CVE-2026-55653Published
Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-55653 · Microsoft / collected KEV context
cve-program · CVE-2026-55653
- https://access.redhat.com/errata/RHSA-2026:36759
- https://access.redhat.com/errata/RHSA-2026:47755
- https://access.redhat.com/errata/RHSA-2026:47756
- https://access.redhat.com/errata/RHSA-2026:47757
- https://access.redhat.com/errata/RHSA-2026:54387
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:76748
- https://access.redhat.com/errata/RHSA-2026:76993
- https://access.redhat.com/errata/RHSA-2026:80513
- https://access.redhat.com/errata/RHSA-2026:82749
- https://access.redhat.com/errata/RHSA-2026:82750
- https://access.redhat.com/errata/RHSA-2026:82751
- https://access.redhat.com/errata/RHSA-2026:82752
- https://access.redhat.com/errata/RHSA-2026:82753
- https://access.redhat.com/errata/RHSA-2026:82754
- https://access.redhat.com/errata/RHSA-2026:82755
- https://access.redhat.com/errata/RHSA-2026:82756
- https://access.redhat.com/errata/RHSA-2026:82757
- https://access.redhat.com/errata/RHSA-2026:82758
- https://access.redhat.com/errata/RHSA-2026:82759
- https://access.redhat.com/errata/RHSA-2026:82761
- https://access.redhat.com/errata/RHSA-2026:82762
- https://access.redhat.com/errata/RHSA-2026:82763
- https://access.redhat.com/errata/RHSA-2026:82897
- https://access.redhat.com/errata/RHSA-2026:82898
- https://access.redhat.com/errata/RHSA-2026:82899
- https://access.redhat.com/errata/RHSA-2026:82900
- https://access.redhat.com/errata/RHSA-2026:82901
- https://access.redhat.com/errata/RHSA-2026:82902
- https://access.redhat.com/errata/RHSA-2026:82903
- https://access.redhat.com/errata/RHSA-2026:82904
- https://access.redhat.com/errata/RHSA-2026:82907
- https://access.redhat.com/errata/RHSA-2026:82908
- https://access.redhat.com/errata/RHSA-2026:82909
- https://access.redhat.com/errata/RHSA-2026:82910
- https://access.redhat.com/errata/RHSA-2026:82912
- https://access.redhat.com/errata/RHSA-2026:82913
- https://access.redhat.com/errata/RHSA-2026:82914
- https://access.redhat.com/errata/RHSA-2026:82915
- https://access.redhat.com/errata/RHSA-2026:82916
- https://access.redhat.com/errata/RHSA-2026:82917
- https://access.redhat.com/errata/RHSA-2026:82918
- https://access.redhat.com/errata/RHSA-2026:82920
- https://access.redhat.com/errata/RHSA-2026:82921
- https://access.redhat.com/errata/RHSA-2026:82922
- https://access.redhat.com/errata/RHSA-2026:82923
- https://access.redhat.com/errata/RHSA-2026:89739
- https://access.redhat.com/security/cve/CVE-2026-55653
- https://bugzilla.redhat.com/show_bug.cgi?id=2462351
Related operational evidence
Explicit CVE identifiers- Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service · Affected-version evidence changed · 26 Oct 2026