CVE-2026-110927
Received Received - Intake

OpenSSH Memory Exhaustion via Compression Handling

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: redhat-SADP

Description
A flaw was found in OpenSSH. After compression is negotiated, a compressed payload can expand past the maximum supported packet size because the inflate loop does not stop at that limit. Memory use grows in the process handling that connection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-15
AI Q&A
2026-10-15
EPSS Evaluated
N/A
NVD
CVE-2026-110927
EUVD
EUVD-2026-102055

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Red Hat Red Hat Enterprise Linux 10 *
Red Hat Red Hat Enterprise Linux 6 *
Red Hat Red Hat Enterprise Linux 7 *
Red Hat Red Hat Enterprise Linux 8 *
Red Hat Red Hat Enterprise Linux 9 *
Red Hat Red Hat Hardened Images *
Red Hat Red Hat OpenShift Container Platform 4 *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in OpenSSH occurs when a compressed payload expands beyond the maximum supported packet size after compression is negotiated. The inflate loop does not stop at the size limit, causing memory usage to grow in the process handling the connection. It only affects connections where SSH compression is enabled.

Detection Guidance

Check if SSH compression is enabled on your system by reviewing the SSH server configuration file (typically /etc/ssh/sshd_config). Look for the 'Compression' directive. If it is set to 'yes', the system is potentially vulnerable. You can also monitor memory usage spikes in SSH processes during active connections.

Impact Analysis

This flaw can lead to denial-of-service conditions by consuming excessive memory in the affected process. It disrupts service availability but does not directly affect confidentiality or integrity of data. Users may experience system slowdowns or crashes if compression is enabled.

Compliance Impact

This vulnerability primarily causes denial-of-service conditions by consuming excessive memory, which could disrupt service availability. It does not directly impact confidentiality or integrity of data. Compliance with standards like GDPR or HIPAA typically requires maintaining service availability and protecting data integrity, so this issue may indirectly affect compliance by causing service disruptions.

Mitigation Strategies

Disable SSH compression by setting 'Compression no' in the SSH server configuration file (/etc/ssh/sshd_config) and restarting the SSH service. This is the default client-side setting, so no client changes are required. Apply patches or updates from your vendor if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110927. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart