golang.org/x/crypto/ssh: CertChecker nil callback panic <0.52.0
CVE-2026-39835 Published on May 22, 2026
Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
Vulnerability Analysis
CVE-2026-39835 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Privileges Required:
NONE
Confidentiality Impact:
NONE
Availability Impact:
HIGH
Weakness Type
NULL Pointer Dereference
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit. NULL pointer dereference issues can occur through a number of flaws, including race conditions, and simple programming omissions.
Products Associated with CVE-2026-39835
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
golang.org/x/crypto/ssh:
-
Before 0.52.0
is affected.
Red Hat Enterprise Linux 10:
-
Version 2:1.43.1-3.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 7:5.8.2-4.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 8100020260709093628.afee755d and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 6:5.8.2-4.el9_8 and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 2:1.43.1-3.el9_8 and below *
is unaffected.
Red Hat
RHEM 1.0 for RHEL 9:
-
Version 0:1.0.3-1.el9em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 10:
-
Version 0:1.1.3-1.el10em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 9:
-
Version 0:1.1.3-1.el9em and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1781686446 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1782891812 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1781686458 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1782891789 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1782925137 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1782925137 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502465 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502025 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502494 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502401 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502403 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502022 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502023 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502029 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502445 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194638 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194353 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784196588 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784195620 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194309 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194188 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194653 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194144 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194980 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194347 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194971 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128388 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784128860 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126780 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127787 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127762 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126832 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126774 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127791 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127135 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784126733 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127775 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057515 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057529 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057884 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783058067 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783057868 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.1:
-
Version 1783058284 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612432 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611973 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612714 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783611805 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1784121108 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612119 and below *
is unaffected.
Red Hat OpenShift Builds 1.8.1:
-
Version 1783612163 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932114 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782931768 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932104 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536000 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783535989 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783536515 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932521 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018461 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783018421 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932812 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537001 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932919 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537586 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782932969 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933015 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933042 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537392 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933235 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933251 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537955 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933417 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783537742 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782933602 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1783019377 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934054 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934036 and below *
is unaffected.
Red Hat Openshift Data Foundation 4.22:
-
Version 1782934284 and below *
is unaffected.
Red Hat Quay 3.1:
-
Version 1783750447 and below *
is unaffected.
Red Hat Quay 3.16:
-
Version 1783955846 and below *
is unaffected.
Red Hat Quay 3.9:
-
Version 1784125838 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968508 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783961973 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783959819 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968972 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783969365 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.3:
-
Version 1783968644 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 4-1.4.2 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330572 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783330691 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332061 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326847 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783332625 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1783326690 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782992727 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 1782903492 and below *
is unaffected.
Assisted Installer for Red Hat OpenShift Container Platform 2:
cert-manager Operator for Red Hat OpenShift:
cert-manager Operator for Red Hat OpenShift:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Cryostat 4:
External Secrets Operator for Red Hat OpenShift:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift API for Data Protection:
Red Hat
OpenShift Pipelines:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Ceph Storage 9:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 9:
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Dev Spaces:
Red Hat OpenShift Dev Workspaces Operator:
Red Hat OpenShift Dev Workspaces Operator:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift GitOps:
Red Hat OpenShift on AWS:
Red Hat OpenShift Virtualization 4:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 18.0:
Red Hat OpenStack Platform 18.0:
Red Hat Quay 3:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat Trusted Artifact Signer:
Red Hat
Security Profiles Operator:
Red Hat
Security Profiles Operator:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.
