Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Grafana-pcp may crash processing very large certificate lists
published 4 months ago
Summary
The Grafana-pcp component on AlmaLinux can become unresponsive if it has to check a certificate chain with an unusually large number of policy entries. This can cause a denial of service, meaning the service could stop working. Updating Grafana-pcp to the latest version that includes the fix resolves the issue.
What to do
- Update almalinux grafana-pcp to version 5.1.1-11.el9_6.tuxcare.els4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | grafana-pcp |
< 5.1.1-11.el9_6.tuxcare.els4 Fix: upgrade to 5.1.1-11.el9_6.tuxcare.els4
|
Original advisory text
grafana-pcp: Fix of CVE-2026-32281
- CVE-2026-32281: rebuild against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix
denial-of-service in crypto/x509 policy validation, which is unexpectedly
inefficient when a certificate chain contains a very large number of policy
mappings
denial-of-service in crypto/x509 policy validation, which is unexpectedly
inefficient when a certificate chain contains a very large number of policy
mappings
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782215293.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281 Vendor Advisory
Timeline
Published23 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1782215293 · OSV
Track software like this
Free during beta