A NULL pointer dereference vulnerability exists in libssh within Red Hat Enterprise Linux 10. The issue arises from a missing null check on the 'longname' field in the SSH_FXP_NAME message during SFTP file listing operations. A malicious SFTP server can exploit this by sending a malformed 'longname' field, causing the application to read beyond allocated heap memory. This can result in unexpected behavior or denial of service due to application crashes. The CVSS score is 3.1 (low severity) with network attack vector, high attack complexity, no privileges required, user interaction required, and impact limited to availability.

The vulnerability can cause denial of service through application crashes when interacting with a malicious SFTP server. There is no impact on confidentiality or integrity. No known exploits are reported in the wild. The low CVSS score reflects limited impact and exploitation complexity.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-0968 for current remediation guidance. Until a patch is confirmed, avoid connecting to untrusted or malicious SFTP servers to mitigate risk. No vendor advisory content indicates that no action is required or that the issue is already mitigated.