CVE-2026-59845
A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as process ID -1; during cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:N/A:H
- EPSS probability
- 0.10%
- CWE
- CWE-390
- Published
- 2026-07-21
- Last modified
- 2026-09-01
Affected products
- Red Hat Red Hat Hardened Images
- Red Hat Red Hat Enterprise Linux 10
- Red Hat Red Hat Enterprise Linux 8
- Red Hat Red Hat Enterprise Linux 9
Weakness type
Related vulnerabilities
- CVE-2026-76642 — util-linux libmount Privilege Escalation via Failed Mount Helper
- CVE-2026-53434 — Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector
- CVE-2026-48792 — pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution
- CVE-2026-44310 — gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers
- CVE-2025-0029 — Improper handling of error condition during host-induced faults can allow a local high-privileged...
- CVE-2025-46367 — Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contain a Detection of Error...
- CVE-2025-27039 — Detection of Error Condition Without Action in Computer Vision
- CVE-2024-49841 — Detection of Error Condition Without Action in Hypervisor