CVE-2026-59998

Меры по смягчению последствий

To mitigate this issue, avoid using GSSAPI authentication for sshd when the server is integrated with a Windows Active Directory environment. If GSSAPI authentication is not strictly required, it can be disabled by setting GSSAPIAuthentication no in the /etc/ssh/sshd_config file. After modifying the configuration, the sshd service must be restarted for the changes to take effect. Note that restarting the sshd service will terminate all active SSH sessions.

Alternatively, if GSSAPI authentication is necessary in such an environment, ensure that the network path between the client and the sshd server, and to the Active Directory, is secured and trusted to prevent man-in-the-middle attacks.