crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption

🗓️ 26 Aug 2026 15:27:04Reported by RedHatType

redhat🔗 access.redhat.com👁 4 Views

Incorrect cert validation in crypto/tls during TLS session resumption enabling auth bypass.

Reporter	Title	Published	Views	Family All 2108
RedhatCVE	CVE-2025-68121	12 Feb 202611:01	–	redhatcve
RedHat Linux	Important: Red Hat Security Advisory: Satellite 6.17.7 Async Update	26 Mar 202620:28	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	26 Mar 202620:28	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Satellite 6.16.7 Async Update	26 Mar 202620:30	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	26 Mar 202620:30	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.27.0 Release.	30 Mar 202615:41	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Multicluster Global Hub 1.6.2 security update	31 Mar 202602:53	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update	31 Mar 202616:12	–	redhat
RedHat Linux	crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption	31 Mar 202616:12	–	redhat
RedHat Linux	Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update	31 Mar 202616:23	–	redhat

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	8	aarch64	containernetworking-plugins	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	containernetworking-plugins	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	containernetworking-plugins	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	containernetworking-plugins	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-1:1.4.0-10.rhaos4.16.el8.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	containernetworking-plugins-debuginfo	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debuginfo-1:1.4.0-10.rhaos4.16.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	containernetworking-plugins-debuginfo	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debuginfo-1:1.4.0-10.rhaos4.16.el8.ppc64le.rpm
Red Hat Enterprise Linux	8	s390x	containernetworking-plugins-debuginfo	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debuginfo-1:1.4.0-10.rhaos4.16.el8.s390x.rpm
Red Hat Enterprise Linux	8	x86_64	containernetworking-plugins-debuginfo	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debuginfo-1:1.4.0-10.rhaos4.16.el8.x86_64.rpm
Red Hat Enterprise Linux	8	aarch64	containernetworking-plugins-debugsource	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debugsource-1:1.4.0-10.rhaos4.16.el8.aarch64.rpm
Red Hat Enterprise Linux	8	ppc64le	containernetworking-plugins-debugsource	1:1.4.0-10.rhaos4.16.el8	containernetworking-plugins-debugsource-1:1.4.0-10.rhaos4.16.el8.ppc64le.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2025-68121
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
go	www.go.dev/cl/737700
go	www.go.dev/issue/77217
groups	www.groups.google.com/g/golang-announce/c/K09ubi9FQFk
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121
pkg	www.pkg.go.dev/vuln/GO-2026-4337
cve	www.cve.org/CVERecord

27 Aug 2026 08:00Current

7High risk

Vulners AI Score7

CVSS 3.19.1 - 10

EPSS0.00765

SSVC

crypto/tls session resumption certificate validation auth bypass TLS handshake