Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh

...

CVE-2026-78662

A vulnerability exists where a channel registered in the mux's chanList was not usable until established, allowing a malicious peer to flood the channel's incomingRequests and deadlock the entire connection. The fix introduces an atomic established state ; until set, the handlePacket function dro...