p PatchFirst

CVE-2026-116540

CVE-2026-116540 · netty-tcnative 2.0.66.Final before 2.0.84.Final Use-After-Free in Session Ticket Callback

This page contains facts from public vulnerability sources. Check the original advisory before updating.

netty-tcnative 2.0.66.Final before 2.0.84.Final built against OpenSSL 3.x contains a use-after-free vulnerability in ssl_tlsext_ticket_key_cb during session ticket key rotation. Remote clients performing TLS handshakes while setSessionTicketKeys0 frees the shared key array cause OpenSSL to read freed HMAC keys, crashing or corrupting ticket processing.

CVSS 8.2 · High · EPSS 0.5% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • netty-tcnative

    Versions
    • ≥ 2.0.66.Final, < 2.0.84.Final: Affected (custom)

    Update to 2.0.84.Final

  • netty-tcnative Debian:12

    Versions
    • 2.0.28-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Debian:13

    Versions
    • 2.0.28-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Debian:14

    Versions
    • 2.0.28-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:16.04:LTS

    Versions
    • 1.1.33.Fork6-1
    • 1.1.33.Fork10-2
    • 1.1.33.Fork14-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:18.04:LTS

    Versions
    • 1.1.33.Fork26-1
    • 1.1.33.Fork26-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:20.04:LTS

    Versions
    • 2.0.20-1
    • 2.0.28-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:22.04:LTS

    Versions
    • 2.0.28-1
    • 2.0.28-1build1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:24.04:LTS

    Versions
    • 2.0.28-1build1
    • 2.0.28-1build2
    • 2.0.28-1build3
    • 2.0.28-1build4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:26.10

    Versions
    • 2.0.28-1build5
    • 2.0.28-1build6
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • netty-tcnative Ubuntu:26.04:LTS

    Versions
    • 2.0.28-1build4
    • 2.0.28-1build5
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →