Skip to content
Multiple Vulnerabilities in Go Cryptography Affecting Ubuntu Systems

Multiple Vulnerabilities in Go Cryptography Affecting Ubuntu Systems

First seen 18 Jun 2026, 21:23 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •June 19, 2026 at 21:23 UTC
  • •Multiple vulnerabilities in Go Cryptography affect several Ubuntu LTS versions.
  • •CVE-2026-39830 could lead to denial of service attacks.
  • •Immediate updates are recommended to mitigate the identified vulnerabilities.

On June 17, 2026, Ubuntu released USN-8447-1 addressing several vulnerabilities in Go Cryptography. These include CVE-2026-39830, which allows denial of service via improper handling of SSH global request responses, and CVE-2026-39831, which enables bypassing user presence verification for FIDO/U2F keys. The vulnerabilities affect various Ubuntu versions, including 20.04 LTS, 22.04 LTS, 24.04 LTS, and 26.04 LTS. Other vulnerabilities include CVE-2026-39832, CVE-2026-39833, CVE-2026-39834, and CVE-2026-42508, all published on May 22, 2026. Users are advised to update their systems to mitigate these risks. The issues could lead to significant security breaches if left unaddressed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 94d ago How this analysis works

Timeline

2026-05-22
CVE-2026-39830 published
A vulnerability in Go Cryptography allows denial of service via improper SSH handling.
Linuxsecurity
2026-05-22
CVE-2026-39831 published
A flaw in Go Cryptography allows bypassing user presence verification for FIDO/U2F keys.
Linuxsecurity
2026-05-22
CVE-2026-39832 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-22
CVE-2026-42508 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-22
CVE-2026-46595 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-22
CVE-2026-39834 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-05-22
CVE-2026-39833 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-06-17
USN-8447-1 released
Ubuntu released updates addressing multiple vulnerabilities in Go Cryptography.
Linuxsecurity
2026-06-18
USN-8447-2 released
Further updates provided for Go Cryptography vulnerabilities embedded in LXD.
Ubuntu

More articles in this cluster (4)

Following this threat?

Track Ubuntu and CVE-2026-39830 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (12)

1 / 3