Read the docs
TI-2026-22665 Aliases CVE-2026-28390GHSA-fgpp-q3px-3xhc

Possible NULL Dereference When Processing CMS KeyTransportRecipientInfo

Priority MEDIUM 40CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Partial Red Hat: 43 fixed, 22 without a fix

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of Service. When a CMS EnvelopedData message that uses KeyTransportRecipientInfo with RSA-OAEP encryption is processed, the optional parameters field of RSA-OAEP SourceFunc algorithm identifier is examined without checking for its presence. This results in a NULL pointer dereference if the field is missing. Applications and services that call CMS_decrypt() on untrusted input (e.g., S/MIME processing or CMS-based protocols) are vulnerable. The FIPS modules in 3.6, 3.5, 3.4, 3.3 and 3.0 are not affected by this issue, as the affected code is outside the OpenSSL FIPS module boundary.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00836 57th percentileScored 2026-11-07
Fix Partial OpenSSL (OpenSSL): 3.6.2, 3.5.6, 3.4.5 +4Red Hat: 66 advisoriesRed Hat: 43 fixed, 22 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
OpenSSLOpenSSL3.6.0 to before 3.6.2; 3.5.0 to before 3.5.6; 3.4.0 to before 3.4.5; 3.3.0 to before 3.3.7; 3.0.0 to before 3.0.20; 1.1.1 to before 1.1.1zg; 1.0.2 to before 1.0.2zp3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg, 1.0.2zpPatch availableCNA
  • OpenSSL VendorOpenSSL Affected 3.6.0 to before 3.6.2; 3.5.0 to before 3.5.6; 3.4.0 to before 3.4.5; 3.3.0 to before 3.3.7; 3.0.0 to before 3.0.20; 1.1.1 to before 1.1.1zg; 1.0.2 to before 1.0.2zp Fixed in 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg, 1.0.2zp Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*1.0.2 to before 1.0.2zp; 1.1.1 to before 1.1.1zg; 3.0.0 to before 3.0.20; 3.3.0 to before 3.3.7; 3.4.0 to before 3.4.5; 3.5.0 to before 3.5.6; 3.6.0 to before 3.6.2VulnerableOpenSSL
  • cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:* Versions 1.0.2 to before 1.0.2zp; 1.1.1 to before 1.1.1zg; 3.0.0 to before 3.0.20; 3.3.0 to before 3.3.7; 3.4.0 to before 3.4.5; 3.5.0 to before 3.5.6; 3.6.0 to before 3.6.2 Vulnerable ·OpenSSL

Remediation

  • Fix · CNA OpenSSL (OpenSSL) Fixed in 3.6.2, 3.5.6, 3.4.5, 3.3.7, 3.0.20, 1.1.1zg, 1.0.2zp

Red Hat 66 advisories

  • RHSA-2026:94476 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.8 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:94474 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.6 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:94468 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.7 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
Show 63 more Red Hat advisories
  • RHSA-2026:94459 Released 2026-11-03 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.8 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91249 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Neuron)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91248 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Neuron)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-neuron-rhel9
  • RHSA-2026:91246 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (ROCm 7.14)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rocm-7.14-rhel9
  • RHSA-2026:91245 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Spyre)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91244 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 6.4)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-6.4-rhel9
  • RHSA-2026:91243 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (TPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:91242 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Spyre)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91241 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91238 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CUDA 13.0)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:91237 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CUDA 12.9)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:91236 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CUDA)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cuda-rhel9
  • RHSA-2026:91235 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CUDA 13.0)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-13.0-rhel9
  • RHSA-2026:91234 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (Gaudi)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:91233 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (TPU)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:91232 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (CPU)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91224 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Rubin)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-rubin-rhel9
  • RHSA-2026:91219 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (ROCm)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-rocm-rhel9
  • RHSA-2026:91218 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (CUDA 12.9)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-cuda-12.9-rhel9
  • RHSA-2026:91217 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.4.6 (ROCm 7.1)
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhai/base-image-rocm-7.1-rhel9
  • RHSA-2026:91207 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (Gaudi)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-gaudi-rhel9
  • RHSA-2026:91206 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.0.7 (Spyre)
    • Red Hat OpenShift AI 3.0 registry.redhat.io/rhai/base-image-spyre-rhel9
  • RHSA-2026:91204 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (CPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-cpu-rhel9
  • RHSA-2026:91202 Released 2026-10-27 · Red Hat rating Critical
    Red Hat AI Base Images 3.5.5 (TPU)
    • Red Hat OpenShift AI 3.5 registry.redhat.io/rhai/base-image-tpu-rhel9
  • RHSA-2026:87410 Released 2026-10-21 · Red Hat rating Critical
    RHOAI 2.25.12 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-codeflare-operator-rhel9 +47
  • RHSA-2026:84573 Released 2026-10-19 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4)
    • Red Hat Enterprise Linux BaseOS E4S (v.9.4) openssl-1:3.0.7-29.el9_4.3, openssl-libs-1:3.0.7-29.el9_4.3
  • RHSA-2026:84572 Released 2026-10-19 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2)
    • Red Hat Enterprise Linux BaseOS E4S (v.9.2) openssl-1:3.0.7-18.el9_2.4, openssl-libs-1:3.0.7-18.el9_2.4
  • RHSA-2026:83617 Released 2026-10-15 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) openssl-devel-1:3.2.2-7.el9_6.4, openssl-perl-1:3.2.2-7.el9_6.4
    • Red Hat Enterprise Linux BaseOS EUS (v.9.6) openssl-1:3.2.2-7.el9_6.4, openssl-libs-1:3.2.2-7.el9_6.4
  • RHSA-2026:82888 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82857 Released 2026-10-14 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-bundle
  • RHSA-2026:82372 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82354 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/cert-manager-istio-csr-rhel9
  • RHSA-2026:82347 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.18.2
    • Cert Manager support for Red Hat OpenShift release 1.18 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:82322 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/cert-manager-operator-rhel9
  • RHSA-2026:82304 Released 2026-10-13 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.17.2
    • Cert Manager support for Red Hat OpenShift release 1.17 registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9, registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9
  • RHSA-2026:72502 Released 2026-09-28 · Red Hat rating Important
    cert-manager Operator for Red Hat OpenShift 1.20.1
    • Cert Manager support for Red Hat OpenShift release 1.20 registry.redhat.io/cert-manager/cert-manager-trust-manager-rhel9
  • RHSA-2026:71542 Released 2026-09-24 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) openssl-devel-1:3.2.2-16.el10_0.7, openssl-perl-1:3.2.2-16.el10_0.7
    • Red Hat Enterprise Linux BaseOS EUS (v. 10.0) openssl-1:3.2.2-16.el10_0.7, openssl-libs-1:3.2.2-16.el10_0.7
  • RHSA-2026:59831 Released 2026-09-03 · Red Hat rating Important
    OpenShift Container Platform 4.12.97 bug fix and security update
    • Red Hat OpenShift Container Platform 4.12 rhcos-x86_64-412.86.202608241157-0
  • RHSA-2026:58981 Released 2026-08-24 · Red Hat rating Critical
    Red Hat Update Infrastructure 5.3 Technology Preview security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-kubernetes-tp-rhel9, registry.redhat.io/rhui5/installer-tp-rhel9, registry.redhat.io/rhui5/rhua-tp-rhel9
  • RHSA-2026:58563 Released 2026-08-24 · Red Hat rating Important
    openssl security update
    • Red Hat Enterprise Linux Server (v. 7 ELS) openssl-1:1.0.2k-26.el7_9.2, openssl-devel-1:1.0.2k-26.el7_9.2, openssl-devel-1:1.0.2k-26.el7_9.2.ppc +2
    • Red Hat Enterprise Linux Server Optional (v. 7 ELS) openssl-perl-1:1.0.2k-26.el7_9.2, openssl-static-1:1.0.2k-26.el7_9.2, openssl-static-1:1.0.2k-26.el7_9.2.ppc
  • RHSA-2026:47096 Released 2026-07-28 · Red Hat rating Moderate
    compat-openssl10 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) compat-openssl10-1:1.0.2o-3.el8_4.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) compat-openssl10-1:1.0.2o-3.el8_4.1
  • RHSA-2026:44480 Released 2026-07-23 · Red Hat rating Moderate
    compat-openssl10 security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) compat-openssl10-1:1.0.2o-4.el8_6.1
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) compat-openssl10-1:1.0.2o-4.el8_6.1
  • RHSA-2026:43513 Released 2026-07-22 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.4) openssl-1:1.1.1g-18.el8_4.3, openssl-devel-1:1.1.1g-18.el8_4.3, openssl-libs-1:1.1.1g-18.el8_4.3 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) openssl-1:1.1.1g-18.el8_4.3, openssl-devel-1:1.1.1g-18.el8_4.3, openssl-libs-1:1.1.1g-18.el8_4.3 +1
  • RHSA-2026:39297 Released 2026-07-14 · Red Hat rating Moderate
    edk2 security, bug fix, and enhancement update
    • Red Hat Enterprise Linux AppStream (v. 10) edk2-20251114-5.el10_2.2, edk2-aarch64-20251114-5.el10_2.2, edk2-ovmf-20251114-5.el10_2.2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) edk2-aarch64-20251114-5.el10_2.2, edk2-ovmf-20251114-5.el10_2.2, edk2-tools-20251114-5.el10_2.2 +1
  • RHSA-2026:39012 Released 2026-07-13 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) compat-openssl11-1:1.1.1k-4.el9_2.2
  • RHSA-2026:39009 Released 2026-07-13 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) compat-openssl11-1:1.1.1k-5.el9_4.3
  • RHSA-2026:38805 Released 2026-07-13 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS E4S (v.8.8) openssl-1:1.1.1k-17.el8_6, openssl-devel-1:1.1.1k-17.el8_6, openssl-libs-1:1.1.1k-17.el8_6 +1
    • Red Hat Enterprise Linux BaseOS TUS (v.8.8) openssl-1:1.1.1k-17.el8_6, openssl-devel-1:1.1.1k-17.el8_6, openssl-libs-1:1.1.1k-17.el8_6 +1
  • RHSA-2026:38804 Released 2026-07-13 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS AUS (v.8.6) openssl-1:1.1.1k-17.el8_6, openssl-devel-1:1.1.1k-17.el8_6, openssl-libs-1:1.1.1k-17.el8_6 +1
    • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6) openssl-1:1.1.1k-17.el8_6, openssl-devel-1:1.1.1k-17.el8_6, openssl-libs-1:1.1.1k-17.el8_6 +1
  • RHSA-2026:38503 Released 2026-07-13 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux BaseOS (v. 8) openssl-1:1.1.1k-17.el8_6, openssl-devel-1:1.1.1k-17.el8_6, openssl-libs-1:1.1.1k-17.el8_6 +1
  • RHSA-2026:36217 Released 2026-07-07 · Red Hat rating Important
    compat-openssl10 security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) compat-openssl10-1:1.0.2o-4.el8_8.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) compat-openssl10-1:1.0.2o-4.el8_8.1
  • RHSA-2026:35869 Released 2026-07-06 · Red Hat rating Important
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) compat-openssl11-1:1.1.1k-5.el9_6.3
  • RHSA-2026:29197 Released 2026-06-24 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:27998 Released 2026-06-22 · Red Hat rating Important
    Cost Management Metrics Operator Update
    • Cost Management 4 registry.redhat.io/costmanagement/costmanagement-metrics-rhel9-operator
  • RHSA-2026:26319 Released 2026-06-16 · Red Hat rating Important
    Red Hat Update Infrastructure 5.2 security update
    • Red Hat Update Infrastructure 5 registry.redhat.io/rhui5/cds-rhel9, registry.redhat.io/rhui5/haproxy-rhel9, registry.redhat.io/rhui5/installer-rhel9 +1
  • RHSA-2026:24866 Released 2026-06-09 · Red Hat rating Critical
    Red Hat Ansible Automation Platform 2.6 Container Release Update
    • Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/controller-rhel9, registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-26/ee-supported-rhel9 +7
  • RHSA-2026:22634 Released 2026-06-02 · Red Hat rating Important
    Insights proxy Container Image
    • Red Hat Insights proxy 1.5 registry.redhat.io/insights-proxy/insights-proxy-container-rhel9
  • RHSA-2026:22312 Released 2026-06-01 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 9) openssl-devel-1:3.5.5-3.el9_8, openssl-perl-1:3.5.5-3.el9_8
    • Red Hat Enterprise Linux BaseOS (v. 9) openssl-1:3.5.5-3.el9_8, openssl-libs-1:3.5.5-3.el9_8
  • RHSA-2026:22314 Released 2026-06-01 · Red Hat rating Moderate
    openssl security update
    • Red Hat Enterprise Linux AppStream (v. 10) openssl-devel-1:3.5.5-3.el10_2, openssl-perl-1:3.5.5-3.el10_2
    • Red Hat Enterprise Linux BaseOS (v. 10) openssl-1:3.5.5-3.el10_2, openssl-libs-1:3.5.5-3.el10_2
  • RHSA-2026:22313 Released 2026-06-01 · Red Hat rating Moderate
    compat-openssl11 security update
    • Red Hat Enterprise Linux AppStream (v. 9) compat-openssl11-1:1.1.1k-5.el9_8.3
  • RHSA-2026:22315 Released 2026-06-01 · Red Hat rating Moderate
    compat-openssl10 security update
    • Red Hat Enterprise Linux AppStream (v. 8) compat-openssl10-1:1.0.2o-4.el8_10.2
  • RHSA-2026:14937 Released 2026-05-07 · Red Hat rating Important
    A Subscription Management tool for finding and reporting Red Hat product usage
    • Red Hat Discovery 2 registry.redhat.io/discovery/discovery-server-rhel9, registry.redhat.io/discovery/discovery-ui-rhel9
  • RHSA-2026:14217 Released 2026-05-06 · Red Hat rating Moderate
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssl-3.5.6-0.3.hum1@aarch64, openssl-3.5.6-0.3.hum1@src, openssl-3.5.6-0.3.hum1@x86_64 +12
  • RHSA-2026:7261 Released 2026-04-09 · Red Hat rating Important
    Red Hat Hardened Images RPMs bug fix and enhancement update
    • Red Hat Hardened Images openssl-3.5.6-0.1.hum1@aarch64, openssl-3.5.6-0.1.hum1@src, openssl-3.5.6-0.1.hum1@x86_64 +10

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    OpenSSL — openssl-library.org/news/secadv/20260407.txt

    7 records Highest priority Priority MEDIUM 6 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2026-22661 Out-of-bounds Read in AES-CFB-128 on X86-64 with AVX-512 SupportPriority MEDIUM 46
    • TI-2026-24345 Heap Buffer Overflow in Hexadecimal ConversionPriority MEDIUM 42
    • TI-2026-24346 Incorrect Failure Handling in RSA KEM RSASVE EncapsulationPriority MEDIUM 41
    Show all 7 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Confidential Cluster OperatorAffectedNo fix yet
Confidential Compute AttestationAffectedNo fix planned: Will not fix
Lightspeed CoreAffectedNo fix yet
Migration Toolkit for Applications 8AffectedNo fix planned: Will not fix
Multicluster Engine for KubernetesAffectedNo fix yet
OpenShift LightspeedAffectedNo fix planned: Will not fix
Pen Drive Powered by Red Hat LightspeedAffectedNo fix yet
Red Hat 3scale API Management Platform 2AffectedNo fix planned: Will not fix
Red Hat Advanced Cluster Management for Kubernetes 2AffectedNo fix yet
Red Hat Advanced Cluster Security 4AffectedNo fix planned: Will not fix
Red Hat Ansible Automation Platform 2AffectedNo fix yet
Red Hat Connectivity Link 1AffectedNo fix yet
Red Hat Discovery 2AffectedNo fix yet
Red Hat Enterprise Linux 10AffectedNo fix yet
Red Hat Enterprise Linux 7AffectedNo fix yet
Red Hat Enterprise Linux 8AffectedNo fix yet
Red Hat Enterprise Linux 9AffectedNo fix yet
Red Hat JBoss Core ServicesAffectedNo fix planned: Will not fix
Red Hat Offline Knowledge PortalAffectedNo fix yet
Red Hat OpenShift AI (RHOAI)AffectedNo fix yet
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat Trusted Profile AnalyzerAffectedNo fix yet
Cert Manager support for Red Hat OpenShift release 1.17Fixed RHSA-2026:82304, RHSA-2026:82322, RHSA-2026:82888
Cert Manager support for Red Hat OpenShift release 1.18Fixed RHSA-2026:82347, RHSA-2026:82354, RHSA-2026:82372, RHSA-2026:82857
Cert Manager support for Red Hat OpenShift release 1.20Fixed RHSA-2026:72502
Cost Management 4Fixed RHSA-2026:27998
Red Hat Ansible Automation Platform 2.6Fixed RHSA-2026:24866
Red Hat Discovery 2Fixed RHSA-2026:14937, RHSA-2026:29197
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:22314, RHSA-2026:39297
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:22315
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:22312, RHSA-2026:22313
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:47096
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:44480
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:36217
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:39012, RHSA-2026:84572
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:39009, RHSA-2026:84573
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:71542
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:35869, RHSA-2026:83617
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:47096
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:44480
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:36217
Red Hat Enterprise Linux BaseOS (v. 10)Fixed RHSA-2026:22314
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2026:38503
Red Hat Enterprise Linux BaseOS (v. 9)Fixed RHSA-2026:22312
Red Hat Enterprise Linux BaseOS AUS (v.8.4)Fixed RHSA-2026:43513
Red Hat Enterprise Linux BaseOS AUS (v.8.6)Fixed RHSA-2026:38804
Red Hat Enterprise Linux BaseOS E4S (v.8.8)Fixed RHSA-2026:38805
Red Hat Enterprise Linux BaseOS E4S (v.9.2)Fixed RHSA-2026:84572
Red Hat Enterprise Linux BaseOS E4S (v.9.4)Fixed RHSA-2026:84573
Red Hat Enterprise Linux BaseOS EUS (v. 10.0)Fixed RHSA-2026:71542
Red Hat Enterprise Linux BaseOS EUS (v.9.6)Fixed RHSA-2026:83617
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)Fixed RHSA-2026:43513
Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)Fixed RHSA-2026:38804
Red Hat Enterprise Linux BaseOS TUS (v.8.8)Fixed RHSA-2026:38805
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:39297
Red Hat Enterprise Linux Server (v. 7 ELS)Fixed RHSA-2026:58563
Red Hat Enterprise Linux Server Optional (v. 7 ELS)Fixed RHSA-2026:58563
Red Hat Hardened ImagesFixed RHSA-2026:14217, RHSA-2026:7261
Red Hat Insights proxy 1.5Fixed RHSA-2026:22634
Red Hat OpenShift AI 2.25Fixed RHSA-2026:87410
Red Hat OpenShift AI 3.0Fixed RHSA-2026:91206, RHSA-2026:91219, RHSA-2026:91232, RHSA-2026:91236, RHSA-2026:91243, RHSA-2026:94459, RHSA-2026:94476
Red Hat OpenShift AI 3.4Fixed RHSA-2026:91217, RHSA-2026:91218, RHSA-2026:91233, RHSA-2026:91234, RHSA-2026:91235, RHSA-2026:91241, RHSA-2026:91244, RHSA-2026:91245, RHSA-2026:91248, RHSA-2026:94468
Red Hat OpenShift AI 3.5Fixed RHSA-2026:91202, RHSA-2026:91204, RHSA-2026:91207, RHSA-2026:91224, RHSA-2026:91237, RHSA-2026:91238, RHSA-2026:91242, RHSA-2026:91246, RHSA-2026:91249, RHSA-2026:94474
Red Hat OpenShift Container Platform 4.12Fixed RHSA-2026:59831
Red Hat Update Infrastructure 5Fixed RHSA-2026:26319, RHSA-2026:58981
Not affected: 42 products
  • Confidential Compute Attestation
  • Cost Management 4
  • Logging Subsystem for Red Hat OpenShift
  • OpenShift Service Mesh 3
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Ansible Automation Platform 2
  • Red Hat Ansible Automation Platform 2.6
  • Red Hat Directory Server 11
  • Red Hat Directory Server 12
  • Red Hat Directory Server 13
  • Red Hat Discovery 2
  • Red Hat Enterprise Linux 10
  • Red Hat Enterprise Linux 6
  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat Enterprise Linux AppStream AUS (v.8.6)
  • Red Hat Enterprise Linux AppStream E4S (v.9.2)
  • Red Hat Enterprise Linux AppStream E4S (v.9.4)
  • Red Hat Enterprise Linux AppStream EUS (v. 10.0)
  • Red Hat Enterprise Linux AppStream EUS (v.9.6)
  • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)
  • Red Hat Enterprise Linux BaseOS (v. 8)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.4)
  • Red Hat Enterprise Linux BaseOS AUS (v.8.6)
  • Red Hat Enterprise Linux BaseOS E4S (v.8.8)
  • Red Hat Enterprise Linux BaseOS E4S (v.9.2)
  • Red Hat Enterprise Linux BaseOS EUS (v. 10.0)
  • Red Hat Enterprise Linux BaseOS EUS (v.9.6)
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4)
  • Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.6)
  • Red Hat Enterprise Linux BaseOS TUS (v.8.8)
  • Red Hat Enterprise Linux Server (v. 7 ELS)
  • Red Hat Enterprise Linux Server Optional (v. 7 ELS)
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Update Service
  • Red Hat Quay 3
  • Red Hat Satellite 6
  • Red Hat Trusted Artifact Signer
  • Red Hat Update Infrastructure 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-28390
  2. 2026-10-03 Alias added: GHSA-fgpp-q3px-3xhc
  3. 2026-10-09 Affected versions changed · Red Hat
  4. 2026-10-14 Fix available: RHSA-2026:82304 · Red Hat
  5. 2026-10-14 Fix available: RHSA-2026:82322 · Red Hat
  6. 2026-10-14 Fix available: RHSA-2026:82372 · Red Hat
  7. 2026-10-14 Fix available: RHSA-2026:82354 · Red Hat
  8. 2026-10-14 Fix available: RHSA-2026:82347 · Red Hat
  9. 2026-10-15 Fix available: RHSA-2026:82857 · Red Hat
  10. 2026-10-15 Fix available: RHSA-2026:82888 · Red Hat
  11. 2026-10-16 Fix available: RHSA-2026:83617 · Red Hat
  12. 2026-10-16 Fix available: Cert Manager support for Red Hat OpenShift release 1.17, Cert Manager support for Red Hat OpenShift release 1.18, Red Hat Enterprise Linux BaseOS EUS (v.9.6) · Red Hat
  13. 2026-10-19 Fix available: RHSA-2026:84572 · Red Hat
  14. 2026-10-19 Fix available: Red Hat Enterprise Linux BaseOS E4S (v.9.2) · Red Hat
  15. 2026-10-19 Fix available: RHSA-2026:84573 · Red Hat
  16. 2026-10-20 Fix available: Red Hat Enterprise Linux BaseOS E4S (v.9.4) · Red Hat
  17. 2026-10-22 Fix available: RHSA-2026:87410 · Red Hat
  18. 2026-10-23 Fix available: Red Hat OpenShift AI 2.25 · Red Hat
  19. 2026-10-30 Fix available: RHSA-2026:91202 · Red Hat
  20. 2026-10-30 Fix available: RHSA-2026:91204 · Red Hat
  21. 2026-10-30 Fix available: RHSA-2026:91206 · Red Hat
  22. 2026-10-30 Fix available: RHSA-2026:91207 · Red Hat
  23. 2026-10-30 Fix available: RHSA-2026:91217 · Red Hat
  24. 2026-10-30 Fix available: RHSA-2026:91219 · Red Hat
  25. 2026-10-30 Fix available: RHSA-2026:91224 · Red Hat
  26. 2026-10-30 Fix available: RHSA-2026:91233 · Red Hat
  27. 2026-10-30 Fix available: RHSA-2026:91232 · Red Hat
  28. 2026-10-30 Fix available: RHSA-2026:91218 · Red Hat
  29. 2026-10-30 Fix available: RHSA-2026:91235 · Red Hat
  30. 2026-10-30 Fix available: RHSA-2026:91234 · Red Hat
  31. 2026-10-30 Fix available: RHSA-2026:91241 · Red Hat
  32. 2026-10-30 Fix available: RHSA-2026:91237 · Red Hat
  33. 2026-10-30 Fix available: RHSA-2026:91238 · Red Hat
  34. 2026-10-30 Fix available: RHSA-2026:91242 · Red Hat
  35. 2026-10-30 Fix available: RHSA-2026:91236 · Red Hat
  36. 2026-10-30 Fix available: RHSA-2026:91245 · Red Hat
  37. 2026-10-30 Fix available: RHSA-2026:91246 · Red Hat
  38. 2026-10-30 Fix available: RHSA-2026:91243 · Red Hat
  39. 2026-10-30 Fix available: RHSA-2026:91244 · Red Hat
  40. 2026-10-30 Fix available: RHSA-2026:91248 · Red Hat
  41. 2026-10-30 Fix available: RHSA-2026:91249 · Red Hat
  42. 2026-10-30 Fix available: Red Hat OpenShift AI 3.0, Red Hat OpenShift AI 3.4, Red Hat OpenShift AI 3.5 · Red Hat
  43. 2026-10-30 Affected versions changed · Red Hat
  44. 2026-11-03 Fix available: RHSA-2026:94459 · Red Hat
  45. 2026-11-03 Fix available: RHSA-2026:94468 · Red Hat
  46. 2026-11-03 Affected versions changed · Red Hat
  47. 2026-11-04 Fix available: RHSA-2026:94474 · Red Hat
  48. 2026-11-04 Fix available: RHSA-2026:94476 · Red Hat
  49. 2026-11-04 Affected versions changed · Red Hat

References

Patch 5

Advisory 1

  • TI-2022-01915 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2021-02645 SM2 Decryption Buffer Overflow CVSS 3.1CRITICAL 9.8
  • TI-2009-03392 The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft… CVSS 3.1CRITICAL 9.8
  • TI-2022-01176 The c_rehash script allows command injection CVSS 3.1CRITICAL 9.8
  • TI-2014-00154 The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly… KEVCVSS 3.1HIGH 7.5
  • TI-2025-14107 Stack buffer overflow in CMS (Auth)EnvelopedData parsing CVSS 3.1HIGH 8.8
See all 312 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences