Red Hat issued a security advisory (RHSA-2026:46535) for Red Hat Hardened Images RPMs that includes updated libssh2 packages (version 1.11.1-10.1.hum1) for aarch64 and x86_64 architectures. This update addresses the vulnerability tracked as CVE-2026-58051, which involves issues classified under CWE-908 (Use of Uninitialized Variable) and CWE-824 (Access of Resource Using Incompatible Type). The advisory does not explicitly state that a fix is available or provide patch instructions beyond referencing the updated packages. The vulnerability is rated as high severity, but no exploits are currently known in the wild.

The vulnerability affects libssh2 components used in Red Hat Hardened Images, potentially leading to security issues related to improper resource handling or uninitialized variables as indicated by the CWE classifications. The high severity rating suggests significant risk if exploited, but no active exploitation has been reported. The impact is limited to systems using the affected libssh2 versions within Red Hat Hardened Images RPMs.

The vendor advisory references updated libssh2 packages (version 1.11.1-10.1.hum1) for affected architectures. Users should apply these updates as provided by Red Hat to remediate the vulnerability. Since no explicit patch availability or remediation instructions are detailed beyond the update, users should consult the official Red Hat advisory and update their Red Hat Hardened Images RPMs accordingly. Patch status is not explicitly confirmed; verify current remediation guidance from Red Hat's official resources.