This vulnerability involves inefficient regular expression complexity in the match_pattern() function of libssh on Red Hat Enterprise Linux 10. A remote attacker controlling client configuration or known_hosts files can craft specific hostnames that cause excessive backtracking during pattern matching, resulting in timeouts and resource exhaustion. The attack vector is local (AV:L), requires high attack complexity (AC:H), low privileges (PR:L), and user interaction (UI:R). The impact is limited to denial of service (DoS) with no confidentiality or integrity loss.

The impact is a denial of service condition on the client side due to resource exhaustion and timeouts caused by inefficient regex processing. There is no impact on confidentiality or integrity. The attack requires local access and user interaction, limiting its severity and exploitability. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2026-0967 for current remediation guidance. Since no explicit patch or workaround is mentioned in the advisory content provided, users should monitor Red Hat's official channels for updates. Avoid using untrusted or manipulated client configuration and known_hosts files to reduce exposure.