Critical Security Flaw in OpenSSH: Information Disclosure and Denial of Service
Summary
RLSA-2026:6462: Important: openssh security update. Affects openssh versions < 0:8.7p1-48.el9_7.rocky.0.1. Fixed in 0:8.7p1-48.el9_7.rocky.0.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
OpenSSH is a widely used implementation of the SSH (Secure Shell) protocol, providing secure communication over unsecured networks. It is essential for remote server management and secure file transfers. OpenSSH is supported by various operating systems, including Linux and UNIX. The package includes both client and server components, making it a critical tool for system administrators. However, it has been found vulnerable to a security issue that could lead to information disclosure or denial of service due to uninitialized variables.
Vulnerability Detail
The vulnerability, identified as CVE-2026-3497, arises from uninitialized variables in the OpenSSH GSSAPI (Generic Security Services Application Program Interface) implementation. This flaw can potentially allow an attacker to exploit the system, leading to unauthorized information disclosure or causing a denial of service. The severity of this vulnerability is underscored by its CVSS score of 8.2, indicating a high risk to affected systems. It is crucial for users of OpenSSH to understand the implications of this vulnerability and take appropriate action.
How To Fix
Minimum fixed version
0:8.7p1-48.el9_7.rocky.0.1
This is the first release that contains the fix.
sudo dnf update opensshTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users may consider disabling GSSAPI authentication in their OpenSSH configuration. This can be done by editing the '/etc/ssh/sshd_config' file and adding the line 'GSSAPIAuthentication no'. After making this change, restart the SSH service with
sudo systemctl restart sshd
However, this is not a permanent solution and updating the package is strongly advised.
Conclusion
The OpenSSH vulnerability CVE-2026-3497 poses significant risks, including potential information disclosure and denial of service. Users are urged to update their OpenSSH installations to the latest patched version to mitigate these risks. Temporary workarounds are available, but they do not replace the need for a proper update.
See every vulnerability recorded for openssh →
FAQ
CVE-2026-3497 is a security vulnerability in OpenSSH that can lead to information disclosure or denial of service due to uninitialized variables.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities. Visit Vulert Scanner to check if your application is affected without any signup.
The CVSS score for this vulnerability is 8.2, indicating a high level of risk.
If immediate updates are not possible, consider disabling GSSAPI authentication as a temporary workaround until the package can be updated.
The OpenSSH project is maintained by the Rocky Enterprise Software Foundation and Red Hat, among other contributors.
Related vulnerabilities
Recent vulnerabilities recorded for openssh.
