OpenSSH (client): Machine-in-the-middle against the client when VerifyHostKeyDNS is enabled

CVE-2025-26465Kernel, userspace & hypervisorcurated

Impact

Machine-in-the-middle against the client when VerifyHostKeyDNS is enabled

Who can reach it

Unauthenticated network (MITM)

What to do

Package update; no reboot. Audit client configs for VerifyHostKeyDNS

References

https://access.redhat.com/security/cve/CVE-2025-26465

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.