go/crypto/ssh CPU DoS via oversized RSA/DSA keys before 0.52
CVE-2026-39829 Published on May 22, 2026
Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.
Vulnerability Analysis
CVE-2026-39829 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Privileges Required:
NONE
Confidentiality Impact:
NONE
Availability Impact:
HIGH
Weakness Type
Improper Validation of Specified Quantity in Input
The product receives input that is expected to specify a quantity (such as size or length), but it does not validate or incorrectly validates that the quantity has the required properties.
Products Associated with CVE-2026-39829
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
golang.org/x/crypto/ssh:
-
Before 0.52.0
is affected.
Red Hat Enterprise Linux 10:
-
Version 2:1.43.1-3.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 7:5.8.2-4.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 8100020260701102925.afee755d and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 2:1.43.1-2.el9_8 and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 6:5.8.2-4.el9_8 and below *
is unaffected.
Red Hat
RHEM 1.0 for RHEL 9:
-
Version 0:1.0.3-1.el9em and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782400868 and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782401674 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.6:
-
Version 1783025820 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.9:
-
Version 1782411809 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502465 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502025 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502494 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502401 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502403 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502023 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502029 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502445 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128388 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128860 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126780 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127787 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126832 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126774 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127791 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127135 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126733 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127775 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057515 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057529 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057884 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783058067 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057868 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783058284 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932114 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782931768 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932104 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536000 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783535989 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536515 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932521 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018461 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018421 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932812 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537001 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932919 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537586 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932969 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933015 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933042 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537392 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933235 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933251 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537955 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933417 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537742 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933602 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783019377 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934054 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934036 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934284 and below *
is unaffected.
Red Hat OpenShift Dev Spaces 3.29:
-
Version 1782403274 and below *
is unaffected.
Red Hat Quay 3.9:
-
Version 1784125838 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968508 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968972 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 4-1.4.2 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330691 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332061 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326847 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783183848 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782992727 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782903492 and below *
is unaffected.
Assisted Installer for Red Hat OpenShift Container Platform 2:
cert-manager Operator for Red Hat OpenShift:
cert-manager Operator for Red Hat OpenShift:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Cryostat 4:
External Secrets Operator for Red Hat OpenShift:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift Pipelines:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Security 4:
Red Hat Advanced Cluster Security 4:
Red Hat Ceph Storage 9:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Edge Manager 1:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 9:
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat Openshift Data Foundation 4:
Red Hat Openshift Data Foundation 4:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift on AWS:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 18.0:
Red Hat OpenStack Platform 18.0:
Red Hat Quay 3:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat
Security Profiles Operator:
Red Hat
Security Profiles Operator:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.
