crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

🗓️ 19 May 2026 13:37:43Reported by RedHatType

Transport Layer Security session resumption flaw may bypass certificate validation if certificate authority settings change.

Reporter	Title	Published	Views	Family All 2089
RedhatCVE	CVE-2025-68121	12 Feb 202611:01	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update	9 Apr 202611:00	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	9 Apr 202611:00	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update	10 Apr 202614:24	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	10 Apr 202614:24	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: podman security update	13 Apr 202612:51	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	13 Apr 202612:51	–	redhat
RedHat Linux	Moderate: Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0.18 (golang-github-openstack-k8s-operators-os-diff) security update	29 Apr 202604:17	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	29 Apr 202604:17	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Submariner v0.22 security fixes and container updates	14 Apr 202615:55	–	redhat

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	9	aarch64	containernetworking-plugins	1:1.9.0-2.el9	containernetworking-plugins-1:1.9.0-2.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	containernetworking-plugins	1:1.9.0-2.el9	containernetworking-plugins-1:1.9.0-2.el9.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	containernetworking-plugins	1:1.9.0-2.el9	containernetworking-plugins-1:1.9.0-2.el9.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	containernetworking-plugins	1:1.9.0-2.el9	containernetworking-plugins-1:1.9.0-2.el9.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	containernetworking-plugins-debuginfo	1:1.9.0-2.el9	containernetworking-plugins-debuginfo-1:1.9.0-2.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	containernetworking-plugins-debuginfo	1:1.9.0-2.el9	containernetworking-plugins-debuginfo-1:1.9.0-2.el9.ppc64le.rpm
Red Hat Enterprise Linux	9	s390x	containernetworking-plugins-debuginfo	1:1.9.0-2.el9	containernetworking-plugins-debuginfo-1:1.9.0-2.el9.s390x.rpm
Red Hat Enterprise Linux	9	x86_64	containernetworking-plugins-debuginfo	1:1.9.0-2.el9	containernetworking-plugins-debuginfo-1:1.9.0-2.el9.x86_64.rpm
Red Hat Enterprise Linux	9	aarch64	containernetworking-plugins-debugsource	1:1.9.0-2.el9	containernetworking-plugins-debugsource-1:1.9.0-2.el9.aarch64.rpm
Red Hat Enterprise Linux	9	ppc64le	containernetworking-plugins-debugsource	1:1.9.0-2.el9	containernetworking-plugins-debugsource-1:1.9.0-2.el9.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-68121
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/737700
go	www.go.dev/issue/77217
groups	www.groups.google.com/g/golang-announce/c/K09ubi9FQFk
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121
pkg	www.pkg.go.dev/vuln/GO-2026-4337
cve	www.cve.org/CVERecord

21 Aug 2026 20:43Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.1 - 10

EPSS0.00765

SSVC