CVE-2026-39835

Published: May 26, 2026Last modified: May 29, 2026

Description

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.

Severity score breakdown

Parameter	Value
Base score	5.3
Attack Vector	NETWORK
Attack complexity	LOW
Privileges required	NONE
User interaction	NONE
Scope	UNCHANGED
Confidentiality	NONE
Integrity impact	NONE
Availability impact	LOW
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Status

Product	Release	Package	Status
Alpaquita Linux	23 LTS	buildah	Vulnerable (1.28.0-r1)
		containerd	Vulnerable (1.6.10-r0)
		podman	Vulnerable (4.3.1-r0)
		skopeo	Vulnerable (1.10.0-r2)
	25 LTS	buildah	Vulnerable (1.40.0-r0)
		containerd	Vulnerable (2.1.1-r0)
		docker-cli-buildx	Vulnerable (0.24.0-r0)
		google-guest-agent	Vulnerable (20250521.00-r0)
		osv-scanner	Vulnerable (2.1.0-r4)
		podman	Vulnerable (5.5.0-r0)
		skopeo	Vulnerable (1.18.0-r2)
	Stream	buildah	Vulnerable (1.31.0-r0)
		calicoctl	Vulnerable (3.31.3-r0)
		cilium-cli	Vulnerable (0.19.0-r12)
		containerd	Vulnerable (1.7.2-r1)
		docker-cli-buildx	Vulnerable (0.11.0-r0)
		etcd	Vulnerable (3.6.4-r6)
		google-guest-agent	Vulnerable (20250214.01-r0)
		grype	Vulnerable (0.100.0-r0)
		helm	Vulnerable (3.19.0-r4)
		osv-scanner	Vulnerable (2.1.0-r2)
		podman	Vulnerable (4.5.1-r1)
		skopeo	Vulnerable (1.13.0-r1)

CVE-2026-39835

Description

Severity score breakdown

Status

References