2456333 – (CVE-2026-32281) CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

Bug 2456333 (CVE-2026-32281) - CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

Summary: CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via ine...

Keywords:
Status:	NEW
Alias:	CVE-2026-32281
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2456732
Blocks:
TreeView+	depends on / blocked

Reported:	2026-04-08 02:01 UTC by OSIDB Bzimport
Modified:	2026-06-18 12:18 UTC (History)
CC List:	163 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:19135	None	None	None	2026-05-19 16:07:37 UTC
Red Hat Product Errata	RHSA-2026:19353	None	None	None	2026-05-19 21:39:20 UTC
Red Hat Product Errata	RHSA-2026:19719	None	None	None	2026-05-20 16:41:11 UTC
Red Hat Product Errata	RHSA-2026:19720	None	None	None	2026-05-20 16:53:35 UTC
Red Hat Product Errata	RHSA-2026:19721	None	None	None	2026-05-20 16:48:45 UTC
Red Hat Product Errata	RHSA-2026:20569	None	None	None	2026-05-26 03:20:06 UTC
Red Hat Product Errata	RHSA-2026:20570	None	None	None	2026-05-26 03:17:20 UTC
Red Hat Product Errata	RHSA-2026:20571	None	None	None	2026-05-26 03:20:55 UTC
Red Hat Product Errata	RHSA-2026:22141	None	None	None	2026-06-01 02:07:16 UTC
Red Hat Product Errata	RHSA-2026:22309	None	None	None	2026-06-01 11:50:09 UTC
Red Hat Product Errata	RHSA-2026:23102	None	None	None	2026-06-04 02:05:10 UTC
Red Hat Product Errata	RHSA-2026:23103	None	None	None	2026-06-04 01:42:17 UTC
Red Hat Product Errata	RHSA-2026:24337	None	None	None	2026-06-08 01:46:30 UTC
Red Hat Product Errata	RHSA-2026:24470	None	None	None	2026-06-08 13:15:46 UTC
Red Hat Product Errata	RHSA-2026:24716	None	None	None	2026-06-09 06:47:38 UTC
Red Hat Product Errata	RHSA-2026:26054	None	None	None	2026-06-15 19:35:14 UTC
Red Hat Product Errata	RHSA-2026:26447	None	None	None	2026-06-16 22:50:31 UTC
Red Hat Product Errata	RHSA-2026:27076	None	None	None	2026-06-18 12:18:20 UTC

Description OSIDB Bzimport 2026-04-08 02:01:26 UTC

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Comment 7 errata-xmlrpc 2026-05-19 16:07:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19135 https://access.redhat.com/errata/RHSA-2026:19135

Comment 8 errata-xmlrpc 2026-05-19 21:39:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:19353 https://access.redhat.com/errata/RHSA-2026:19353

Comment 12 errata-xmlrpc 2026-05-20 16:41:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:19719 https://access.redhat.com/errata/RHSA-2026:19719

Comment 13 errata-xmlrpc 2026-05-20 16:48:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:19721 https://access.redhat.com/errata/RHSA-2026:19721

Comment 14 errata-xmlrpc 2026-05-20 16:53:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:19720 https://access.redhat.com/errata/RHSA-2026:19720

Comment 15 errata-xmlrpc 2026-05-26 03:17:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20570 https://access.redhat.com/errata/RHSA-2026:20570

Comment 16 errata-xmlrpc 2026-05-26 03:19:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20569 https://access.redhat.com/errata/RHSA-2026:20569

Comment 17 errata-xmlrpc 2026-05-26 03:20:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20571 https://access.redhat.com/errata/RHSA-2026:20571

Comment 19 errata-xmlrpc 2026-06-01 02:07:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22141 https://access.redhat.com/errata/RHSA-2026:22141

Comment 20 errata-xmlrpc 2026-06-01 11:50:00 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:22309 https://access.redhat.com/errata/RHSA-2026:22309

Comment 29 errata-xmlrpc 2026-06-04 01:42:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:23103 https://access.redhat.com/errata/RHSA-2026:23103

Comment 30 errata-xmlrpc 2026-06-04 02:05:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:23102 https://access.redhat.com/errata/RHSA-2026:23102

Comment 31 errata-xmlrpc 2026-06-08 01:46:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:24337 https://access.redhat.com/errata/RHSA-2026:24337

Comment 32 errata-xmlrpc 2026-06-08 13:15:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:24470 https://access.redhat.com/errata/RHSA-2026:24470

Comment 33 errata-xmlrpc 2026-06-09 06:47:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:24716 https://access.redhat.com/errata/RHSA-2026:24716

Comment 34 errata-xmlrpc 2026-06-15 19:35:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:26054 https://access.redhat.com/errata/RHSA-2026:26054

Comment 35 errata-xmlrpc 2026-06-16 22:50:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:26447 https://access.redhat.com/errata/RHSA-2026:26447

Comment 36 errata-xmlrpc 2026-06-18 12:18:12 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2026:27076 https://access.redhat.com/errata/RHSA-2026:27076

Note You need to log in before you can comment on or make changes to this bug.

aazores
abarbaro
abrianik
akostadi
akoudelk
alcohan
alebedev
alizardo
amasferr
amctagga
anjoseph
anpicker
ansmith
anthomas
aoconnor
asatyam
ataylor
bbrownin
bdettelb
bniver
bparees
chfoley
ckandaga
cmah
crizzo
csutherl
dbruscin
dhanak
diagrawa
dmayorov
doconnor
drosa
dschmidt
dsimansk
dsoumis
dymurray
eaguilar
ebaron
eborisov
eglynn
ehelms
erezende
ewittman
fdeutsch
flucifre
ggainey
ggrzybek
gmeno
gparvin
groman
hasun
ibolton
janstey
jbalunas
jburrell
jcantril
jchui
jclere
jeder
jfula
jhe
jjoyce
jkoehler
jlanda
jlledo
jmatthew
jmontleo
jolong
jowilson
jprabhak
jpretori
jraez
jschluet
juwatts
jwon
kingland
kshier
ktsao
kvanderr
kverlaen
lball
lbragsta
lchilton
lgamliel
lhh
lphiri
manissin
mbenjamin
mbocek
mburns
mgarciac
mhackett
mhess
mhulan
mnovotny
mrunge
mwringe
nboldt
ngough
nipatil
nmoumoul
nyancey
oaljalju
ometelka
oramraz
osousa
pahickey
pantinor
parichar
pcreech
peholase
pgaikwad
pjindal
plodge
psrna
ptisnovs
pvasanth
rchan
rekumar
rfreiman
rgodfrey
rhaigner
rhel-process-autobot
rjohnson
rkubis
rmaucher
rojacob
sabiswas
sakbas
sausingh
sdawley
sfeifer
simaishi
slucidi
smallamp
smcdonal
smullick
sostapov
sseago
stcannon
stirabos
swoodman
syedriko
szappis
tasato
teagle
thason
tmalecek
tsedmik
tzivkovi
vereddy
veshanka
vimartin
vkarehfa
vle
vvoronko
vwilson
watson-tool-maintainers
wenshen
whayutin
wtam
xdharmai
yguenane