CVE-2026-110927

MEDIUMCVSS 4.3

Description

A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.

Timeline

Published:October 15th, 2026 2:17 PM

Last modified:October 15th, 2026 8:17 PM

CVSS Scoring

CVSS v3: 4.3 (MEDIUM)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Weaknesses (CWE)

CWE-770

References & Reports

Advisories, patches, and third-party reports

https://access.redhat.com/errata/RHSA-2026:82247
https://access.redhat.com/security/cve/CVE-2026-110927
https://bugzilla.redhat.com/show_bug.cgi?id=2553037

Source: NIST NVD · Data may lag official sources by up to one minute