Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade go | Sep 7, 2026 | Aug 13, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-testsUpgrade golang-srcUpgrade golangUpgrade golang-binUpgrade golang-docsUpgrade golang-shared | Sep 1, 2026 | Aug 13, 2026 |
| Redhat Openshift | — | Upgrade cri-oUpgrade openshiftUpgrade cri-toolsUpgrade ose-crio-credential-provider | Sep 16, 2026 | Aug 13, 2026 |
| Redhat_linux | — | Upgrade criu-debugsourceUpgrade ipp-usbUpgrade osbuild-composer-coreUpgrade rhcUpgrade fuse-overlayfsUpgrade rhc-develUpgrade grafana-pcpUpgrade ignitionUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hookUpgrade grafana-debuginfoUpgrade osbuild-composer-tests-debuginfoUpgrade go-toolsetUpgrade criuUpgrade golang-miscUpgrade flightctl-selinuxUpgrade containernetworking-pluginsUpgrade flightctl-cliUpgrade netavarkUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade runc-debugsourceUpgrade golangUpgrade conmon-debugsourceUpgrade ignition-debuginfoUpgrade criu-debuginfoUpgrade libslirp-develUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade containers-commonUpgrade podman-remoteUpgrade osbuild-composer-core-debuginfoUpgrade golang-testsUpgrade buildah-testsUpgrade buildah-debuginfoUpgrade opentelemetry-collectorUpgrade image-builderUpgrade go-fdo-server-ownerUpgrade podman-catatonitUpgrade podman-remote-debuginfoUpgrade image-builder-debugsourceUpgrade osbuild-composerUpgrade crun-debuginfoUpgrade ignition-edgeUpgrade go-fdo-server-manufacturerUpgrade golang-srcUpgrade fuse-overlayfs-debugsourceUpgrade skopeo-debugsourceUpgrade rhc-worker-playbook-debuginfoUpgrade podman-debuginfoUpgrade rhc-debugsourceUpgrade git-lfs-debuginfoUpgrade ignition-grubUpgrade python3-podmanUpgrade grafana-selinuxUpgrade ignition-validate-debuginfoUpgrade rhc-worker-playbookUpgrade crun-debugsourceUpgrade criu-libsUpgrade delve-debuginfoUpgrade conmon-debuginfoUpgrade rhc-worker-playbook-debugsourceUpgrade ignition-validateUpgrade crunUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade golang-binUpgrade podman-dockerUpgrade slirp4netnsUpgrade flightctl-agentUpgrade slirp4netns-debugsourceUpgrade osbuild-composer-dnf-jsonUpgrade golang-docsUpgrade delveNo solution existsUpgrade podman-catatonit-debuginfoUpgrade osbuild-composer-debuginfoUpgrade libslirp-debugsourceUpgrade go-fdo-server-rendezvousUpgrade buildah-debugsourceUpgrade skopeo-testsUpgrade go-fdo-client-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade osbuild-composer-workerUpgrade osbuild-composer-worker-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade git-lfsUpgrade toolbox-debuginfoUpgrade podman-plugins-debuginfoUpgrade osbuild-composer-debugsourceUpgrade grafana-pcp-debuginfoUpgrade golang-raceUpgrade go-fdo-server-debuginfoUpgrade ipp-usb-debuginfoUpgrade image-builder-debuginfoUpgrade runcUpgrade podman-pluginsUpgrade podman-debugsourceUpgrade flightctl-observabilityUpgrade skopeo-debuginfoUpgrade conmonUpgrade go-fdo-server-debugsourceUpgrade go-fdo-serverUpgrade go-fdo-clientUpgrade delve-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade toolbox-testsUpgrade podmanUpgrade podman-testsUpgrade grafana-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criu-libs-debuginfoUpgrade git-lfs-debugsourceUpgrade flightctl-servicesUpgrade cockpit-podmanUpgrade toolboxUpgrade libslirpUpgrade critUpgrade grafanaUpgrade skopeoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade libslirp-debuginfoUpgrade grafana-pcp-debugsourceUpgrade container-selinuxUpgrade go-fdo-client-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade udicaUpgrade toolbox-debugsourceUpgrade rhc-debuginfoUpgrade podman-gvproxyUpgrade ignition-debugsourceUpgrade criu-devel | Aug 17, 2026 | Aug 13, 2026 |
| Rocky_linux | — | Upgrade podman-catatonitUpgrade buildah-testsUpgrade image-builder-debuginfoUpgrade netavarkUpgrade delve-debuginfoUpgrade osbuild-composer-coreUpgrade crun-debuginfoUpgrade grafana-pcpUpgrade toolboxUpgrade grafana-pcp-debuginfoUpgrade osbuild-composer-core-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildahUpgrade fuse-overlayfs-debugsourceUpgrade criuUpgrade grafana-selinuxUpgrade buildah-debugsourceUpgrade conmonUpgrade delve-debugsourceUpgrade skopeo-debugsourceUpgrade git-lfs-debugsourceUpgrade toolbox-testsUpgrade fuse-overlayfs-debuginfoUpgrade golang-raceUpgrade osbuild-composer-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade image-builder-debugsourceUpgrade fuse-overlayfsUpgrade libslirp-develUpgrade grafana-debuginfoUpgrade buildah-tests-debuginfoUpgrade go-fdo-client-debugsourceUpgrade go-fdo-server-debuginfoUpgrade runc-debugsourceUpgrade podman-gvproxyUpgrade skopeo-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade criu-debugsourceUpgrade aardvark-dnsUpgrade criu-debuginfoUpgrade slirp4netnsUpgrade crun-debugsourceUpgrade go-fdo-clientUpgrade golangUpgrade podmanUpgrade git-lfs-debuginfoUpgrade conmon-debugsourceUpgrade containers-commonUpgrade criu-libsUpgrade go-fdo-client-debuginfoUpgrade osbuild-composer-debugsourceUpgrade ipp-usbUpgrade podman-pluginsUpgrade criu-develUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade golang-binUpgrade podman-gvproxy-debuginfoUpgrade critUpgrade skopeo-testsUpgrade podman-plugins-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade ipp-usb-debuginfoUpgrade go-fdo-serverUpgrade go-fdo-server-debugsourceUpgrade criu-libs-debuginfoUpgrade toolbox-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-debugsourceUpgrade opentelemetry-collectorUpgrade osbuild-composer-worker-debuginfoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade osbuild-composer-workerUpgrade grafana-debugsourceUpgrade slirp4netns-debugsourceUpgrade conmon-debuginfoUpgrade podman-debugsourceUpgrade osbuild-composerUpgrade grafanaUpgrade git-lfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-github-openprinting-ipp-usb-debugsourceUpgrade go-toolsetUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade image-builderUpgrade grafana-pcp-debugsourceUpgrade containernetworking-pluginsUpgrade podman-testsUpgrade python3-criuUpgrade delve | Aug 28, 2026 | Aug 26, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 15, 2026 | Aug 13, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub