CVE-2026-55654: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10
A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.
AI Analysis
Technical Summary
This vulnerability in OpenSSH arises from a heap out-of-bounds read during the cleanup of GSSAPI authentication indicators due to a missing NULL sentinel termination in the auth-indicators array. Exploitation requires specific configurations involving GSSAPI authentication and a Kerberos environment. Successful exploitation results in a denial of service by crashing or aborting the SSH authentication path, impacting the availability of the SSH service on Red Hat Enterprise Linux 10. Red Hat has issued security advisories and updated OpenSSH packages (openssh-10.3p1-6.hum1) for their Hardened Images to address this flaw.
Potential Impact
The vulnerability allows a remote attacker to cause a denial of service (DoS) by crashing the SSH authentication process under specific GSSAPI and Kerberos configurations. There is no impact on confidentiality or integrity. The CVSS score is 3.7 (low severity), reflecting limited impact restricted to availability.
Mitigation Recommendations
Red Hat has released updated OpenSSH packages as part of their Hardened Images RPMs to fix this vulnerability. Users should apply the update openssh-10.3p1-6.hum1 or later from Red Hat's official repositories. Patch status is confirmed by Red Hat advisories RHSA-2026:36759. No other mitigation is required beyond applying the official update.
CVE-2026-55654: Out-of-bounds Read in Red Hat Red Hat Enterprise Linux 10
Description
A flaw was found in OpenSSH. This vulnerability, a heap out-of-bounds read, occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. A remote attacker, under specific configurations involving GSSAPI authentication and a Kerberos environment, could exploit this to cause the SSH authentication path to crash or abort. This leads to a denial of service (DoS), impacting the availability of the SSH service.
CVSS v3.1
Score 3.7low
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in OpenSSH arises from a heap out-of-bounds read during the cleanup of GSSAPI authentication indicators due to a missing NULL sentinel termination in the auth-indicators array. Exploitation requires specific configurations involving GSSAPI authentication and a Kerberos environment. Successful exploitation results in a denial of service by crashing or aborting the SSH authentication path, impacting the availability of the SSH service on Red Hat Enterprise Linux 10. Red Hat has issued security advisories and updated OpenSSH packages (openssh-10.3p1-6.hum1) for their Hardened Images to address this flaw.
Potential Impact
The vulnerability allows a remote attacker to cause a denial of service (DoS) by crashing the SSH authentication process under specific GSSAPI and Kerberos configurations. There is no impact on confidentiality or integrity. The CVSS score is 3.7 (low severity), reflecting limited impact restricted to availability.
Mitigation Recommendations
Red Hat has released updated OpenSSH packages as part of their Hardened Images RPMs to fix this vulnerability. Users should apply the update openssh-10.3p1-6.hum1 or later from Red Hat's official repositories. Patch status is confirmed by Red Hat advisories RHSA-2026:36759. No other mitigation is required beyond applying the official update.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-06-16T23:55:05.737Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-55654","vendor":"Red Hat"}]
Threat ID: 6a3a0366eed863c81e190b85
Added to database: 06/23/2026, 03:54:14 UTC
Last enriched: 07/30/2026, 21:42:30 UTC
Last updated: 08/06/2026, 12:41:11 UTC
Views: 146
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.