← All advisories

Medium severity4.8NVD Advisory· Published Aug 11, 2026· Updated Sep 4, 2026

CVE-2026-73282

CVE-2026-73282

Description

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

10

osv-coords9 versions
pkg:rpm/almalinux/openssh-cavs pkg:rpm/almalinux/openssh-clients pkg:rpm/almalinux/openssh-keysign pkg:rpm/almalinux/openssh-server pkg:rpm/almalinux/pam_ssh_agent_auth pkg:rpm/almalinux/openssh pkg:rpm/almalinux/openssh-keycat pkg:rpm/almalinux/openssh-askpass pkg:rpm/almalinux/openssh-ldap
< 8.0p1-33.el8_10+ 8 more
- (no CPE)range: < 8.0p1-33.el8_10
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 0.10.4-8.11.el9_8.alma.1
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 9.9p1-27.el10_2.alma.1
- (no CPE)range: < 8.0p1-33.el8_10
OpenSSH/OpenSSHllm-fuzzy
Range: <10.5

Patches

Vulnerability mechanics

References

1

www.openssh.org/releasenotes.htmlnvdProductRelease Notes

News mentions

0

No linked articles in our index yet.