CVE-2026-95209
Description
A flaw was found in gnutls. An issue during certificate validation causes legitimate Certificate Authority (CA) certificates to be improperly rejected. Consequently, affected applications fail to establish secure connections with trusted endpoints, resulting in a Denial of Service (DoS).
Statement
This vulnerability is rated as having Moderate impact because it results in connection establishment failures rather than compromise of system confidentiality or integrity. In Red Hat enterprise deployments, client services utilizing GnuTLS for encrypted communications may experience availability disruptions when verifying trust chains involving specific valid Certificate Authorities. The impact is confined to transport-layer connection termination and does not permit data tampering, sensitive information disclosure, or remote code execution.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
