{"id":"CVE-2026-55653","state":"PUBLISHED","title":"Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service","description":"A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS).","publishedAt":"2026-06-23T03:36:22.741Z","updatedAt":"2026-10-29T22:17:49.278Z","severity":{"score":4.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","source":"redhat"},"assigner":"redhat","products":["Red Hat Red Hat Enterprise Linux 10","Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support","Red Hat Red Hat Enterprise Linux 8","Red Hat Red Hat Enterprise Linux 9","Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support","Red Hat Red Hat Hardened Images","Red Hat Red Hat OpenShift AI 3.0","Red Hat Red Hat OpenShift AI 3.2","Red Hat Red Hat OpenShift AI 3.3","Red Hat Red Hat OpenShift AI 3.4","Red Hat Red Hat OpenShift AI 3.5","Red Hat Red Hat Update Infrastructure 5","Red Hat Red Hat Enterprise Linux 6","Red Hat Red Hat Enterprise Linux 7","Red Hat Red Hat OpenShift Container Platform 4"],"affected":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-25.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-7.el10_0.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.0p1-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.0p1-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-9.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-9.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-30.el9_2.13","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-38.el9_4.10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-45.el9_6.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"openssh-main","defaultStatus":"affected","versions":[{"version":"10.3p1-6.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1791818590","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818589","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818505","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818496","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818502","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042072","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818602","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818598","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818512","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1791818587","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818778","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818512","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818782","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-rocm-6.4-rhel9","defaultStatus":"affected","versions":[{"version":"1791818782","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791818627","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-rocm-7.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791818790","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818874","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791818792","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791818662","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818877","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791883722","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791881612","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791885618","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-rocm-6.4-rhel9","defaultStatus":"affected","versions":[{"version":"1791881487","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791881732","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-rocm-7.1-rhel9","defaultStatus":"affected","versions":[{"version":"1791883315","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1791881486","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791881769","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791885505","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791819252","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1791818749","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791819206","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791818979","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-rocm-7.14-rhel9","defaultStatus":"affected","versions":[{"version":"1791819123","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818901","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-rubin-rhel9","defaultStatus":"affected","versions":[{"version":"1791820333","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791819495","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791819104","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-rhel9","defaultStatus":"affected","versions":[{"version":"1786435483","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","defaultStatus":"affected","versions":[{"version":"1786533529","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-tp-rhel9","defaultStatus":"affected","versions":[{"version":"1787135742","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","defaultStatus":"affected","versions":[{"version":"1787241260","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]}],"references":["https://access.redhat.com/errata/RHSA-2026:36759","https://access.redhat.com/errata/RHSA-2026:47755","https://access.redhat.com/errata/RHSA-2026:47756","https://access.redhat.com/errata/RHSA-2026:47757","https://access.redhat.com/errata/RHSA-2026:54387","https://access.redhat.com/errata/RHSA-2026:58981","https://access.redhat.com/errata/RHSA-2026:76748","https://access.redhat.com/errata/RHSA-2026:76993","https://access.redhat.com/errata/RHSA-2026:80513","https://access.redhat.com/errata/RHSA-2026:82749","https://access.redhat.com/errata/RHSA-2026:82750","https://access.redhat.com/errata/RHSA-2026:82751","https://access.redhat.com/errata/RHSA-2026:82752","https://access.redhat.com/errata/RHSA-2026:82753","https://access.redhat.com/errata/RHSA-2026:82754","https://access.redhat.com/errata/RHSA-2026:82755","https://access.redhat.com/errata/RHSA-2026:82756","https://access.redhat.com/errata/RHSA-2026:82757","https://access.redhat.com/errata/RHSA-2026:82758","https://access.redhat.com/errata/RHSA-2026:82759","https://access.redhat.com/errata/RHSA-2026:82761","https://access.redhat.com/errata/RHSA-2026:82762","https://access.redhat.com/errata/RHSA-2026:82763","https://access.redhat.com/errata/RHSA-2026:82897","https://access.redhat.com/errata/RHSA-2026:82898","https://access.redhat.com/errata/RHSA-2026:82899","https://access.redhat.com/errata/RHSA-2026:82900","https://access.redhat.com/errata/RHSA-2026:82901","https://access.redhat.com/errata/RHSA-2026:82902","https://access.redhat.com/errata/RHSA-2026:82903","https://access.redhat.com/errata/RHSA-2026:82904","https://access.redhat.com/errata/RHSA-2026:82907","https://access.redhat.com/errata/RHSA-2026:82908","https://access.redhat.com/errata/RHSA-2026:82909","https://access.redhat.com/errata/RHSA-2026:82910","https://access.redhat.com/errata/RHSA-2026:82912","https://access.redhat.com/errata/RHSA-2026:82913","https://access.redhat.com/errata/RHSA-2026:82914","https://access.redhat.com/errata/RHSA-2026:82915","https://access.redhat.com/errata/RHSA-2026:82916","https://access.redhat.com/errata/RHSA-2026:82917","https://access.redhat.com/errata/RHSA-2026:82918","https://access.redhat.com/errata/RHSA-2026:82920","https://access.redhat.com/errata/RHSA-2026:82921","https://access.redhat.com/errata/RHSA-2026:82922","https://access.redhat.com/errata/RHSA-2026:82923","https://access.redhat.com/errata/RHSA-2026:89739","https://access.redhat.com/errata/RHSA-2026:91232","https://access.redhat.com/security/cve/CVE-2026-55653","https://bugzilla.redhat.com/show_bug.cgi?id=2462351"],"weaknesses":["CWE-415"],"ingestedAt":"2026-10-29T23:16:04.497Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/55xxx/CVE-2026-55653.json","commit":"dc7676b3f67d6707e4927968546e7e0125ff7ec7","baselineCommit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-55653","state":"PUBLISHED","datePublished":"2026-06-23T03:36:22.741Z","dateUpdated":"2026-10-29T22:17:49.278Z","assignerShortName":"redhat","assignerOrgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateReserved":"2026-06-16T23:55:05.737Z"},"containers":{"cna":{"title":"Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service","descriptions":[{"lang":"en","value":"A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This occurs during FIPS (Federal Information Processing Standards) mode known-group validation when the client processes attacker-controlled DH-GEX group parameters. Successful exploitation leads to client-side process termination, resulting in a Denial of Service (DoS)."}],"affected":[{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-25.el10_2","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.2"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 10.0 Extended Update Support","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-7.el10_0.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux_eus:10.0"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.0p1-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 8","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.0p1-30.el8_10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream","cpe:/o:redhat:enterprise_linux:8::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-9.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:9.9p1-9.el9_8","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::appstream","cpe:/o:redhat:enterprise_linux:9::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-30.el9_2.13","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream","cpe:/o:redhat:rhel_e4s:9.2::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-38.el9_4.10","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.4::appstream","cpe:/o:redhat:rhel_e4s:9.4::baseos"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 9.6 Extended Update Support","packageName":"openssh","defaultStatus":"affected","versions":[{"version":"0:8.7p1-45.el9_6.5","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.6::appstream","cpe:/o:redhat:rhel_eus:9.6::baseos"]},{"vendor":"Red Hat","product":"Red Hat Hardened Images","packageName":"openssh-main","defaultStatus":"affected","versions":[{"version":"10.3p1-6.hum1","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:hummingbird:1"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1791818590","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818589","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818505","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818496","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818502","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.0","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1793042072","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.0::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818602","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818598","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818512","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-cuda-rhel9","defaultStatus":"affected","versions":[{"version":"1791818587","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818778","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.2","packageName":"rhai/base-image-rocm-rhel9","defaultStatus":"affected","versions":[{"version":"1791818512","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.2::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818782","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-rocm-6.4-rhel9","defaultStatus":"affected","versions":[{"version":"1791818782","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791818627","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-rocm-7.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791818790","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818874","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791818792","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791818662","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.3","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791818877","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.3::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791883722","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791881612","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791885618","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-rocm-6.4-rhel9","defaultStatus":"affected","versions":[{"version":"1791881487","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791881732","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-rocm-7.1-rhel9","defaultStatus":"affected","versions":[{"version":"1791883315","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1791881486","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791881769","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.4","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791885505","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.4::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-spyre-rhel9","defaultStatus":"affected","versions":[{"version":"1791819252","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-gaudi-rhel9","defaultStatus":"affected","versions":[{"version":"1791818749","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791819206","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-neuron-rhel9","defaultStatus":"affected","versions":[{"version":"1791818979","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-rocm-7.14-rhel9","defaultStatus":"affected","versions":[{"version":"1791819123","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-tpu-rhel9","defaultStatus":"affected","versions":[{"version":"1791818901","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-rubin-rhel9","defaultStatus":"affected","versions":[{"version":"1791820333","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cuda-13.0-rhel9","defaultStatus":"affected","versions":[{"version":"1791819495","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat OpenShift AI 3.5","packageName":"rhai/base-image-cuda-12.9-rhel9","defaultStatus":"affected","versions":[{"version":"1791819104","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:openshift_ai:3.5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-rhel9","defaultStatus":"affected","versions":[{"version":"1786435483","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-rhel9","defaultStatus":"affected","versions":[{"version":"1786533529","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/installer-tp-rhel9","defaultStatus":"affected","versions":[{"version":"1787135742","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Update Infrastructure 5","packageName":"rhui5/rhua-tp-rhel9","defaultStatus":"affected","versions":[{"version":"1787241260","status":"unaffected","lessThan":"*","versionType":"rpm"}],"collectionURL":"https://catalog.redhat.com/software/containers/","cpes":["cpe:/a:redhat:rhui:5::el9"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 6","packageName":"openssh","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"]},{"vendor":"Red Hat","product":"Red Hat Enterprise Linux 7","packageName":"openssh","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:7"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-8","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]},{"vendor":"Red Hat","product":"Red Hat OpenShift Container Platform 4","packageName":"openshift/ose-rhel-coreos-9","defaultStatus":"affected","collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:openshift:4"]}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:36759","name":"RHSA-2026:36759","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47755","name":"RHSA-2026:47755","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47756","name":"RHSA-2026:47756","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:47757","name":"RHSA-2026:47757","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:54387","name":"RHSA-2026:54387","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:58981","name":"RHSA-2026:58981","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76748","name":"RHSA-2026:76748","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:76993","name":"RHSA-2026:76993","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:80513","name":"RHSA-2026:80513","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82749","name":"RHSA-2026:82749","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82750","name":"RHSA-2026:82750","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82751","name":"RHSA-2026:82751","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82752","name":"RHSA-2026:82752","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82753","name":"RHSA-2026:82753","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82754","name":"RHSA-2026:82754","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82755","name":"RHSA-2026:82755","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82756","name":"RHSA-2026:82756","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82757","name":"RHSA-2026:82757","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82758","name":"RHSA-2026:82758","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82759","name":"RHSA-2026:82759","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82761","name":"RHSA-2026:82761","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82762","name":"RHSA-2026:82762","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82763","name":"RHSA-2026:82763","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82897","name":"RHSA-2026:82897","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82898","name":"RHSA-2026:82898","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82899","name":"RHSA-2026:82899","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82900","name":"RHSA-2026:82900","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82901","name":"RHSA-2026:82901","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82902","name":"RHSA-2026:82902","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82903","name":"RHSA-2026:82903","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82904","name":"RHSA-2026:82904","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82907","name":"RHSA-2026:82907","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82908","name":"RHSA-2026:82908","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82909","name":"RHSA-2026:82909","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82910","name":"RHSA-2026:82910","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82912","name":"RHSA-2026:82912","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82913","name":"RHSA-2026:82913","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82914","name":"RHSA-2026:82914","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82915","name":"RHSA-2026:82915","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82916","name":"RHSA-2026:82916","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82917","name":"RHSA-2026:82917","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82918","name":"RHSA-2026:82918","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82920","name":"RHSA-2026:82920","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82921","name":"RHSA-2026:82921","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82922","name":"RHSA-2026:82922","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:82923","name":"RHSA-2026:82923","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:89739","name":"RHSA-2026:89739","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2026:91232","name":"RHSA-2026:91232","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-55653","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2462351","name":"RHBZ#2462351","tags":["issue-tracking","x_refsource_REDHAT"]}],"metrics":[{"other":{"content":{"value":"Moderate","namespace":"https://access.redhat.com/security/updates/classification/"},"type":"Red Hat severity rating"}},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":4.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-415","description":"Double Free","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"redhat","orgId":"53f830b8-0a3f-465b-8143-3b8a9948e749","dateUpdated":"2026-10-29T22:17:49.278Z"},"datePublic":"2026-06-22T23:17:43.088Z","x_redhatCweChain":"CWE-415: Double Free","workarounds":[{"lang":"en","value":"To mitigate this issue, OpenSSH clients operating in FIPS mode should avoid negotiating the `diffie-hellman-group-exchange-sha256` key exchange algorithm. This can be achieved by explicitly listing allowed key exchange algorithms in the client's SSH configuration file (e.g., `/etc/ssh/ssh_config` or `~/.ssh/config`), ensuring `diffie-hellman-group-exchange-sha256` is *not* included. For example, to use a subset of common algorithms, you might configure:\n\n```\nKexAlgorithms curve25519-sha256@libssh.org,ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group14-sha1\n```\n\n(Note: The above example `KexAlgorithms` list is illustrative and should be adjusted based on your environment's security requirements.)\n\nAdditionally, avoid using non-fatal client flows, such as `ssh-keyscan`, against untrusted SSH servers while FIPS mode is enabled. Changes to `ssh_config` will take effect for new SSH connections."}],"timeline":[{"lang":"en","time":"2026-04-26T18:54:39.000Z","value":"Reported to Red Hat."},{"lang":"en","time":"2026-06-22T23:17:43.088Z","value":"Made public."}],"credits":[{"lang":"en","value":"This issue was discovered by In partnership with Red Hat (Aisle.com)."}],"x_generator":{"engine":"cvelib 1.8.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-23T14:30:51.025049Z","id":"CVE-2026-55653","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-23T14:31:00.827Z"}}]}}}