Vulnerability · Published May 22, 2026 · Assigned by Go
CVE-2026-39832Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
Critical 9.1
In plain English
A critical-severity security flaw in golang.org/x/crypto/ssh/agent from golang.org/x/crypto. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)9.1Critical
Exploit odds (30 days)0.7%top 47.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:10 | buildah | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah | 2:1.43.1-3.el9_8 | ALSA-2026:37410 |
| AlmaLinux:10 | buildah-tests | 2:1.43.1-3.el10_2 | ALSA-2026:36199 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | buildah-tests | 2:1.43.1-3.el9_8 | ALSA-2026:37410 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:35833 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| AlmaLinux:8 | podman | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-docker | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-plugins | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-remote | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-32.module_el8.10.0+4213+0493256b | ALSA-2026:35833 |
| AlmaLinux:9 | podman-tests | 6:5.8.2-4.el9_8 | ALSA-2026:37123 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:35833 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:35833 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:35833 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:35833 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:35833 |
| Debian:12 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39832 |
| Debian:13 | golang-go.crypto | no fix listed | DEBIAN-CVE-2026-39832 |
| Debian:14 | golang-go.crypto | 1:0.52.0-1 | DEBIAN-CVE-2026-39832 |
| Go | golang.org/x/crypto | 0.52.0 | GO-2026-5006 |
| Go | golang.org/x/crypto | 0.52.0 | GHSA-f5wc-c3c7-36mc |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:10 | buildah | 2:1.43.1-3.el10_2 | RLSA-2026:36199 |
| Rocky Linux:9 | buildah | 2:1.43.1-3.el9_8 | RLSA-2026:37410 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:35833 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | netavark | 2:1.10.3-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:35833 |
| Rocky Linux:8 | oci-seccomp-bpf-hook | 0:1.2.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:35833 |
| Rocky Linux:10 | podman | 7:5.8.2-4.el10_2 | RLSA-2026:37072 |
| Rocky Linux:9 | podman | 6:5.8.2-4.el9_8 | RLSA-2026:37123 |
| Rocky Linux:8 | python-podman | 0:4.9.0-3.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:35833 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh/agent | 0 – before 0.52.0 |
Weakness: CWE-281 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
References
- https://go.dev/issue/79435
- https://go.dev/cl/778640
- https://go.dev/cl/778641
- https://groups.google.com/g/golang-announce/c/a082jnz-LvI
- https://pkg.go.dev/vuln/GO-2026-5006
- https://access.redhat.com/security/cve/CVE-2026-39832 vdb-entry, x_refsource_REDHAT
- RHBZ#2480685 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39832.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36199 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37072 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35833 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49944 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67450 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37410 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37123 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61314 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:66521 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43692 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36319 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36625 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36651 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40945 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40118 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36648 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41036 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52857 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:52910 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37387 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41031 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42146 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:43052 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41066 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40262 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:40972 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36797 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:37271 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57194 vendor-advisory, x_refsource_REDHAT