CVE-2026-55654

Name of the Vulnerable Software and Affected Versions OpenSSH (affected versions not specified)

Description A heap out-of-bounds read occurs during the cleanup of GSSAPI (Generic Security Service Application Programming Interface) indicators when a trailing NULL termination is missing in the auth-indicators array. In specific configurations involving GSSAPI authentication and a Kerberos environment, a remote attacker could exploit this to cause the SSH authentication path to crash or abort, resulting in a denial of service (DoS) that impacts the availability of the SSH service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.