If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources. This can lead to a denial of service. This only affects TLS 1.3.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade container-selinuxUpgrade cockpit-podmanUpgrade osbuild-composer-coreUpgrade netavarkUpgrade criu-libsUpgrade python3-podmanUpgrade golang-miscUpgrade grafanaUpgrade git-lfsUpgrade skopeo-testsUpgrade slirp4netnsUpgrade toolboxUpgrade containers-commonUpgrade libslirp-develUpgrade delveUpgrade criu-develUpgrade podman-testsUpgrade libslirpUpgrade conmonUpgrade go-toolsetUpgrade podman-gvproxyUpgrade golang-srcUpgrade oci-seccomp-bpf-hookUpgrade golangUpgrade golang-raceUpgrade golang-testsUpgrade podman-pluginsUpgrade containernetworking-pluginsUpgrade fuse-overlayfsUpgrade python3-criuUpgrade golang-binUpgrade osbuild-composer-workerUpgrade runcUpgrade critUpgrade opentelemetry-collectorUpgrade podmanUpgrade golang-docsUpgrade toolbox-testsUpgrade buildah-testsUpgrade udicaUpgrade podman-remoteUpgrade crunUpgrade grafana-selinuxUpgrade skopeoUpgrade podman-catatonitUpgrade osbuild-composerUpgrade podman-dockerUpgrade grafana-pcpUpgrade criuUpgrade buildahUpgrade aardvark-dns | May 7, 2026 | May 6, 2026 |
| Alpine Linux | — | Upgrade rcloneUpgrade go | Apr 13, 2026 | Apr 8, 2026 |
| Amazon Linux Ami 2 | — | Upgrade containerdUpgrade containerd-debuginfoUpgrade docker-debuginfoUpgrade golang-miscUpgrade golistUpgrade runc-debuginfoUpgrade oci-add-hooks-debuginfoUpgrade oci-add-hooksUpgrade golang-srcUpgrade amazon-cloudwatch-agentUpgrade golangUpgrade amazon-ecr-credential-helperUpgrade golist-debuginfoUpgrade golang-sharedUpgrade containerd-stressUpgrade nerdctlUpgrade nerdctl-debuginfoUpgrade ecs-initUpgrade runfinch-finchUpgrade soci-snapshotterUpgrade runcUpgrade golang-docsUpgrade amazon-ecr-credential-helper-debuginfoUpgrade dockerUpgrade golang-testsUpgrade golang-bin | May 20, 2026 | May 20, 2026 |
| Oracle_linux | — | Upgrade grafana-pcp | May 4, 2026 | Apr 8, 2026 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Aug 27, 2026 | Apr 8, 2026 |
| Redhat_linux | — | Upgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade image-builder-debugsourceUpgrade go-fdo-server-debugsourceUpgrade libslirp-debugsourceUpgrade container-selinuxUpgrade osbuild-composer-coreUpgrade slirp4netnsUpgrade libslirp-develUpgrade buildah-testsUpgrade podman-dockerUpgrade flightctl-cliUpgrade git-lfsUpgrade cockpit-podmanUpgrade host-metering-selinuxUpgrade go-toolsetUpgrade host-metering-debugsourceUpgrade podman-testsUpgrade toolbox-debuginfoUpgrade crun-debuginfoUpgrade flightctl-agentUpgrade crunUpgrade conmonUpgrade rhc-worker-playbook-debugsourceUpgrade runc-debugsourceUpgrade buildah-tests-debuginfoUpgrade podman-gvproxyUpgrade rhc-develUpgrade rhc-worker-playbookUpgrade go-fdo-server-manufacturerUpgrade oci-seccomp-bpf-hookUpgrade go-fdo-serverUpgrade osbuild-composer-debuginfoUpgrade criu-develUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade rhc-worker-playbook-debuginfoUpgrade podman-debugsourceUpgrade delveUpgrade python3-podmanUpgrade python3-criuUpgrade buildahUpgrade host-metering-debuginfoUpgrade criu-libsUpgrade aardvark-dnsUpgrade yggdrasilUpgrade skopeo-debuginfoUpgrade skopeo-testsUpgrade rhc-debugsourceUpgrade golang-srcUpgrade yggdrasil-debuginfoUpgrade libslirpUpgrade opentelemetry-collectorUpgrade slirp4netns-debuginfoUpgrade podman-plugins-debuginfoUpgrade ipp-usbUpgrade conmon-debuginfoUpgrade git-lfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade grafana-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runc-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade golang-miscUpgrade grafanaUpgrade delve-debuginfoUpgrade go-fdo-client-debugsourceUpgrade rhc-debuginfoUpgrade gvisor-tap-vsock-gvforwarderUpgrade grafana-pcpUpgrade go-fdo-server-debuginfoUpgrade ipp-usb-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade git-lfs-debuginfoUpgrade go-fdo-server-rendezvousUpgrade fuse-overlayfs-debugsourceUpgrade flightctl-servicesUpgrade rhc-worker-scriptUpgrade yggdrasil-examples-debuginfoUpgrade skopeoUpgrade podman-remoteUpgrade podman-gvproxy-debuginfoUpgrade image-builder-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-pluginsUpgrade gvisor-tap-vsock-debuginfoUpgrade image-builderUpgrade criuUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade libslirp-debuginfoUpgrade crun-debugsourceUpgrade toolbox-testsUpgrade podman-catatonit-debuginfoUpgrade golang-testsUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade grafana-selinuxUpgrade flightctl-selinuxUpgrade containers-commonNo solution existsUpgrade podman-debuginfoUpgrade golang-binUpgrade golangUpgrade criu-debuginfoUpgrade udicaUpgrade toolboxUpgrade gvisor-tap-vsockUpgrade yggdrasil-debugsourceUpgrade osbuild-composer-worker-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-tests-debuginfoUpgrade golang-docsUpgrade delve-debugsourceUpgrade go-fdo-clientUpgrade toolbox-debugsourceUpgrade grafana-debuginfoUpgrade go-fdo-server-ownerUpgrade go-fdo-client-debuginfoUpgrade critUpgrade skopeo-debugsourceUpgrade podman-pluginsUpgrade podmanUpgrade osbuild-composerUpgrade gvisor-tap-vsock-debugsourceUpgrade grafana-pcp-debugsourceUpgrade grafana-pcp-debuginfoUpgrade conmon-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade osbuild-composer-debugsourceUpgrade yggdrasil-develUpgrade rhcUpgrade host-meteringUpgrade gvisor-tap-vsock-gvforwarder-debuginfoUpgrade fuse-overlayfsUpgrade criu-debugsourceUpgrade buildah-debuginfoUpgrade flightctl-observabilityUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade runcUpgrade osbuild-composer-worker | May 8, 2026 | Apr 8, 2026 |
| Rocky_linux | — | Upgrade git-lfs-debuginfoUpgrade go-fdo-server-debuginfoUpgrade grafana-selinuxUpgrade podman-catatonit-debuginfoUpgrade conmonUpgrade golangUpgrade yggdrasil-debuginfoUpgrade buildah-testsUpgrade netavarkUpgrade delve-debugsourceUpgrade grafana-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade image-builder-debugsourceUpgrade grafana-pcpUpgrade buildahUpgrade yggdrasil-develUpgrade conmon-debugsourceUpgrade go-fdo-clientUpgrade go-fdo-client-debuginfoUpgrade criu-debuginfoUpgrade fuse-overlayfsUpgrade runc-debugsourceUpgrade grafana-pcp-debuginfoUpgrade delve-debuginfoUpgrade image-builderUpgrade skopeoUpgrade aardvark-dnsUpgrade skopeo-debugsourceUpgrade grafana-pcp-debugsourceUpgrade libslirpUpgrade osbuild-composer-coreUpgrade go-fdo-client-debugsourceUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade podman-tests-debuginfoUpgrade skopeo-debuginfoUpgrade podmanUpgrade git-lfs-debugsourceUpgrade golang-raceUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade toolboxUpgrade toolbox-testsUpgrade buildah-tests-debuginfoUpgrade image-builder-debuginfoUpgrade ipp-usb-debuginfoUpgrade skopeo-testsUpgrade podman-remote-debuginfoUpgrade git-lfsUpgrade podman-debugsourceUpgrade osbuild-composer-debugsourceUpgrade libslirp-debuginfoUpgrade criu-libsUpgrade golang-binUpgrade osbuild-composerUpgrade slirp4netns-debuginfoUpgrade go-fdo-server-debugsourceUpgrade grafana-debugsourceUpgrade podman-gvproxyUpgrade osbuild-composer-worker-debuginfoUpgrade yggdrasil-debugsourceUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade buildah-debugsourceUpgrade slirp4netnsUpgrade runc-debuginfoUpgrade podman-testsUpgrade podman-pluginsUpgrade critUpgrade go-toolsetUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-pluginsUpgrade oci-seccomp-bpf-hookUpgrade libslirp-develUpgrade crun-debuginfoUpgrade criu-libs-debuginfoUpgrade conmon-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade ipp-usbUpgrade grafanaUpgrade criu-develUpgrade toolbox-debuginfoUpgrade runcUpgrade containers-commonUpgrade yggdrasilUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade osbuild-composer-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade crunUpgrade delveUpgrade python3-criuUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-workerUpgrade opentelemetry-collectorUpgrade go-fdo-serverUpgrade podman-remote | May 11, 2026 | May 6, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 10.0.8Upgrade Splunk Enterprise to version 9.4.14Upgrade Splunk Enterprise to version 10.4.1Upgrade Splunk Enterprise to version 10.2.5Upgrade Splunk Enterprise to version 10.2.6Upgrade Splunk Enterprise to version 10.0.9Upgrade Splunk Enterprise to version 10.4.2Upgrade Splunk Enterprise to version 9.4.13 | Jul 30, 2026 | Apr 8, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jun 15, 2026 | Apr 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub