CVE-2026-110924: Incomplete Cleanup in Red Hat Red Hat Enterprise Linux 10

This vulnerability affects OpenSSH with GSSAPI authentication enabled on Red Hat Enterprise Linux 10. When a GSSAPI authentication attempt fails, delegated credentials may remain stored for the connection despite the user not being authorized. If a later login attempt on the same connection succeeds, it may be granted access based on the leftover delegated credentials, bypassing proper authorization checks. The CVSS 3.1 base score is 4.8, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and limited confidentiality and integrity impact.

An attacker could potentially gain unauthorized access to a session by exploiting leftover delegated credentials from a failed GSSAPI authentication attempt. This could lead to limited confidentiality and integrity compromise on the affected system. There is no indication of availability impact or known exploits in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-110924 for current remediation guidance. Until a patch is applied, consider disabling GSSAPI authentication if it is not required or monitor for unusual login activity related to GSSAPI sessions.