Issue summary: In a server or client configuration with RFC7250 Raw Public Keys (RPKs) enabled, and only the private key (with no associated certificate) configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted "signature_algorithms_cert" TLS extension.
Impact summary: The impact is limited to a possible Denial of Service as a result of an application abort, no data disclosure or remote command execution are possible.
CWE: CWE-476: NULL Pointer Dereference
Description: While a passing comment in sample code in the documentation suggests that key-only RPK configurations are supported, the best-practice RPK configuration is to always configure a corresponding certificate (possibly self-signed or signed by any convenient CA).
When the private key is configured along with a matching certificate, the "signature_algorithms_cert" extension is handled reliably even without the fix, and peer clients or servers that don't support raw public keys may be able to complete a TLS connection by pinning or verifying the corresponding certificate or its public key.
Deployments that prefer to configure just a private key with no certificate need to upgrade to an updated release as noted below.
FIPS impact: no
No FIPS modules are affected by this issue, as the SSL protocol implementation is outside the OpenSSL FIPS module boundary.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openssl-perlUpgrade opensslUpgrade openssl-develUpgrade openssl-libs | Oct 11, 2026 | Sep 14, 2026 |
| Alpine Linux | — | Upgrade openssl | Aug 26, 2026 | Aug 25, 2026 |
| Amazon_linux_2023 | — | Upgrade openssl-fips-provider-latestUpgrade openssl-fips-provider-latest-debuginfoUpgrade openssl-debuginfoUpgrade openssl-perlUpgrade openssl-libs-debuginfoUpgrade openssl-develUpgrade openssl-libsUpgrade openssl-snapsafe-libsUpgrade openssl-snapsafe-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl | Sep 30, 2026 | Aug 25, 2026 |
| Debian | — | Upgrade openssl | Aug 26, 2026 | Aug 26, 2026 |
| Freebsd | — | Upgrade FreeBSDUpgrade opensslUpgrade openssl36Upgrade openssl34Upgrade openssl40Upgrade openssl35 | Aug 26, 2026 | Aug 25, 2026 |
| Http Openssl | — | Upgrade to the latest version of OpenSSL | Aug 27, 2026 | Aug 25, 2026 |
| Redhat_linux | — | Upgrade openssl-develUpgrade openssl-debuginfoUpgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl-libsUpgrade openssl-perl | Aug 27, 2026 | Aug 25, 2026 |
| Rocky_linux | — | Upgrade openssl-libsUpgrade openssl-develUpgrade openssl-perlUpgrade opensslUpgrade openssl-libs-debuginfoUpgrade openssl-debugsourceUpgrade openssl-debuginfo | Sep 17, 2026 | Sep 15, 2026 |
| Ubuntu | — | Upgrade opensslUpgrade libssl3t64Upgrade libssl3 | Aug 26, 2026 | Aug 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 21, 2026 | Aug 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub