CVE detail
CVE-2026-39830
A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 30.0 · diversity 20.0 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
43 source links · newest first
- CVE-2026-39830 Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshMicrosoft MSRC
Information published.
vendormsrc.microsoft.comMay 27, 2026, 8:12 AM - https://access.redhat.com/errata/RHSA-2026:43692access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:43052access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:42796access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:42146access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:41066access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:41036access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:41031access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:41019access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40972access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40945access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40974access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40969access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40262access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:40118access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-39830.jsonsecurity.access.redhat.com
No excerpt available.
Vendor Advisorysecurity.access.redhat.comMay 22, 2026, 4:16 AM - https://bugzilla.redhat.com/show_bug.cgi?id=2480684bugzilla.redhat.com
No excerpt available.
Exploitbugzilla.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/security/cve/CVE-2026-39830access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37387access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37296access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37286access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37278access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37275access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37272access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37271access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37268access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:37072access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36808access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36797access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36796access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36651access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36648access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36625access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36319access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36207access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:36199access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:35833access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://access.redhat.com/errata/RHSA-2026:29455access.redhat.com
No excerpt available.
Vendor Advisoryaccess.redhat.comMay 22, 2026, 4:16 AM - https://pkg.go.dev/vuln/GO-2026-5017pkg.go.dev
No excerpt available.
Exploitpkg.go.devMay 22, 2026, 4:16 AM - https://groups.google.com/g/golang-announce/c/a082jnz-LvIgroups.google.com
No excerpt available.
Patchgroups.google.comMay 22, 2026, 4:16 AM No excerpt available.
Vendor Advisorygo.devMay 22, 2026, 4:16 AM- https://go.dev/cl/781664go.dev
No excerpt available.
Vendor Advisorygo.devMay 22, 2026, 4:16 AM - https://go.dev/cl/781640go.dev
No excerpt available.
Vendor Advisorygo.devMay 22, 2026, 4:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2017-12278CVSS 6.3 · Medium
A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco Wireless LAN Controllers could allow an authenticated, remote attacker to cause an affected dev…
- CVE-2017-8280CVSS 7.0 · High
In all Qualcomm products with Android releases from CAF using the Linux kernel, during the wlan calibration data store and retrieve operation, there are some potential race condit…
- CVE-2026-17512CVSS 1.9 · Low
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds…
- CVE-2026-12353CVSS 5.3 · Medium
An unauthenticated attacker could trigger an Out of Memory condition to crash the Java process for RHCS by repeatedly sending HTTP requests to the TLS endpoint. Depending on how t…
- CVE-2026-56444CVSS 5.9 · Medium
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (contrary to…
- CVE-2026-41637CVSS 3.7 · Low
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, client terminated DNS-over-QUIC (DoQ) queries are not accounted properly by Unbound resulting in low-cost inflation of the…