Bug 2537080 (CVE-2026-84782) - CVE-2026-84782 openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset
Summary: CVE-2026-84782 openssl: compat-openssl: DTLS Retransmits Handshake Messages F...
Keywords:
Status: NEW
Alias: CVE-2026-84782
Deadline: 2026-09-29
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On: 2543670 2543672 2543679 2543680 2543681 2543688 2543689 2543690 2543691 2543692 2543694 2543696 2543697 2543698 2543704 2543713 2543714 2543715 2543716 2543717 2543718 2543720 2543721 2543722 2543666 2543667 2543674 2543675 2543677 2543687 2543693 2543695 2543699 2543700 2543701 2543702 2543703 2543705 2543706 2543707 2543708 2543709 2543710 2543711 2543712 2543719 2543723
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-18 20:03 UTC by OSIDB Bzimport
Modified: 2026-11-12 18:46 UTC (History)
8 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2026:88342 0 None None None 2026-10-22 16:39:07 UTC
Red Hat Product Errata RHBA-2026:88665 0 None None None 2026-10-23 11:57:27 UTC
Red Hat Product Errata RHBA-2026:89799 0 None None None 2026-10-26 03:31:29 UTC
Red Hat Product Errata RHSA-2026:76918 0 None None None 2026-10-08 06:14:23 UTC
Red Hat Product Errata RHSA-2026:77396 0 None None None 2026-10-08 09:51:03 UTC
Red Hat Product Errata RHSA-2026:80510 0 None None None 2026-10-12 02:06:03 UTC
Red Hat Product Errata RHSA-2026:80514 0 None None None 2026-10-12 02:36:36 UTC
Red Hat Product Errata RHSA-2026:85968 0 None None None 2026-10-20 17:06:33 UTC
Red Hat Product Errata RHSA-2026:85970 0 None None None 2026-10-20 14:44:31 UTC
Red Hat Product Errata RHSA-2026:89736 0 None None None 2026-10-26 02:01:55 UTC
Red Hat Product Errata RHSA-2026:89737 0 None None None 2026-10-26 01:55:36 UTC
Red Hat Product Errata RHSA-2026:89738 0 None None None 2026-10-26 02:32:02 UTC
Red Hat Product Errata RHSA-2026:95346 0 None None None 2026-11-06 18:09:35 UTC
Red Hat Product Errata RHSA-2026:96216 0 None None None 2026-11-09 11:01:10 UTC
Red Hat Product Errata RHSA-2026:96220 0 None None None 2026-11-09 11:20:39 UTC
Red Hat Product Errata RHSA-2026:98121 0 None None None 2026-11-11 01:55:03 UTC
Red Hat Product Errata RHSA-2026:99724 0 None None None 2026-11-12 18:46:24 UTC
Red Hat Product Errata RHSA-2026:99725 0 None None None 2026-11-12 17:45:46 UTC
Red Hat Product Errata RHSA-2026:99726 0 None None None 2026-11-12 17:39:45 UTC

Description OSIDB Bzimport 2026-09-18 20:03:31 UTC 
The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through.
The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly.
Comment 2 Jon Orris 2026-10-08 06:14:22 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:76918 https://access.redhat.com/errata/RHSA-2026:76918
Comment 3 Jon Orris 2026-10-08 09:51:02 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:77396 https://access.redhat.com/errata/RHSA-2026:77396
Comment 4 Jon Orris 2026-10-12 02:06:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2026:80510 https://access.redhat.com/errata/RHSA-2026:80510
Comment 5 Jon Orris 2026-10-12 02:36:35 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:80514 https://access.redhat.com/errata/RHSA-2026:80514
Comment 7 Jon Orris 2026-10-20 14:44:30 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:85970 https://access.redhat.com/errata/RHSA-2026:85970
Comment 8 Jon Orris 2026-10-20 17:06:32 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
  Red Hat Enterprise Linux 8
  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:85968 https://access.redhat.com/errata/RHSA-2026:85968
Comment 9 Jon Orris 2026-10-26 01:55:35 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2026:89737 https://access.redhat.com/errata/RHSA-2026:89737
Comment 10 Jon Orris 2026-10-26 02:01:54 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:89736 https://access.redhat.com/errata/RHSA-2026:89736
Comment 11 Jon Orris 2026-10-26 02:32:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2026:89738 https://access.redhat.com/errata/RHSA-2026:89738
Comment 12 Jon Orris 2026-11-06 18:09:34 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.22

Via RHSA-2026:95346 https://access.redhat.com/errata/RHSA-2026:95346
Comment 13 errata-xmlrpc 2026-11-09 11:01:08 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions

Via RHSA-2026:96216 https://access.redhat.com/errata/RHSA-2026:96216
Comment 14 errata-xmlrpc 2026-11-09 11:20:38 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2026:96220 https://access.redhat.com/errata/RHSA-2026:96220
Comment 15 errata-xmlrpc 2026-11-11 01:55:01 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 6 Extended Lifecycle Support  - EXTENSION

Via RHSA-2026:98121 https://access.redhat.com/errata/RHSA-2026:98121
Comment 17 errata-xmlrpc 2026-11-12 17:39:44 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2026:99726 https://access.redhat.com/errata/RHSA-2026:99726
Comment 18 errata-xmlrpc 2026-11-12 17:45:45 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On

Via RHSA-2026:99725 https://access.redhat.com/errata/RHSA-2026:99725
Comment 19 errata-xmlrpc 2026-11-12 18:46:23 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2026:99724 https://access.redhat.com/errata/RHSA-2026:99724
Note You need to log in before you can comment on or make changes to this bug.