Bug 2515322 (CVE-2026-14671)

Summary: CVE-2026-14671 postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security <prodsec-ir-bot>
Status: NEW --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: unspecifiedCC: dschmidt, jlanda, kshier, rhel-process-autobot, simaishi, stcannon, teagle, watson-tool-maintainers, yguenane
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: ---
Doc Text:
A flaw was found in PostgreSQL. A type confusion vulnerability in the 'refint' module allows an object creator to execute arbitrary code as the operating system user running the database. This could lead to a complete compromise of the database server.
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2526138, 2526141    
Bug Blocks:    

Description OSIDB Bzimport 2026-08-13 13:30:39 UTC
Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database.  The fix for this emerged as a non-security bug report, and the fix appear in the git repository with subject "refint: Remove plan cache.", without a CVE number.  Versions before PostgreSQL 18.5, 17.11, 16.15, 15.19, and 14.24 are affected.

Comment 2 Jon Orris 2026-09-14 13:31:51 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:67280 https://access.redhat.com/errata/RHSA-2026:67280

Comment 3 Jon Orris 2026-09-15 08:14:49 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:67491 https://access.redhat.com/errata/RHSA-2026:67491

Comment 4 Jon Orris 2026-09-16 08:54:09 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:67848 https://access.redhat.com/errata/RHSA-2026:67848

Comment 6 Jon Orris 2026-09-22 02:39:47 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:69607 https://access.redhat.com/errata/RHSA-2026:69607

Comment 7 Jon Orris 2026-09-22 08:34:41 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:69876 https://access.redhat.com/errata/RHSA-2026:69876

Comment 8 Jon Orris 2026-09-22 10:27:19 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:69923 https://access.redhat.com/errata/RHSA-2026:69923

Comment 9 Jon Orris 2026-09-22 11:39:28 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:69914 https://access.redhat.com/errata/RHSA-2026:69914

Comment 10 Jon Orris 2026-09-22 12:43:02 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:70186 https://access.redhat.com/errata/RHSA-2026:70186

Comment 11 Jon Orris 2026-09-23 06:29:15 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:70559 https://access.redhat.com/errata/RHSA-2026:70559

Comment 12 Jon Orris 2026-09-23 07:34:32 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:70602 https://access.redhat.com/errata/RHSA-2026:70602

Comment 13 Jon Orris 2026-09-23 13:22:45 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:70762 https://access.redhat.com/errata/RHSA-2026:70762

Comment 14 Jon Orris 2026-09-23 15:55:10 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:69924 https://access.redhat.com/errata/RHSA-2026:69924

Comment 15 Jon Orris 2026-09-23 16:15:33 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:70856 https://access.redhat.com/errata/RHSA-2026:70856

Comment 16 Jon Orris 2026-09-23 20:29:06 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:70763 https://access.redhat.com/errata/RHSA-2026:70763

Comment 17 Jon Orris 2026-09-28 03:03:45 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:72283 https://access.redhat.com/errata/RHSA-2026:72283

Comment 18 Jon Orris 2026-09-28 03:04:39 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:72282 https://access.redhat.com/errata/RHSA-2026:72282

Comment 19 Jon Orris 2026-09-28 03:49:09 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:72281 https://access.redhat.com/errata/RHSA-2026:72281

Comment 20 Jon Orris 2026-09-28 05:34:52 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:72363 https://access.redhat.com/errata/RHSA-2026:72363

Comment 21 Jon Orris 2026-09-28 05:38:17 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:72362 https://access.redhat.com/errata/RHSA-2026:72362

Comment 22 Jon Orris 2026-09-28 05:41:37 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:72361 https://access.redhat.com/errata/RHSA-2026:72361

Comment 23 Jon Orris 2026-09-30 11:09:32 UTC
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:73912 https://access.redhat.com/errata/RHSA-2026:73912