A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data… (CVE-2026-59850)
A use-after-free vulnerability was found in libssh where data callbacks may be invoked after the associated data has been freed if data packets are processed after a channel is closed. This can lead to crashes or potential use-after-free conditions affecting availability.
AI Analysis
Technical Summary
CVE-2026-59850 describes a flaw in libssh where processing data packets after a channel closure can cause channel data callbacks to be invoked on already freed memory. This use-after-free condition can result in application crashes or potential memory corruption. The vulnerability is classified under CWE-416 (Use After Free). Red Hat has issued an update for libssh (version 0.12.1-4.hum1) in their Hardened Images RPMs to address this issue.
Potential Impact
The vulnerability can cause denial of service through application crashes due to use-after-free conditions. There is also a theoretical risk of arbitrary code execution if an attacker can exploit the use-after-free to overwrite function pointers, but no such exploitation is confirmed. Confidentiality and integrity impacts are not reported.
Mitigation Recommendations
Red Hat has released an official fix in libssh version 0.12.1-4.hum1 as part of their Hardened Images RPMs. Users should apply this update to remediate the vulnerability. Additionally, developers can manually verify that channels are not closed inside channel data callbacks as a mitigation measure. No other actions are currently required.
A flaw was found in libssh. If data packets are processed after a channel is closed, channel data callbacks can be invoked after the associated data… (CVE-2026-59850)
Description
A use-after-free vulnerability was found in libssh where data callbacks may be invoked after the associated data has been freed if data packets are processed after a channel is closed. This can lead to crashes or potential use-after-free conditions affecting availability.
CVSS v3.1
Score 4.3medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-59850 describes a flaw in libssh where processing data packets after a channel closure can cause channel data callbacks to be invoked on already freed memory. This use-after-free condition can result in application crashes or potential memory corruption. The vulnerability is classified under CWE-416 (Use After Free). Red Hat has issued an update for libssh (version 0.12.1-4.hum1) in their Hardened Images RPMs to address this issue.
Potential Impact
The vulnerability can cause denial of service through application crashes due to use-after-free conditions. There is also a theoretical risk of arbitrary code execution if an attacker can exploit the use-after-free to overwrite function pointers, but no such exploitation is confirmed. Confidentiality and integrity impacts are not reported.
Mitigation Recommendations
Red Hat has released an official fix in libssh version 0.12.1-4.hum1 as part of their Hardened Images RPMs. Users should apply this update to remediate the vulnerability. Additionally, developers can manually verify that channels are not closed inside channel data callbacks as a mitigation measure. No other actions are currently required.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-cr6p-6527-344m
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-59850"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6a6150e19c2644c7f8da17cb
Added to database: 07/22/2026, 23:23:13 UTC
Last enriched: 09/13/2026, 20:05:07 UTC
Last updated: 09/14/2026, 10:01:32 UTC
Views: 118
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.