Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Grafana may crash when processing many certificate policies
published 4 months ago
Summary
Grafana on AlmaLinux can become unresponsive if it validates a certificate chain with a large number of policy mappings. This happens because the built‑in certificate checking code is inefficient in that situation. Updating Grafana to the version built with Go 1.25.7 or later resolves the issue.
What to do
- Update almalinux grafana to version 10.2.6-15.el9_6.tuxcare.els11.
- Update almalinux grafana-selinux to version 10.2.6-15.el9_6.tuxcare.els11.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.6 | almalinux | grafana |
< 10.2.6-15.el9_6.tuxcare.els11 Fix: upgrade to 10.2.6-15.el9_6.tuxcare.els11
|
| TuxCare:AlmaLinux:9.6 | almalinux | grafana-selinux |
< 10.2.6-15.el9_6.tuxcare.els11 Fix: upgrade to 10.2.6-15.el9_6.tuxcare.els11
|
Original advisory text
grafana: Fix of CVE-2026-32281
- CVE-2026-32281: rebuild against golang >= 1.25.7-1.el9_6.tuxcare.els7 to fix
denial-of-service in crypto/x509 policy validation, which is unexpectedly
inefficient when a certificate chain contains a very large number of policy
mappings
denial-of-service in crypto/x509 policy validation, which is unexpectedly
inefficient when a certificate chain contains a very large number of policy
mappings
References
- https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1782215995.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281 Vendor Advisory
Timeline
Published23 Jun 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1782215995 · OSV
Track software like this
Free during beta