What is CVE-2026-59845?
In libssh, when ProxyCommand is used, an unchecked fork() failure can store process ID as -1. During cleanup, signals may then be sent across the caller's accessible process tree, leading to local denial of service. Affected systems should update libssh.
Azərbaycanca: libssh kitabxanasında ProxyCommand istifadə edildikdə fork() xətası yoxlanılmır və process ID -1 kimi saxlanılır. Təmizləmə zamanı bu səhv ID səbəbindən çağıran proses ağacına siqnallar göndərilərək lokal denial of service yarana bilər. Təsirə məruz qalan sistemlərdə libssh yenilənməlidir.
FAQ2
How does CVE-2026-59845 occur in libssh?
The vulnerability occurs because an unchecked fork() failure when ProxyCommand is used stores the process ID as -1. During cleanup, signals are then sent across the caller's accessible process tree based on this incorrect ID.
What is the potential impact of CVE-2026-59845?
This vulnerability can lead to local denial of service (DoS), as signals are sent across the caller's accessible process tree during cleanup.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.