Vulnerability · Published May 22, 2026 · Assigned by Go
CVE-2026-39830Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
Critical 9.1
In plain English
A critical-severity security flaw in golang.org/x/crypto/ssh from golang.org/x/crypto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:10 | buildah | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah | 2:1.43.1-2.el9_8 | ALSA-2026:29455 |
| AlmaLinux:10 | buildah-tests | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah-tests | 2:1.43.1-2.el9_8 | ALSA-2026:29455 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | podman | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-docker | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-plugins | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-remote | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-tests | 6:5.8.2-7.el9_8 | ALSA-2026:69961 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| Debian:12 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39830 |
| Debian:13 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39830 |
| Debian:14 | golang-go.crypto | 1:0.52.0-1 | DEBIAN-CVE-2026-39830 |
| Go | golang.org/x/crypto | 0.52.0 | GO-2026-5017 |
| Go | golang.org/x/crypto | 0.52.0 | GHSA-vgwf-h737-ff37 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:10 | buildah | 2:1.43.1-3.el10_2 | RLSA-2026:36199 |
| Rocky Linux:9 | buildah | 2:1.43.1-2.el9_8 | RLSA-2026:29455 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:35833 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:10 | podman | 7:5.8.2-4.el10_2 | RLSA-2026:37072 |
| Rocky Linux:9 | podman | 6:5.8.2-7.el9_8 | RLSA-2026:69961 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh | 0 – before 0.52.0 |
Weakness: CWE-772 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
References
- https://go.dev/issue/79564
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://go.dev/cl/781640
- https://go.dev/cl/781664
- https://pkg.go.dev/vuln/GO-2026-5017
- https://access.redhat.com/security/cve/CVE-2026-39830 vdb-entry, x_refsource_REDHAT
- RHBZ#2480684 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48151 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36199 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:29455 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54531 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66521 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54400 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36207 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37275 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57801 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52910 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65964 vendor-advisory, x_refsource_REDHAT