2456333 – (CVE-2026-32281) CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

Bug 2456333 (CVE-2026-32281) - CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation

Summary: CVE-2026-32281 crypto/x509: golang: Go crypto/x509: Denial of Service via ine...

Keywords:
Status:	NEW
Alias:	CVE-2026-32281
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	medium
Severity:	medium
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2456732
Blocks:
TreeView+	depends on / blocked

Reported:	2026-04-08 02:01 UTC by OSIDB Bzimport
Modified:	2026-07-08 15:50 UTC (History)
CC List:	167 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHSA-2026:19135	None	None	None	2026-05-19 16:07:37 UTC
Red Hat Product Errata	RHSA-2026:19353	None	None	None	2026-05-19 21:39:20 UTC
Red Hat Product Errata	RHSA-2026:19719	None	None	None	2026-05-20 16:41:11 UTC
Red Hat Product Errata	RHSA-2026:19720	None	None	None	2026-05-20 16:53:35 UTC
Red Hat Product Errata	RHSA-2026:19721	None	None	None	2026-05-20 16:48:45 UTC
Red Hat Product Errata	RHSA-2026:20569	None	None	None	2026-05-26 03:20:06 UTC
Red Hat Product Errata	RHSA-2026:20570	None	None	None	2026-05-26 03:17:20 UTC
Red Hat Product Errata	RHSA-2026:20571	None	None	None	2026-05-26 03:20:55 UTC
Red Hat Product Errata	RHSA-2026:22141	None	None	None	2026-06-01 02:07:16 UTC
Red Hat Product Errata	RHSA-2026:22309	None	None	None	2026-06-01 11:50:09 UTC
Red Hat Product Errata	RHSA-2026:23102	None	None	None	2026-06-04 02:05:10 UTC
Red Hat Product Errata	RHSA-2026:23103	None	None	None	2026-06-04 01:42:17 UTC
Red Hat Product Errata	RHSA-2026:24337	None	None	None	2026-06-08 01:46:30 UTC
Red Hat Product Errata	RHSA-2026:24470	None	None	None	2026-06-08 13:15:46 UTC
Red Hat Product Errata	RHSA-2026:24716	None	None	None	2026-06-09 06:47:38 UTC
Red Hat Product Errata	RHSA-2026:26054	None	None	None	2026-06-15 19:35:14 UTC
Red Hat Product Errata	RHSA-2026:26447	None	None	None	2026-06-16 22:50:31 UTC
Red Hat Product Errata	RHSA-2026:27076	None	None	None	2026-06-18 12:18:20 UTC
Red Hat Product Errata	RHSA-2026:27711	None	None	None	2026-06-22 01:57:11 UTC
Red Hat Product Errata	RHSA-2026:27740	None	None	None	2026-06-22 03:58:50 UTC
Red Hat Product Errata	RHSA-2026:28010	None	None	None	2026-06-22 17:15:39 UTC
Red Hat Product Errata	RHSA-2026:28074	None	None	None	2026-06-23 02:08:40 UTC
Red Hat Product Errata	RHSA-2026:29035	None	None	None	2026-06-24 13:48:50 UTC
Red Hat Product Errata	RHSA-2026:29195	None	None	None	2026-06-24 19:16:09 UTC
Red Hat Product Errata	RHSA-2026:29455	None	None	None	2026-06-24 23:49:19 UTC
Red Hat Product Errata	RHSA-2026:29702	None	None	None	2026-06-25 06:22:03 UTC
Red Hat Product Errata	RHSA-2026:29703	None	None	None	2026-06-25 09:45:42 UTC
Red Hat Product Errata	RHSA-2026:33722	None	None	None	2026-06-30 20:03:42 UTC
Red Hat Product Errata	RHSA-2026:34192	None	None	None	2026-07-01 11:40:56 UTC
Red Hat Product Errata	RHSA-2026:34196	None	None	None	2026-07-01 12:07:23 UTC
Red Hat Product Errata	RHSA-2026:34197	None	None	None	2026-07-01 12:05:59 UTC
Red Hat Product Errata	RHSA-2026:36796	None	None	None	2026-07-08 15:50:23 UTC

Description OSIDB Bzimport 2026-04-08 02:01:26 UTC

Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.

Comment 7 errata-xmlrpc 2026-05-19 16:07:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:19135 https://access.redhat.com/errata/RHSA-2026:19135

Comment 8 errata-xmlrpc 2026-05-19 21:39:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:19353 https://access.redhat.com/errata/RHSA-2026:19353

Comment 12 errata-xmlrpc 2026-05-20 16:41:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:19719 https://access.redhat.com/errata/RHSA-2026:19719

Comment 13 errata-xmlrpc 2026-05-20 16:48:36 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2026:19721 https://access.redhat.com/errata/RHSA-2026:19721

Comment 14 errata-xmlrpc 2026-05-20 16:53:28 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:19720 https://access.redhat.com/errata/RHSA-2026:19720

Comment 15 errata-xmlrpc 2026-05-26 03:17:11 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20570 https://access.redhat.com/errata/RHSA-2026:20570

Comment 16 errata-xmlrpc 2026-05-26 03:19:56 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20569 https://access.redhat.com/errata/RHSA-2026:20569

Comment 17 errata-xmlrpc 2026-05-26 03:20:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:20571 https://access.redhat.com/errata/RHSA-2026:20571

Comment 19 errata-xmlrpc 2026-06-01 02:07:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:22141 https://access.redhat.com/errata/RHSA-2026:22141

Comment 20 errata-xmlrpc 2026-06-01 11:50:00 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:22309 https://access.redhat.com/errata/RHSA-2026:22309

Comment 29 errata-xmlrpc 2026-06-04 01:42:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:23103 https://access.redhat.com/errata/RHSA-2026:23103

Comment 30 errata-xmlrpc 2026-06-04 02:05:03 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:23102 https://access.redhat.com/errata/RHSA-2026:23102

Comment 31 errata-xmlrpc 2026-06-08 01:46:21 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:24337 https://access.redhat.com/errata/RHSA-2026:24337

Comment 32 errata-xmlrpc 2026-06-08 13:15:38 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:24470 https://access.redhat.com/errata/RHSA-2026:24470

Comment 33 errata-xmlrpc 2026-06-09 06:47:30 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:24716 https://access.redhat.com/errata/RHSA-2026:24716

Comment 34 errata-xmlrpc 2026-06-15 19:35:05 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:26054 https://access.redhat.com/errata/RHSA-2026:26054

Comment 35 errata-xmlrpc 2026-06-16 22:50:22 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:26447 https://access.redhat.com/errata/RHSA-2026:26447

Comment 36 errata-xmlrpc 2026-06-18 12:18:12 UTC

This issue has been addressed in the following products:

  Red Hat Satellite 6.16 for RHEL 8
  Red Hat Satellite 6.16 for RHEL 9

Via RHSA-2026:27076 https://access.redhat.com/errata/RHSA-2026:27076

Comment 37 errata-xmlrpc 2026-06-22 01:57:02 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10.0 Extended Update Support

Via RHSA-2026:27711 https://access.redhat.com/errata/RHSA-2026:27711

Comment 38 errata-xmlrpc 2026-06-22 03:58:41 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:27740 https://access.redhat.com/errata/RHSA-2026:27740

Comment 39 errata-xmlrpc 2026-06-22 17:15:31 UTC

This issue has been addressed in the following products:

  Cryostat 4 on RHEL 9

Via RHSA-2026:28010 https://access.redhat.com/errata/RHSA-2026:28010

Comment 40 errata-xmlrpc 2026-06-23 02:08:32 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:28074 https://access.redhat.com/errata/RHSA-2026:28074

Comment 41 errata-xmlrpc 2026-06-24 13:48:42 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:29035 https://access.redhat.com/errata/RHSA-2026:29035

Comment 42 errata-xmlrpc 2026-06-24 19:16:00 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:29195 https://access.redhat.com/errata/RHSA-2026:29195

Comment 43 errata-xmlrpc 2026-06-24 23:49:09 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:29455 https://access.redhat.com/errata/RHSA-2026:29455

Comment 44 errata-xmlrpc 2026-06-25 06:21:54 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:29702 https://access.redhat.com/errata/RHSA-2026:29702

Comment 45 errata-xmlrpc 2026-06-25 09:45:34 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:29703 https://access.redhat.com/errata/RHSA-2026:29703

Comment 46 errata-xmlrpc 2026-06-30 20:03:35 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:33722 https://access.redhat.com/errata/RHSA-2026:33722

Comment 47 errata-xmlrpc 2026-07-01 11:40:47 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:34192 https://access.redhat.com/errata/RHSA-2026:34192

Comment 48 errata-xmlrpc 2026-07-01 12:05:49 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:34197 https://access.redhat.com/errata/RHSA-2026:34197

Comment 49 errata-xmlrpc 2026-07-01 12:07:12 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:34196 https://access.redhat.com/errata/RHSA-2026:34196

Comment 50 errata-xmlrpc 2026-07-08 15:50:13 UTC

This issue has been addressed in the following products:

  RHEM 1.0 for RHEL 9

Via RHSA-2026:36796 https://access.redhat.com/errata/RHSA-2026:36796

Note You need to log in before you can comment on or make changes to this bug.

aazores
abarbaro
abrianik
akostadi
akoudelk
alcohan
alebedev
alizardo
amasferr
amctagga
anjoseph
anpicker
ansmith
anthomas
aoconnor
asatyam
ataylor
bbrownin
bdettelb
bniver
bparees
chfoley
ckandaga
cmah
crizzo
csutherl
dakwon
dbruscin
dhanak
diagrawa
dmayorov
doconnor
drosa
dschmidt
dsimansk
dsoumis
dymurray
eaguilar
ebaron
eborisov
eglynn
ehelms
ehugonne
erezende
ewittman
fdeutsch
flucifre
ggainey
ggrzybek
gmeno
gparvin
groman
hasun
ibolton
janstey
jbalunas
jburrell
jcantril
jchui
jclere
jeder
jfula
jhe
jjoyce
jkoehler
jlanda
jlledo
jmatthew
jmontleo
jolong
jowilson
jpasqual
jprabhak
jpretori
jraez
jschluet
juwatts
jwon
kingland
kshier
ktsao
kvanderr
kverlaen
lball
lbragsta
lchilton
lgamliel
lhh
lphiri
manissin
mbenjamin
mbocek
mburns
mgarciac
mhackett
mhess
mhulan
mnovotny
mrunge
mwringe
nboldt
ngough
nipatil
nmoumoul
nyancey
oaljalju
ometelka
oramraz
osousa
pahickey
pantinor
parichar
pcreech
peholase
pgaikwad
pjindal
plodge
psrna
ptisnovs
pvasanth
rchan
rekumar
rfreiman
rgodfrey
rhaigner
rhel-process-autobot
rjohnson
rkubis
rmaucher
rojacob
sabiswas
sakbas
sausingh
sbratsla
sdawley
sfeifer
simaishi
slucidi
smallamp
smcdonal
smullick
sostapov
sseago
stcannon
stirabos
swoodman
syedriko
szappis
tasato
teagle
thason
tmalecek
tsedmik
tzivkovi
vereddy
veshanka
vimartin
vkarehfa
vle
vvoronko
vwilson
watson-tool-maintainers
wenshen
whayutin
wtam
xdharmai
yguenane