Low3.1Red Hat & Ubuntu Linux

Denial of Service due to malformed SFTP message

CVE-2026-0968 Published Feb 10, 2026

CVE-2026-0968

Affected products & platforms

Red Hat & Ubuntu LinuxUnclassified

Summary

Denial of Service due to malformed SFTP message. Red Hat rates this low (CVSS 3.1). Weakness: CWE-476. Affected package(s): libssh. Resolved in Red Hat advisory RHSA-2026:18160 — update the affected packages (`sudo dnf update`).

Affected versions

libssh-0:0.12.0-2.el10
libssh-0:0.10.4-18.el9

Official advisory · high-confidence parse· fetched 5 hours ago·verify at source

Fixed versions

RHSA-2026:18160

Official advisory · high-confidence parse· fetched 5 hours ago·verify at source

Mitigation checklist

Recommended fix / mitigation

Update the affected package(s) to the fixed version shipped in RHSA-2026:18160 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 5 hours ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.