← CVE Intelligence

CVE-2026-55653

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service PUBLISHED

Description (CNA)

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:9.9p1-25.el10_2 before *
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Supportunaffected 0:9.9p1-7.el10_0.5 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.0p1-30.el8_10 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:8.0p1-30.el8_10 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:9.9p1-9.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:9.9p1-9.el9_8 before *
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutionsunaffected 0:8.7p1-38.el9_4.10 before *
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Supportunaffected 0:8.7p1-45.el9_6.5 before *
Red Hat / Red Hat Hardened Imagesunaffected 10.3p1-6.hum1 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818590 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818589 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818505 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818496 before *
Red Hat / Red Hat OpenShift AI 3.0unaffected 1791818502 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818602 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818598 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818512 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818587 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818778 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1791818512 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818782 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818782 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818627 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818790 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818874 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818792 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818662 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1791818877 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791883722 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881612 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791885618 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881487 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881732 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791883315 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881486 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791881769 before *
Red Hat / Red Hat OpenShift AI 3.4unaffected 1791885505 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819252 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818749 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819206 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818979 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819123 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791818901 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791820333 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819495 before *
Red Hat / Red Hat OpenShift AI 3.5unaffected 1791819104 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786435483 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1786533529 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787135742 before *
Red Hat / Red Hat Update Infrastructure 5unaffected 1787241260 before *
Red Hat / Red Hat Enterprise Linux 6affected
Red Hat / Red Hat Enterprise Linux 7affected
Red Hat / Red Hat OpenShift Container Platform 4affected
Red Hat / Red Hat OpenShift Container Platform 4affected

CWE

CWE-415

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.