CVE-2026-68956

🗓️ 22 Sep 2026 00:00:00Reported by ubuntu.comType

Allocation of Resources Without Limits or Throttling vulnerability inErlang/OTP ssh allows an authenticated remote attacker to exhaust nodememory by repeatedly opening session channels that are never assigned ahandler.The "session" clause of ssh_c...

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2026-68956	22 Sep 202608:49	–	cve
Cvelist	CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels	22 Sep 202608:49	–	cvelist
EUVD	EUVD-2026-84339	22 Sep 202608:49	–	euvd
NVD	CVE-2026-68956	22 Sep 202609:17	–	nvd
OSV	EEF-CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels	22 Sep 202608:49	–	osv
OSV	UBUNTU-CVE-2026-68956	22 Sep 202600:00	–	osv
Vulnrichment	CVE-2026-68956 SSH daemon allocates unbounded idle session channels, bypassing max_channels	22 Sep 202608:49	–	vulnrichment

OS	OS Version	Architecture	Package	Filename
Ubuntu	14.04	all	erlang	erlang_0_all.deb
Ubuntu	16.04	all	erlang	erlang_0_all.deb
Ubuntu	18.04	all	erlang	erlang_0_all.deb
Ubuntu	20.04	all	erlang	erlang_0_all.deb
Ubuntu	22.04	all	erlang	erlang_0_all.deb
Ubuntu	24.04	all	erlang	erlang_0_all.deb
Ubuntu	26.04	all	erlang	erlang_0_all.deb

Source	Link
cve	www.cve.org/CVERecord
cna	www.cna.erlef.org/cves/CVE-2026-68956.html
github	www.github.com/erlang/otp/commit/79c2d2be17d902c5f53969b5806b725efda831be
github	www.github.com/erlang/otp/commit/84df3d4d0278e21a36a453bfee94799f0df67c2a
github	www.github.com/erlang/otp/commit/e18100975f0e5a8d59d02de00df12247a91b443b
github	www.github.com/erlang/otp/commit/e2bbad0107bba41491a4d549686fd023db8740da
github	www.github.com/erlang/otp/security/advisories/GHSA-qhcm-px9c-rvfh
osv	www.osv.dev/vulnerability/EEF-CVE-2026-68956
erlang	www.erlang.org/doc/system/versions.html

22 Sep 2026 17:35Current

CVSS 47.1

SSVC