the CKM_ECDH_AES_KEY_WRAP implementation had a heap buffer overflow vulnerability.
    An attacker could possibly use this issue to trigger heap corruption, or denial-of-service.
    (CVE-2026-22791)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21059-1 advisory.

    This update for openCryptoki fixes the following issues

    Upgrade openCryptoki to version 3.27 (jsc#PED-14609):

     * Add base support for PKCS#11 v3.2.
     * Add support for PKCS#11 v3.2 C_VerifySignature[Init|Update|Final].
     * Add support for PKCS#11 v3.2 C_EncapsulateKey/C_DecapsulateKey.
     * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with RSA-PKCS and RSA-OAEP mechanisms.
     * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the ECDH mechanism.
     * Soft/EP11: Add support for PKCS#11 v3.2 en-/decapsulate with the DH-PKCS mechanism.
     * Soft: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or     later, or      the OQS-provider must be configured).
     * CCA: Add support for PKCS#11 v3.2 ML-DSA key type and mechanisms (requires CCA v8.4 or later)
     * EP11: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host     library v4.2 or later,      and a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16).
     * p11sak: Add support for PKCS#11 v3.2 ML-DSA and ML-KEM key types.
     * Soft/ICA: Add support for PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and     CKM_ECDH_COF_AES_KEY_WRAP.
     * p11sak: Add support for key wrapping with PKCS#11 v3.2 mechanisms CKM_ECDH_X_AES_KEY_WRAP and     CKM_ECDH_COF_AES_KEY_WRAP.
     * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.2 mechanism CKM_PUB_KEY_FROM_PRIV_KEY.
     * Soft/ICA/CCA/EP11: Add support for PKCS#11 v3.0 Edwards and Montgomery key types and mechanisms.
     * Soft/ICA: Support CKM_ECDH_AES_KEY_WRAP also for Montgomery keys.
     * p11sak: Add support for PKCS#11 v3.0 Edwards and Montgomery key types.
     * Soft: Add support for CKM_ECDH1_COFACTOR_DERIVE.
     * CCA: Add support for additional RSA public exponent values 5, 17, or 257.
     * p11sak: Add option to list-key command to show EP11 session IDs.
     * Make the maximum number of token objects supported configurable.
     * Fixes for CVE-2026-40253, CVE-2026-23893, and CVE-2026-22791.
     * Bug fixes.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES16 / SLES_SAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20434-1 advisory.

    Upgrade openCryptoki to 3.26 (jsc#PED-14609)

    Security fixes:

     - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-     service (bsc#1256673).
     - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).

    Other fixes:

      * Soft: Add support for RSA keys up to 16K bits.
      * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
      * p11sak: Add support for generating RSA keys up to 16K bits.
      * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism     (CKM_SHA512_224_KEY_DERIVATION and CKM_SHA512_256_KEY_DERIVATION).
      * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms     CKM_SHAxxx_KEY_GEN.
      * p11sak: Add support for SHA-HMAC key types and key generation.
      * p11sak: Add support for key wrap and unwrap commands to export and import private and secret keys by     means of key wrapping/unwrapping         with various key wrapping mechanism.
      * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider.
      * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files.
      * Add support for canceling an operation via NULL mechanism pointer at C_XxxInit() call as an     alternative to C_SessionCancel() (PKCS#11 v3.0).
      * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using CKM_IBM_ECDSA_OTHER     and signature/public key aggregation using CKM_IBM_EC_AGGREGATE.
      * p11sak: Add support for generating BLS12-381 EC keys.
      * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host     library v4.2 or later, and         a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16).
      * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires CCA v8.4 or     later).
      * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or     later, or the OQS-provider must be configured).
      * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types.
      * Bug fixes.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20233-1 advisory.

    Upgrade openCryptoki to 3.26 (jsc#PED-14609)

    Security fixes:

     - CVE-2026-22791: supplying malformed compressed EC public key can lead to heap corruption or denial-of-     service (bsc#1256673).
     - CVE-2026-23893: Privilege Escalation or Data Exposure via Symlink Following (bsc#1257116).

    Other fixes:

      * Soft: Add support for RSA keys up to 16K bits.
      * CCA: Add support for RSA keys up to 8K bits (requires CCA v8.4 or v7.6 or later).
      * p11sak: Add support for generating RSA keys up to 16K bits.
      * Soft/ICA: Add support for SHA512/224 and SHA512/256 key derivation mechanism     (CKM_SHA512_224_KEY_DERIVATION and CKM_SHA512_256_KEY_DERIVATION).
      * Soft/ICA/CCA/EP11: Add support for SHA-HMAC key types CKK_SHAxxx_HMAC and key gen mechanisms     CKM_SHAxxx_KEY_GEN.
      * p11sak: Add support for SHA-HMAC key types and key generation.
      * p11sak: Add support for key wrap and unwrap commands to export and import private and secret keys by     means of key wrapping/unwrapping         with various key wrapping mechanism.
      * p11kmip: Add support for using an HSM-protected TLS client key via a PKCS#11 provider.
      * p11sak: Add support for exporting non-sensitive private keys to password protected PEM files.
      * Add support for canceling an operation via NULL mechanism pointer at C_XxxInit() call as an     alternative to C_SessionCancel() (PKCS#11 v3.0).
      * EP11: Add support for pairing friendly BLS12-381 EC curve for sign/verify using CKM_IBM_ECDSA_OTHER     and signature/public key aggregation using CKM_IBM_EC_AGGREGATE.
      * p11sak: Add support for generating BLS12-381 EC keys.
      * EP11: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires an EP11 host     library v4.2 or later, and         a CEX8P crypto card with firmware v9.6 or later on IBM z17, and v8.39 or later on IBM z16).
      * CCA: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires CCA v8.4 or     later).
      * Soft: Add support for IBM-specific ML-DSA and ML-KEM key types and mechanisms (requires OpenSSL 3.5 or     later, or the OQS-provider must be configured).
      * p11sak: Add support for IBM-specific ML-DSA and ML-KEM key types.
      * Bug fixes.

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0291-1 advisory.

    - CVE-2026-22791: Fixed supplying malformed compressed EC public key can lead to heap corruption or     denial-of-service (bsc#1256673).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - openCryptoki is a PKCS#11 library and tools for Linux and AIX. In 3.25.0 and 3.26.0, there is a heap     buffer overflow vulnerability in the CKM_ECDH_AES_KEY_WRAP implementation allows an attacker with local     access to cause out-of-bounds writes in the host process by supplying a compressed EC public key and     invoking C_WrapKey. This can lead to heap corruption, or denial-of-service. (CVE-2026-22791)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
365441	Ubuntu 26.04 LTS : openCryptoki vulnerabilities (USN-8707-1)	Nessus	Ubuntu Local Security Checks	Local	medium
324065	openSUSE 16 Security Update : openCryptoki (openSUSE-SU-2026:21059-1)	Nessus	SuSE Local Security Checks	Local	medium
299573	SUSE SLES16 Security Update : openCryptoki (SUSE-SU-2026:20434-1)	Nessus	SuSE Local Security Checks	Local	medium
299146	openSUSE 16 Security Update : openCryptoki (openSUSE-SU-2026:20233-1)	Nessus	SuSE Local Security Checks	Local	medium
296681	SUSE SLES15 Security Update : openCryptoki (SUSE-SU-2026:0291-1)	Nessus	SuSE Local Security Checks	Local	medium
284798	Linux Distros Unpatched Vulnerability : CVE-2026-22791	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-22791

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium