Resource Leak in golang.org/x/crypto/ssh <0.52.0 via Global Request Buffers
CVE-2026-39830 Published on May 22, 2026
Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
Vulnerability Analysis
CVE-2026-39830 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Privileges Required:
NONE
Confidentiality Impact:
NONE
Availability Impact:
HIGH
Weakness Type
Missing Release of Resource after Effective Lifetime
The software does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed. When a resource is not released after use, it can allow attackers to cause a denial of service by causing the allocation of resources without triggering their release. Frequently-affected resources include memory, CPU, disk space, power or battery, etc.
Products Associated with CVE-2026-39830
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2026-39830 are published in these products:
Affected Versions
golang.org/x/crypto/ssh:
-
Before 0.52.0
is affected.
Red Hat Enterprise Linux 10:
-
Version 2:1.43.1-3.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 7:5.8.2-4.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 8100020260701102925.afee755d and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 2:1.43.1-2.el9_8 and below *
is unaffected.
Red Hat
RHEM 1.0 for RHEL 9:
-
Version 0:1.0.3-1.el9em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 10:
-
Version 0:1.1.3-1.el10em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 9:
-
Version 0:1.1.3-1.el9em and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782400868 and below *
is unaffected.
Red Hat
DevWorkspace Operator 0.42:
-
Version 1782401674 and below *
is unaffected.
Red Hat
OpenShift API for Data Protection 1.6:
-
Version 1784058822 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502465 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502025 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502494 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502401 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502403 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502023 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502029 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502445 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194638 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194353 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784196588 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784195620 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194309 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194188 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194653 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194980 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194347 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194971 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128388 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128860 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126780 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127787 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126832 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126774 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127791 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127135 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126733 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127775 and below *
is unaffected.
Red Hat OpenShift AI 3.3:
-
Version 1782471656 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057515 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057529 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057884 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783058067 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783057868 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.4:
-
Version 1783058284 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612432 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611973 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612714 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611805 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1784121108 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612119 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612163 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932114 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782931768 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932104 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536000 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783535989 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536515 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932521 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018461 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018421 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932812 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537001 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932919 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537586 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932969 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933015 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933042 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537392 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933235 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933251 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537955 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933417 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537742 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933602 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783019377 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934054 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934036 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934284 and below *
is unaffected.
Red Hat Quay 3.1:
-
Version 1783750447 and below *
is unaffected.
Red Hat Quay 3.12:
-
Version 1783751865 and below *
is unaffected.
-
Version 1784353904 and below *
is unaffected.
Red Hat Quay 3.15:
-
Version 1784351966 and below *
is unaffected.
Red Hat Quay 3.16:
-
Version 1783955846 and below *
is unaffected.
Red Hat Quay 3.9:
-
Version 1784125838 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968508 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783961973 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783959819 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968972 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 4-1.4.2 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330691 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332061 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326847 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783183848 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782992727 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782903492 and below *
is unaffected.
Assisted Installer for Red Hat OpenShift Container Platform 2:
cert-manager Operator for Red Hat OpenShift:
cert-manager Operator for Red Hat OpenShift:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Cryostat 4:
External Secrets Operator for Red Hat OpenShift:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift Pipelines:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Security 4:
Red Hat Advanced Cluster Security 4:
Red Hat Advanced Cluster Security 4:
Red Hat Ceph Storage 9:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat Openshift Data Foundation 4:
Red Hat Openshift Data Foundation 4:
Red Hat OpenShift Dev Spaces:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift on AWS:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 18.0:
Red Hat OpenStack Platform 18.0:
Red Hat Quay 3:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat
Security Profiles Operator:
Red Hat
Security Profiles Operator:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.
