VDB
RHSA-2026:65838
RHSA-2026:65838
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | kernel-debuginfo-common-aarch64-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | kernel-tools-libs-devel-0:5.14.0-284.191.1.el9_2.x86_64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | kernel-debuginfo-common-ppc64le-0:5.14.0-284.191.1.el9_2.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | openshift-hyperkube-0:4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 4.13.0-202608122150.p2.gbbc7c0c.assembly.stream.el8.ppc64le |
| Red Hat | kernel-rt-debug-devel-0:5.14.0-284.191.1.rt14.476.el9_2.x86_64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.rt14.476.el9 |
| Red Hat | kernel-debug-modules-partner-0:5.14.0-284.191.1.el9_2.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | kernel-64k-debug-modules-core-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | openshift-clients-redistributable-0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.x86_64 as a component of Red Hat OpenShift Container Platform 4.13 | 4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.x86 |
| Red Hat | kernel-64k-modules-partner-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | cri-tools-debugsource-0:1.26.0-9.el8.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 1.26.0-9.el8.aarch64 |
| Red Hat | cri-tools-0:1.26.0-9.el8.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 1.26.0-9.el8.ppc64le |
| Red Hat | kernel-debug-modules-internal-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | openshift-clients-0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.src as a component of Red Hat OpenShift Container Platform 4.13 | 4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.src |
| Red Hat | openshift-clients-0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.ppc64le |
| Red Hat | containernetworking-plugins-debuginfo-1:1.4.0-8.rhaos4.13.el8.s390x as a component of Red Hat OpenShift Container Platform 4.13 | 1.4.0-8.rhaos4.13.el8.s390x |
| Red Hat | openshift-clients-0:4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.s390x as a component of Red Hat OpenShift Container Platform 4.13 | 4.13.0-202608122150.p2.gd192e90.assembly.stream.el9.s390x |
| Red Hat | kernel-debug-modules-internal-0:5.14.0-284.191.1.el9_2.ppc64le as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | perf-debuginfo-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | kernel-64k-devel-0:5.14.0-284.191.1.el9_2.aarch64 as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
| Red Hat | kernel-debug-core-0:5.14.0-284.191.1.el9_2.s390x as a component of Red Hat OpenShift Container Platform 4.13 | 5.14.0-284.191.1.el9 |
…and 285 more
Timeline
- Sep 17, 2026 CVE Published
- Sep 24, 2026 CVE Updated
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Distribution Patch
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
- Sep 24, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:65838 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2445356 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2455470 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2456339 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467809 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2467820 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2500846 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65838.json advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
- https://pkg.go.dev/vuln/GO-2026-4337 advisory
- https://access.redhat.com/security/cve/CVE-2026-15809 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-15809 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-15809 advisory
…and 34 more