CVE-2026-35189

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>linux-c7-openssl-devel</name>
	<range><lt>1.0.2zs</lt></range>
      </package>
      <package>
	<name>openssl-unsafe</name>
	<range><lt>1.0.2zs</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>Issue summary: A certificate with many nameRelativeToCRLIssuer
	CRL
distribution points causes disproportionate heap growth when
	OpenSSL caches
X.509 extensions.

Impact summary: Receiving a crafted
	certificate from a malicious peer can lead
to significant memory
	pressure and possible Denial of Service in clients or
in servers that
	solicit client certificates.

CWE: CWE-770: Allocation of Resources
	Without Limits or Throttling

Description: A certificate or a set of
	certificates that fits under the limit for
size of certificates
	accepted from the peer (~100 KiB) can result in allocation
of several
	hundred MiB of resident memory on the receiving side
during a normal
	TLS handshake.  This may be enough to crash the client or
server, if
	multiple concurrent connections lead to similarly large
	memory
allocations.

The fix postpones processing of the CRL
	distribution points extensions in
certificates to the time when the
	processed value is required for CRL processing.
This avoids keeping
	large memory allocations for a long time when such
certificates are
	received.

FIPS impact: no
The affected code is outside the FIPS
	module boundary.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2026-35189</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2026-35189</url>
    </references>
    <dates>
      <discovery>2026-09-29</discovery>
      <entry>2026-10-25</entry>
    </dates>
  </vuln>