Riskcovery

CVE-2026-55653

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

State
Published
Severity
4.3 Medium
Published
Jun 23, 2026
Updated
Oct 30, 2026
Reserved
Jun 16, 2026

Read the record on cve.org

Description

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Scores

CVSSScoreVectorSource
3.14.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:Lredhat

Weaknesses

Affected Products

ProductVersions
Red Hat Enterprise Linux 10Red Hat
  • 0:9.9p1-25.el10_2 and laterNot affected
Red Hat Enterprise Linux 10.0 Extended Update SupportRed Hat
  • 0:9.9p1-7.el10_0.5 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:8.0p1-30.el8_10 and laterNot affected
Red Hat Enterprise Linux 8Red Hat
  • 0:8.0p1-30.el8_10 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:9.9p1-9.el9_8 and laterNot affected
Red Hat Enterprise Linux 9Red Hat
  • 0:9.9p1-9.el9_8 and laterNot affected
Red Hat Enterprise Linux 9.2 Update Services for SAP SolutionsRed Hat
  • 0:8.7p1-30.el9_2.13 and laterNot affected
Red Hat Enterprise Linux 9.4 Update Services for SAP SolutionsRed Hat
  • 0:8.7p1-38.el9_4.10 and laterNot affected
Red Hat Enterprise Linux 9.6 Extended Update SupportRed Hat
  • 0:8.7p1-45.el9_6.5 and laterNot affected
Red Hat Hardened ImagesRed Hat
  • 10.3p1-6.hum1 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818590 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818589 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818505 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818496 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1791818502 and laterNot affected
Red Hat OpenShift AI 3.0Red Hat
  • 1793042072 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818602 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818598 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818512 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818587 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818778 and laterNot affected
Red Hat OpenShift AI 3.2Red Hat
  • 1791818512 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818782 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818782 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818627 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818790 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818874 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818792 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818662 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1791818877 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791883722 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881612 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791885618 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881487 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881732 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791883315 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881486 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791881769 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791885505 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819252 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818749 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819206 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818979 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819123 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791818901 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791820333 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819495 and laterNot affected
Red Hat OpenShift AI 3.5Red Hat
  • 1791819104 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1786435483 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1786533529 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787135742 and laterNot affected
Red Hat Update Infrastructure 5Red Hat
  • 1787241260 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
    Red Hat Enterprise Linux 7Red Hat
      Red Hat OpenShift Container Platform 4Red Hat
        Red Hat OpenShift Container Platform 4Red Hat
          Red Hat OpenShift Container Platform 5Red Hat

            References

            Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.