Vulnerability-Lookup

RHSA-2026:37410

Vulnerability from csaf_redhat - Published: 2026-07-09 18:56 - Updated: 2026-07-09 23:02

Summary

Red Hat Security Advisory: buildah security update

Severity

Important

Notes

Topic: An update for buildah is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. Security Fix(es): * golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835) * golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-39832

A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWE-281 - Improper Preservation of Permissions

Affected products

Fixed 21 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2026-39835

A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-476 - NULL Pointer Dereference

Affected products

Fixed 21 products

Product	Version	Remediation
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

References

20 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:37410	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://bugzilla.redhat.com/show_bug.cgi?id=2480685	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-39832	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480685	external
https://www.cve.org/CVERecord?id=CVE-2026-39832	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39832	external
https://go.dev/cl/778642	external
https://go.dev/issue/79435	external
https://groups.google.com/g/golang-announce/c/a08…	external
https://pkg.go.dev/vuln/GO-2026-5006	external
https://access.redhat.com/security/cve/CVE-2026-39835	self
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	external
https://www.cve.org/CVERecord?id=CVE-2026-39835	external
https://nvd.nist.gov/vuln/detail/CVE-2026-39835	external
https://go.dev/cl/781660	external
https://go.dev/issue/79563	external
https://pkg.go.dev/vuln/GO-2026-5015	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for buildah is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a Dockerfile; Build both Docker and OCI images. \n\nSecurity Fix(es):\n\n* golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n\n* golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions (CVE-2026-39832)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:37410",
        "url": "https://access.redhat.com/errata/RHSA-2026:37410"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2480680",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
      },
      {
        "category": "external",
        "summary": "2480685",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_37410.json"
      }
    ],
    "title": "Red Hat Security Advisory: buildah security update",
    "tracking": {
      "current_release_date": "2026-07-09T23:02:54+00:00",
      "generator": {
        "date": "2026-07-09T23:02:54+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.2"
        }
      },
      "id": "RHSA-2026:37410",
      "initial_release_date": "2026-07-09T18:56:09+00:00",
      "revision_history": [
        {
          "date": "2026-07-09T18:56:09+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-07-09T18:56:09+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-09T23:02:54+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream (v. 9)",
                  "product_id": "AppStream-9.8.0.Z.MAIN.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.43.1-3.el9_8.src",
                "product": {
                  "name": "buildah-2:1.43.1-3.el9_8.src",
                  "product_id": "buildah-2:1.43.1-3.el9_8.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.43.1-3.el9_8?arch=src\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.43.1-3.el9_8.aarch64",
                "product": {
                  "name": "buildah-2:1.43.1-3.el9_8.aarch64",
                  "product_id": "buildah-2:1.43.1-3.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.43.1-3.el9_8?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.43.1-3.el9_8.aarch64",
                "product": {
                  "name": "buildah-tests-2:1.43.1-3.el9_8.aarch64",
                  "product_id": "buildah-tests-2:1.43.1-3.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.43.1-3.el9_8?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
                "product": {
                  "name": "buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
                  "product_id": "buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.43.1-3.el9_8?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
                "product": {
                  "name": "buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
                  "product_id": "buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.43.1-3.el9_8?arch=aarch64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
                  "product_id": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.43.1-3.el9_8?arch=aarch64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.43.1-3.el9_8.ppc64le",
                "product": {
                  "name": "buildah-2:1.43.1-3.el9_8.ppc64le",
                  "product_id": "buildah-2:1.43.1-3.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.43.1-3.el9_8?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.43.1-3.el9_8.ppc64le",
                "product": {
                  "name": "buildah-tests-2:1.43.1-3.el9_8.ppc64le",
                  "product_id": "buildah-tests-2:1.43.1-3.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.43.1-3.el9_8?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
                "product": {
                  "name": "buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
                  "product_id": "buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.43.1-3.el9_8?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                "product": {
                  "name": "buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                  "product_id": "buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.43.1-3.el9_8?arch=ppc64le\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                  "product_id": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.43.1-3.el9_8?arch=ppc64le\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.43.1-3.el9_8.s390x",
                "product": {
                  "name": "buildah-2:1.43.1-3.el9_8.s390x",
                  "product_id": "buildah-2:1.43.1-3.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.43.1-3.el9_8?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.43.1-3.el9_8.s390x",
                "product": {
                  "name": "buildah-tests-2:1.43.1-3.el9_8.s390x",
                  "product_id": "buildah-tests-2:1.43.1-3.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.43.1-3.el9_8?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.43.1-3.el9_8.s390x",
                "product": {
                  "name": "buildah-debugsource-2:1.43.1-3.el9_8.s390x",
                  "product_id": "buildah-debugsource-2:1.43.1-3.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.43.1-3.el9_8?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
                "product": {
                  "name": "buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
                  "product_id": "buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.43.1-3.el9_8?arch=s390x\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
                  "product_id": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.43.1-3.el9_8?arch=s390x\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "buildah-2:1.43.1-3.el9_8.x86_64",
                "product": {
                  "name": "buildah-2:1.43.1-3.el9_8.x86_64",
                  "product_id": "buildah-2:1.43.1-3.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah@1.43.1-3.el9_8?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-2:1.43.1-3.el9_8.x86_64",
                "product": {
                  "name": "buildah-tests-2:1.43.1-3.el9_8.x86_64",
                  "product_id": "buildah-tests-2:1.43.1-3.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests@1.43.1-3.el9_8?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
                "product": {
                  "name": "buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
                  "product_id": "buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debugsource@1.43.1-3.el9_8?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
                "product": {
                  "name": "buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
                  "product_id": "buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-debuginfo@1.43.1-3.el9_8?arch=x86_64\u0026epoch=2"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64",
                "product": {
                  "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64",
                  "product_id": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/buildah-tests-debuginfo@1.43.1-3.el9_8?arch=x86_64\u0026epoch=2"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.43.1-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64"
        },
        "product_reference": "buildah-2:1.43.1-3.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.43.1-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le"
        },
        "product_reference": "buildah-2:1.43.1-3.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.43.1-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x"
        },
        "product_reference": "buildah-2:1.43.1-3.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.43.1-3.el9_8.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src"
        },
        "product_reference": "buildah-2:1.43.1-3.el9_8.src",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-2:1.43.1-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64"
        },
        "product_reference": "buildah-2:1.43.1-3.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.43.1-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64"
        },
        "product_reference": "buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le"
        },
        "product_reference": "buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.43.1-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x"
        },
        "product_reference": "buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debuginfo-2:1.43.1-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64"
        },
        "product_reference": "buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.43.1-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64"
        },
        "product_reference": "buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.43.1-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le"
        },
        "product_reference": "buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.43.1-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x"
        },
        "product_reference": "buildah-debugsource-2:1.43.1-3.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-debugsource-2:1.43.1-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64"
        },
        "product_reference": "buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.43.1-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64"
        },
        "product_reference": "buildah-tests-2:1.43.1-3.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.43.1-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le"
        },
        "product_reference": "buildah-tests-2:1.43.1-3.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.43.1-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x"
        },
        "product_reference": "buildah-tests-2:1.43.1-3.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-2:1.43.1-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64"
        },
        "product_reference": "buildah-tests-2:1.43.1-3.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
          "product_id": "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
        },
        "product_reference": "buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64",
        "relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-39832",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-05-22T04:01:41.402561+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480685"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480685",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/778642",
          "url": "https://go.dev/cl/778642"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79435",
          "url": "https://go.dev/issue/79435"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5006",
          "url": "https://pkg.go.dev/vuln/GO-2026-5006"
        }
      ],
      "release_date": "2026-05-22T02:31:26.660000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T18:56:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37410"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
    },
    {
      "cve": "CVE-2026-39835",
      "cwe": {
        "id": "CWE-476",
        "name": "NULL Pointer Dereference"
      },
      "discovery_date": "2026-05-22T04:01:27.279943+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2480680"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
          "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "RHBZ#2480680",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
        },
        {
          "category": "external",
          "summary": "https://go.dev/cl/781660",
          "url": "https://go.dev/cl/781660"
        },
        {
          "category": "external",
          "summary": "https://go.dev/issue/79563",
          "url": "https://go.dev/issue/79563"
        },
        {
          "category": "external",
          "summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "category": "external",
          "summary": "https://pkg.go.dev/vuln/GO-2026-5015",
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "release_date": "2026-05-22T02:31:26.982000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-07-09T18:56:09+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:37410"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.src",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debuginfo-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-debugsource-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-2:1.43.1-3.el9_8.x86_64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.aarch64",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.ppc64le",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.s390x",
            "AppStream-9.8.0.Z.MAIN.EUS:buildah-tests-debuginfo-2:1.43.1-3.el9_8.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
    }
  ]
}

CVE-2026-39832 (GCVE-0-2026-39832)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-07-10 12:05

Title

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Summary

When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

8.7 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator (v2.0.3)

CWE

CWE-281 - Improper Preservation of Permissions

Assigner

References

20 references

URL	Tags
https://go.dev/issue/79435
https://go.dev/cl/778642
https://groups.google.com/g/golang-announce/c/a08…
https://pkg.go.dev/vuln/GO-2026-5006
https://access.redhat.com/security/cve/CVE-2026-39832	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480685	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36199	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37072	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:35833	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37410	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37271	vendor-advisoryx_refsource_REDHAT

Impacted products

30 products

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh/agent	Affected: 0 , < 0.52.0 (semver)
Red Hat	RHEM 1.0 for RHEL 9	cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Enterprise Linux AppStream (v. 10)	cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux AppStream (v. 8)	cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux AppStream (v. 9)	cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)	cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.9	cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Edge Manager 1.0	cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat OpenShift Builds 1.7.4	cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Advanced Cluster Security 4	cpe:/a:redhat:advanced_cluster_security:4
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 9.1,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39832",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T18:59:53.174504Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T19:03:06.882Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 10)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:8::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 8)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 9)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Builds 1.7.4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T02:31:26.660Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8.7,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-281",
                "description": "Improper Preservation of Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T12:05:35.475Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39832"
          },
          {
            "name": "RHBZ#2480685",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36199"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37072"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:35833"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37410"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37271"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36199: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37072: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:35833: Red Hat Enterprise Linux AppStream (v. 8)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37410: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37123: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T04:01:41.402Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T02:31:26.660Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh/agent",
          "product": "golang.org/x/crypto/ssh/agent",
          "programRoutines": [
            {
              "name": "client.Add"
            },
            {
              "name": "keyring.Add"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-281: Improper Preservation of Permissions",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:26.660Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79435"
        },
        {
          "url": "https://go.dev/cl/778642"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5006"
        }
      ],
      "title": "Invoking  agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39832",
    "datePublished": "2026-05-22T02:31:26.660Z",
    "dateReserved": "2026-04-07T18:13:03.529Z",
    "dateUpdated": "2026-07-10T12:05:35.475Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-39835 (GCVE-0-2026-39835)

Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-07-10 12:05

Title

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh

Summary

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Severity

5.3 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-476 - NULL Pointer Dereference

Assigner

References

26 references

URL	Tags
https://go.dev/issue/79563
https://groups.google.com/g/golang-announce/c/a08…
https://go.dev/cl/781660
https://pkg.go.dev/vuln/GO-2026-5015
https://access.redhat.com/security/cve/CVE-2026-39835	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2480680	issue-trackingx_refsource_REDHAT
https://security.access.redhat.com/data/csaf/v2/v…	x_sadp-csaf-vex
https://access.redhat.com/errata/RHSA-2026:36796	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36199	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37072	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37410	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37123	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26547	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36625	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:26546	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36319	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36651	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36648	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37387	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:36797	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37271	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37268	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37272	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37286	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:37296	vendor-advisoryx_refsource_REDHAT

Impacted products

43 products

Vendor	Product	Version
golang.org/x/crypto	golang.org/x/crypto/ssh	Affected: 0 , < 0.52.0 (semver)
Red Hat	RHEM 1.0 for RHEL 9	cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat Enterprise Linux AppStream (v. 10)	cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Enterprise Linux AppStream (v. 9)	cpe:/a:redhat:enterprise_linux:9::appstream
Red Hat	Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)	cpe:/o:redhat:enterprise_linux:10.2
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.10	cpe:/a:redhat:advanced_cluster_security:4.10::el8
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.11	cpe:/a:redhat:advanced_cluster_security:4.11::el9
Red Hat	Red Hat Advanced Cluster Security for Kubernetes 4.9	cpe:/a:redhat:advanced_cluster_security:4.9::el8
Red Hat	Red Hat Edge Manager 1.0	cpe:/a:redhat:edge_manager:1.0::el9
Red Hat	Red Hat OpenShift Builds 1.7.4	cpe:/a:redhat:openshift_builds:1.7::el9
Red Hat	Red Hat Openshift Data Foundation 4.22	cpe:/a:redhat:openshift_data_foundation:4.22::el9
Red Hat	Red Hat Trusted Artifact Signer 1.4	cpe:/a:redhat:trusted_artifact_signer:1.4::el9
Red Hat	Assisted Installer for Red Hat OpenShift Container Platform 2	cpe:/a:redhat:assisted_installer:2
Red Hat	cert-manager Operator for Red Hat OpenShift	cpe:/a:redhat:cert_manager:1
Red Hat	Confidential Compute Attestation	cpe:/a:redhat:confidential_compute_attestation:1
Red Hat	External Secrets Operator for Red Hat OpenShift	cpe:/a:redhat:external_secrets_operator:1
Red Hat	Multicluster Engine for Kubernetes	cpe:/a:redhat:multicluster_engine
Red Hat	OpenShift API for Data Protection	cpe:/a:redhat:openshift_api_data_protection:1
Red Hat	OpenShift Pipelines	cpe:/a:redhat:openshift_pipelines:1
Red Hat	OpenShift Serverless	cpe:/a:redhat:serverless:1
Red Hat	Red Hat Advanced Cluster Management for Kubernetes 2	cpe:/a:redhat:acm:2
Red Hat	Red Hat Ceph Storage 9	cpe:/a:redhat:ceph_storage:9
Red Hat	Red Hat Edge Manager 1	cpe:/a:redhat:edge_manager:1
Red Hat	Red Hat Enterprise Linux 10	cpe:/o:redhat:enterprise_linux:10
Red Hat	Red Hat Enterprise Linux 8	cpe:/o:redhat:enterprise_linux:8
Red Hat	Red Hat Enterprise Linux 9	cpe:/o:redhat:enterprise_linux:9
Red Hat	Red Hat OpenShift AI (RHOAI)	cpe:/a:redhat:openshift_ai
Red Hat	Red Hat OpenShift Container Platform 4	cpe:/a:redhat:openshift:4
Red Hat	Red Hat OpenShift Dev Spaces	cpe:/a:redhat:openshift_devspaces:3
Red Hat	Red Hat OpenShift Dev Workspaces Operator	cpe:/a:redhat:devworkspace
Red Hat	Red Hat OpenShift for Windows Containers	cpe:/a:redhat:windows_machine_config
Red Hat	Red Hat OpenShift GitOps	cpe:/a:redhat:openshift_gitops:1
Red Hat	Red Hat OpenShift on AWS	cpe:/a:redhat:openshift_service_on_aws:1
Red Hat	Red Hat OpenShift Virtualization 4	cpe:/a:redhat:container_native_virtualization:4
Red Hat	Red Hat Quay 3	cpe:/a:redhat:quay:3
Red Hat	Red Hat Trusted Artifact Signer	cpe:/a:redhat:trusted_artifact_signer:1
Red Hat	Security Profiles Operator	cpe:/a:redhat:openshift_security_profiles_operator:1
Red Hat	Zero Trust Workload Identity Manager	cpe:/a:redhat:zero_trust_workload_identity_manager:1
Red Hat	Zero Trust Workload Identity Manager - Tech Preview	cpe:/a:redhat:zero_trust_workload_identity_manager:0
Red Hat	Cryostat 4	cpe:/a:redhat:cryostat:4
Red Hat	Red Hat OpenStack Platform 16.2	cpe:/a:redhat:openstack:16.2
Red Hat	Red Hat OpenStack Platform 17.1	cpe:/a:redhat:openstack:17.1
Red Hat	Red Hat OpenStack Platform 18.0	cpe:/a:redhat:openstack:18.0

Credits

NCC Group Cryptography Services, sponsored by Teleport

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 5.3,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-39835",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-22T17:44:50.320380Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-22T17:45:10.853Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "product": "RHEM 1.0 for RHEL 9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 10)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:enterprise_linux:9::appstream"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux AppStream (v. 9)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10.2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.10::el8"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.11::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:advanced_cluster_security:4.9::el8"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Security for Kubernetes 4.9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1.0::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Edge Manager 1.0",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_builds:1.7::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Builds 1.7.4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_data_foundation:4.22::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Openshift Data Foundation 4.22",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Trusted Artifact Signer 1.4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:assisted_installer:2"
            ],
            "defaultStatus": "affected",
            "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:cert_manager:1"
            ],
            "defaultStatus": "affected",
            "product": "cert-manager Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:confidential_compute_attestation:1"
            ],
            "defaultStatus": "affected",
            "product": "Confidential Compute Attestation",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:external_secrets_operator:1"
            ],
            "defaultStatus": "affected",
            "product": "External Secrets Operator for Red Hat OpenShift",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:multicluster_engine"
            ],
            "defaultStatus": "affected",
            "product": "Multicluster Engine for Kubernetes",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_api_data_protection:1"
            ],
            "defaultStatus": "affected",
            "product": "OpenShift API for Data Protection",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_pipelines:1"
            ],
            "defaultStatus": "affected",
            "product": "OpenShift Pipelines",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:serverless:1"
            ],
            "defaultStatus": "affected",
            "product": "OpenShift Serverless",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:acm:2"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:ceph_storage:9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Ceph Storage 9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:edge_manager:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Edge Manager 1",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:10"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux 10",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:8"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux 8",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/o:redhat:enterprise_linux:9"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Enterprise Linux 9",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_ai"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift AI (RHOAI)",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift:4"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Container Platform 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_devspaces:3"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Dev Spaces",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:devworkspace"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Dev Workspaces Operator",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:windows_machine_config"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift for Windows Containers",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_gitops:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift GitOps",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_service_on_aws:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift on AWS",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:container_native_virtualization:4"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat OpenShift Virtualization 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:quay:3"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Quay 3",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:trusted_artifact_signer:1"
            ],
            "defaultStatus": "affected",
            "product": "Red Hat Trusted Artifact Signer",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openshift_security_profiles_operator:1"
            ],
            "defaultStatus": "affected",
            "product": "Security Profiles Operator",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:1"
            ],
            "defaultStatus": "affected",
            "product": "Zero Trust Workload Identity Manager",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:zero_trust_workload_identity_manager:0"
            ],
            "defaultStatus": "affected",
            "product": "Zero Trust Workload Identity Manager - Tech Preview",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:cryostat:4"
            ],
            "defaultStatus": "unaffected",
            "product": "Cryostat 4",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:16.2"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 16.2",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:17.1"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 17.1",
            "vendor": "Red Hat"
          },
          {
            "cpes": [
              "cpe:/a:redhat:openstack:18.0"
            ],
            "defaultStatus": "unaffected",
            "product": "Red Hat OpenStack Platform 18.0",
            "vendor": "Red Hat"
          }
        ],
        "datePublic": "2026-05-22T02:31:26.982Z",
        "descriptions": [
          {
            "lang": "en",
            "value": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS)."
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "namespace": "https://access.redhat.com/security/updates/classification/",
                "value": "Important"
              },
              "type": "Red Hat severity rating"
            }
          },
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            },
            "format": "CVSS"
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-10T12:05:12.595Z",
          "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "shortName": "redhat-SADP"
        },
        "references": [
          {
            "tags": [
              "vdb-entry",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/security/cve/CVE-2026-39835"
          },
          {
            "name": "RHBZ#2480680",
            "tags": [
              "issue-tracking",
              "x_refsource_REDHAT"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
          },
          {
            "tags": [
              "x_sadp-csaf-vex"
            ],
            "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39835.json"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36796"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36199"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37072"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37410"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37123"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26547"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36625"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36207"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:26546"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36319"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36651"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36648"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37387"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:36797"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37271"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37268"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37272"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37286"
          },
          {
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2026:37296"
          }
        ],
        "solutions": [
          {
            "lang": "en",
            "value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36199: Red Hat Enterprise Linux AppStream (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37072: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37410: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37123: Red Hat Enterprise Linux AppStream (v. 9)"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36625: Red Hat Advanced Cluster Security for Kubernetes 4.10"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:26546: Red Hat Advanced Cluster Security for Kubernetes 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36319: Red Hat Advanced Cluster Security for Kubernetes 4.9"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37271: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37268: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37272: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37286: Red Hat Trusted Artifact Signer 1.4"
          },
          {
            "lang": "en",
            "value": "RHSA-2026:37296: Red Hat Trusted Artifact Signer 1.4"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2026-05-22T04:01:27.279Z",
            "value": "Reported to Red Hat."
          },
          {
            "lang": "en",
            "time": "2026-05-22T02:31:26.982Z",
            "value": "Made public."
          }
        ],
        "title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
        "workarounds": [
          {
            "lang": "en",
            "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."
          }
        ],
        "x_adpType": "supplier",
        "x_generator": {
          "engine": "sadp-cli 1.0.0"
        }
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "golang.org/x/crypto/ssh",
          "product": "golang.org/x/crypto/ssh",
          "programRoutines": [
            {
              "name": "CertChecker.CheckHostKey"
            },
            {
              "name": "CertChecker.Authenticate"
            }
          ],
          "vendor": "golang.org/x/crypto",
          "versions": [
            {
              "lessThan": "0.52.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "NCC Group Cryptography Services, sponsored by Teleport"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-476: NULL Pointer Dereference",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-22T02:31:26.982Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79563"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
        },
        {
          "url": "https://go.dev/cl/781660"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5015"
        }
      ],
      "title": "Invoking  server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-39835",
    "datePublished": "2026-05-22T02:31:26.982Z",
    "dateReserved": "2026-04-07T18:13:03.529Z",
    "dateUpdated": "2026-07-10T12:05:12.595Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

RHSA-2026:37410

CVE-2026-39832 (GCVE-0-2026-39832)

CVE-2026-39835 (GCVE-0-2026-39835)

Tags

Sightings

Nomenclature