Bug 2451094 (CVE-2026-31790)

Summary:	CVE-2026-31790 openssl: openssl: Information Disclosure from Uninitialized Memory via Invalid RSA Public Key
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	akhatavk, aos-team-art-private, asdas, cchiang, csutherl, dpaolell, dsoumis, jclere, jdelft, jupierce, jwon, lgarciaa, mbiarnes, pjindal, plodge, ppalepu, ppostler, prdhamdh, rhel-process-autobot, rmaucher, security-response-team, sghai, sidsharm, suppawar, szappis, vchlup, vlaad, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in openssl. Applications that use RSASVE key encapsulation, a method for securely exchanging encryption keys, may inadvertently expose sensitive data. This vulnerability arises when an application processes a malicious, invalid RSA public key provided by an attacker without proper validation. Consequently, the application might send the contents of an uninitialized memory buffer, which could contain confidential information, to the attacker.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Deadline:	2026-04-07

Description OSIDB Bzimport 2026-03-25 03:14:17 UTC

Issue summary: Applications using RSASVE key encapsulation to establish a secret
encryption key can send contents of an uninitialized memory buffer to a malicious peer.

Impact summary: The uninitialized buffer might contain sensitive data from the previous
execution of the application process which leads to sensitive data leakage to an attacker.

RSA_public_encrypt() returns the number of bytes written on success and -1
on error. The affected code tests only whether the return value is non-zero.
As a result, if RSA encryption fails, encapsulation can still return success to
the caller, set the output lengths, and leave the caller to use the contents of
the ciphertext buffer as if a valid KEM ciphertext had been produced.

If applications use EVP_PKEY_encapsulate() with RSA/RSASVE on an
attacker-supplied invalid RSA public key without first validating that key,
then this may cause stale or uninitialized contents of the caller-provided ciphertext
buffer to be disclosed to the attacker in place of the KEM ciphertext.

As a workaround calling EVP_PKEY_public_check() or EVP_PKEY_public_check_quick()
before EVP_PKEY_encapsulate() will mitigate the issue.

Comment 2 errata-xmlrpc 2026-04-30 13:58:29 UTC

This issue has been addressed in the following products:

  Red Hat JBoss Web Server 6.2.2

Via RHSA-2026:12195 https://access.redhat.com/errata/RHSA-2026:12195

Comment 4 errata-xmlrpc 2026-05-19 13:07:50 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19066 https://access.redhat.com/errata/RHSA-2026:19066

Comment 5 errata-xmlrpc 2026-05-19 18:02:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:19218 https://access.redhat.com/errata/RHSA-2026:19218

Comment 12 errata-xmlrpc 2026-06-22 03:44:52 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:27745 https://access.redhat.com/errata/RHSA-2026:27745

Comment 13 errata-xmlrpc 2026-06-22 04:12:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:27746 https://access.redhat.com/errata/RHSA-2026:27746

Comment 14 errata-xmlrpc 2026-06-22 04:23:27 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:27744 https://access.redhat.com/errata/RHSA-2026:27744

Comment 15 errata-xmlrpc 2026-06-22 15:13:20 UTC

This issue has been addressed in the following products:

  Red Hat JBoss Core Services 2.4.62.SP4

Via RHSA-2026:27201 https://access.redhat.com/errata/RHSA-2026:27201

Comment 16 errata-xmlrpc 2026-06-24 07:08:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
  Red Hat Enterprise Linux 9.6 Extended Update Support
  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:28832 https://access.redhat.com/errata/RHSA-2026:28832

Comment 19 errata-xmlrpc 2026-07-14 20:29:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:39297 https://access.redhat.com/errata/RHSA-2026:39297

Comment 20 errata-xmlrpc 2026-07-29 13:04:17 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2026:44231 https://access.redhat.com/errata/RHSA-2026:44231

Comment 21 errata-xmlrpc 2026-07-30 09:43:17 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.14

Via RHSA-2026:43252 https://access.redhat.com/errata/RHSA-2026:43252

Comment 22 errata-xmlrpc 2026-07-30 09:44:28 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.15

Via RHSA-2026:43226 https://access.redhat.com/errata/RHSA-2026:43226

Comment 23 errata-xmlrpc 2026-08-20 15:17:09 UTC

This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2026:54187 https://access.redhat.com/errata/RHSA-2026:54187

Comment 24 Jon Orris 2026-09-24 10:34:04 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:71542 https://access.redhat.com/errata/RHSA-2026:71542