CVE-2026-40944

描述

### Summary The `trustedCertPool()` function in the TLS configuration only parses the first PEM block from CA certificate files. When a CA bundle contains multiple certificates (e.g., intermediate + root CA), only the first certificate is loaded. This silently breaks certificate chain validation for mTLS. ### Impact In deployments using mTLS with certificate chains (intermediate CA + root CA bundles), legitimate clients with properly chained certificates are rejected with `x509: certificate signed by unknown authority`. This degrades the security posture by making mTLS unusable with standard CA chain configurations, potentially forcing operators to disable client certificate verification. All versions using TLS with `trustedCaFile` configuration are affected. ### Details In `common/security/tls.go`, the `trustedCertPool()` method calls `pem.Decode()` only once, processing a single PEM block. The remaining bytes (containing additional certificates) are silently discarded. Additionally, the error return from `pem.Decode` is ignored, so a corrupted CA file results in an empty certificate pool without any error. ### Patches Fixed by iterating over all PEM blocks in the file, parsing each CERTIFICATE block, and returning an error if no valid certificates are found. ### Workarounds Use CA files containing only a single certificate (the direct issuer of client certificates, not a chain).

如何修補 CVE-2026-40944

要修補 CVE-2026-40944,請將受影響套件升級到下列已修補版本。

• —升級至 0.16.2 或更新版本

CVE-2026-40944 正在被利用嗎?

低 — EPSS 為 0.0%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 0.16.2

CVSS 分數

參考連結(3)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2026-40944
• PATCHgithub.com/oxia-db/oxia
• WEBgithub.com/oxia-db/oxia/security/advisories/GHSA-7jrq-q4pq-rhm6