Vulnerability · Published May 22, 2026 · Assigned by Go
CVE-2026-42508Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
Critical 9.1
In plain English
A critical-severity improper certificate validation in golang.org/x/crypto/ssh/knownhosts from golang.org/x/crypto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 6.9% (higher than 94% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)6.9%top 5.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | buildah | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | podman | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-docker | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-plugins | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-remote | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-tests | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| Debian:12 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-42508 |
| Debian:13 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-42508 |
| Debian:14 | golang-go.crypto | 1:0.52.0-1 | DEBIAN-CVE-2026-42508 |
| Go | golang.org/x/crypto | 0.52.0 | GO-2026-5021 |
| Go | golang.org/x/crypto | 0.52.0 | GHSA-5cgq-3rg8-m6cv |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:35833 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:10 | podman | 7:5.8.2-4.el10_2 | RLSA-2026:37072 |
| Rocky Linux:9 | podman | 6:5.8.2-4.el9_8 | RLSA-2026:37123 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | runc | 4:1.2.9-4.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | skopeo | 2:1.14.6-2.module+el8.10.0+40223+e940a224 | RLSA-2026:35833 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh/knownhosts | 0 – before 0.52.0 |
Weakness: CWE-295 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References
- https://go.dev/issue/79568
- https://go.dev/cl/781220
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://pkg.go.dev/vuln/GO-2026-5021
- https://access.redhat.com/security/cve/CVE-2026-42508 vdb-entry, x_refsource_REDHAT
- RHBZ#2480688 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42508.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51288 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37123 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36808 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66521 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51033 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:59467 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66022 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41064 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:47737 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54400 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26546 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:26547 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23262 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:23264 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65126 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60520 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52910 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisory, x_refsource_REDHAT