What is CVE-2026-41898?

CVE-2026-41898 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. rust-openssl: Unchecked callback-returned length in PSK and cookie generate trampolines can cause OpenSSL to leak adjacent memory to the network peer

Which CVE IDs does CVE-2026-41898 cover?

CVE-2026-41898 covers the following CVE IDs: CVE-2026-41898. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2026-41898?

CVE-2026-41898 affects 4 products, including: azl3 clamav 1.5.2-1 on Azure Linux 3.0; azl3 rpm-ostree 2024.4-8 on Azure Linux 3.0; azl3 rust 1.75.0-27 on Azure Linux 3.0; azl3 rust 1.90.0-6 on Azure Linux 3.0.