VDB
RHSA-2026:65840
RHSA-2026:65840
PUBLISHED
CVSS 9.100000381469727 CRITICAL
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-manila-rhel8@sha256:1db02c5ceea1a77a35e615c6d4477c5c13f9fdb8b124fe2cf56137d611180e32_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-hyperkube@sha256:29063b9ebbcbc6637148a0bccff670710c4a16c46749d20f72af4e6f435eea82_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-config-reloader@sha256:42d6b2905994dc710aa9f8497f3f73818797620d8c023c41671fd6c524358a2b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-cloud-controller-manager-rhel8@sha256:459b70732d2d6fd1e0f1340d49af3b77593e1a5047d68b61a4f16e8651666275_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-prometheus-operator@sha256:13b1c93223b15235f0012a0cd549d97daae9e562af4dfff540f3792318c2dcd1_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-csi-node-driver-registrar@sha256:058c4f325fb6a8f89f65aa151a31f1f37c50dcb6b884f7924eb5903d251709f2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cloud-credential-operator@sha256:f02f00680256c619fc73f06527588f2e143b5a69084d9165b27ae3f15cdbf775_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-monitoring-operator@sha256:14c3c7ff539d3d47653a5a8e2215f3af90f835bfebcfb92d024398d007f4402a_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-openshift-apiserver-operator@sha256:02b7d38be44cce8a55a4fd10c14b05b25a74c021695a48a3619ac6c121e7be70_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-node-tuning-rhel9-operator@sha256:df993411c4b1e70761ed96f40737abdcb2a37c5cfc78992fc2d465f3b3731316_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-apiserver-network-proxy-rhel8@sha256:1a67bb5869082d2b04656d078f648a895cf32338e25f530efa7185c05da214c2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ovirt-csi-driver-rhel8-operator@sha256:acd371560de4509141613ff0a332878cb321c3cf8cb9ffcf3e27d75bda45ac32_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-k8s-prometheus-adapter@sha256:c6806c400ed6e9c94471bcbfe3ffd71939da6764197c3c81d8b79ba3c6577c15_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/egress-router-cni-rhel8@sha256:8f37c92f17f87c41793ee8f5d8fa9cc79d37fb0744418717cc646a439c19c30e_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-machine-api-operator@sha256:250eeb3e7df8dad98bfbd7bc27890135c4be206b914cb5f6cf002f21b8f776cd_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-agent-installer-orchestrator-rhel8@sha256:ba43b811d163c10cf8ee10a790f8cb68f510f7cc942fd166d0853060c117285b_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-operator-registry@sha256:97daefdcb6c489ff9088ff943f75154f073c9a3eba699137078124369447aafe_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-network-operator@sha256:2138ed16cdfab4b7ef2c99f296f67e69bf12984ee51df369f8a55eab0be3a053_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-pd-csi-driver-rhel8@sha256:0be63ccefd82e6de6a408b177e4c9f0ac95592ac3dde785c631bfc286b3d05f9_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
| Red Hat | registry.redhat.io/openshift4/ose-cluster-update-keys@sha256:6a6b03123e559c84ca3737b74280c411067a483ae8097a637f785b8c7b6c0ce2_amd64 as a component of Red Hat OpenShift Container Platform 4.13 | * |
…and 171 more
Timeline
- Sep 17, 2026 CVE Published
- Sep 26, 2026 CVE Updated
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Distribution Patch
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
- Sep 26, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:65840 advisory
- https://access.redhat.com/security/cve/CVE-2025-68121 advisory
- https://access.redhat.com/security/cve/CVE-2026-27143 advisory
- https://access.redhat.com/security/cve/CVE-2026-27144 advisory
- https://access.redhat.com/security/cve/CVE-2026-32280 advisory
- https://access.redhat.com/security/cve/CVE-2026-33186 advisory
- https://access.redhat.com/security/cve/CVE-2026-33814 advisory
- https://access.redhat.com/security/cve/CVE-2026-39820 advisory
- https://access.redhat.com/security/cve/CVE-2026-42154 advisory
- https://access.redhat.com/security/cve/CVE-2026-42499 advisory
- https://access.redhat.com/security/cve/CVE-2026-44496 advisory
- https://access.redhat.com/security/cve/CVE-2026-9277 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65840.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2437111 issue
- https://www.cve.org/CVERecord?id=CVE-2025-68121 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 advisory
- https://go.dev/cl/737700 advisory
- https://go.dev/issue/77217 advisory
- https://groups.google.com/g/golang-announce/c/K09ubi9FQFk advisory
…and 63 more