Read the docs
TI-2026-27292 Aliases CVE-2026-35092GHSA-g4g9-h6f9-v5x2

Corosync: corosync: denial of service via integer overflow in join message validation

Priority MEDIUM 41CWE-190Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-190 and the CVSS impact.

Summary

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01012 63rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 14 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10—3.1.9-2.el10_1.1Patch availableCNA
Red HatRed Hat Enterprise Linux 10—3.1.10-1.el10_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—3.1.9-1.el10_0.2Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—2.4.5-7.el7_9.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8—3.1.8-1.el8_10.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—3.1.0-3.el8_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—3.1.0-3.el8_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—3.1.5-2.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Telecommunications Update Service—3.1.5-2.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Update Services for SAP Solutions—3.1.5-2.el8_6.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—3.1.7-1.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—3.1.7-1.el8_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—3.1.9-2.el9_7.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9—3.1.10-1.el9_8.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.0 Update Services for SAP Solutions—3.1.5-3.el9_0.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—3.1.7-1.el9_2.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Extended Update Support—3.1.8-1.el9_4.1Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—3.1.9-2.el9_6.1Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.1.9-2.el10_1.1 Patch available CNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.1.10-1.el10_2.1 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 3.1.9-1.el10_0.2 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.4.5-7.el7_9.3 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 3.1.8-1.el8_10.1 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 3.1.0-3.el8_4.2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 3.1.0-3.el8_4.2 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 3.1.5-2.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Telecommunications Update Service VendorRed Hat Affected — Fixed in 3.1.5-2.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.5-2.el8_6.1 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 3.1.7-1.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.7-1.el8_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.1.9-2.el9_7.1 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.1.10-1.el9_8.1 Patch available CNA
  • Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.5-3.el9_0.1 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.7-1.el9_2.1 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 3.1.8-1.el9_4.1 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 3.1.9-2.el9_6.1 Patch available CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:corosync:corosync:-:*:*:*:*:*:*:*not specified by NVDVulnerableCorosync
cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:*10.0VulnerableRed Hat
  • cpe:2.3:a:corosync:corosync:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Corosync
  • cpe:2.3:a:redhat:openshift:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Red Hat

Remediation

Red Hat 14 advisories

  • RHSA-2026:20916 Released 2026-05-26 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) corosync-2.4.5-7.el7_9.3, corosync-qdevice-2.4.5-7.el7_9.3, corosync-qnetd-2.4.5-7.el7_9.3 +3
    • Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) corosync-2.4.5-7.el7_9.3, corosync-qdevice-2.4.5-7.el7_9.3, corosync-qnetd-2.4.5-7.el7_9.3 +3
  • RHSA-2026:19200 Released 2026-05-19 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-3.1.10-1.el9_8.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) corosync-vqsim-3.1.10-1.el9_8.1
    • Red Hat Enterprise Linux High Availability (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-devel-3.1.10-1.el9_8.1
    • Red Hat Enterprise Linux Resilient Storage (v. 9) corosync-3.1.10-1.el9_8.1, corosynclib-devel-3.1.10-1.el9_8.1
  • RHSA-2026:19043 Released 2026-05-19 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 10) corosync-3.1.10-1.el10_2.1, corosynclib-3.1.10-1.el10_2.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) corosync-vqsim-3.1.10-1.el10_2.1
    • Red Hat Enterprise Linux High Availability (v. 10) corosync-3.1.10-1.el10_2.1, corosynclib-devel-3.1.10-1.el10_2.1
Show 11 more Red Hat advisories
  • RHSA-2026:14213 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) corosync-vqsim-3.1.9-2.el9_6.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) corosync-3.1.9-2.el9_6.1, corosynclib-3.1.9-2.el9_6.1
    • Red Hat Enterprise Linux High Availability EUS (v.9.6) corosync-3.1.9-2.el9_6.1, corosynclib-devel-3.1.9-2.el9_6.1
    • Red Hat Enterprise Linux Resilient Storage EUS (v.9.6) corosync-3.1.9-2.el9_6.1, corosynclib-devel-3.1.9-2.el9_6.1
  • RHSA-2026:14212 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat CodeReady Linux Builder EUS (v.9.4) corosync-vqsim-3.1.8-1.el9_4.1, corosynclib-3.1.8-1.el9_4.1
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) corosync-3.1.8-1.el9_4.1, corosynclib-3.1.8-1.el9_4.1
    • Red Hat Enterprise Linux High Availability EUS (v.9.4) corosync-3.1.8-1.el9_4.1, corosynclib-3.1.8-1.el9_4.1, corosynclib-devel-3.1.8-1.el9_4.1
    • Red Hat Enterprise Linux Resilient Storage EUS (v.9.4) corosync-3.1.8-1.el9_4.1, corosynclib-3.1.8-1.el9_4.1, corosynclib-devel-3.1.8-1.el9_4.1
  • RHSA-2026:14216 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) corosync-3.1.7-1.el8_8.1, corosynclib-3.1.7-1.el8_8.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) corosync-3.1.7-1.el8_8.1, corosynclib-3.1.7-1.el8_8.1
    • Red Hat Enterprise Linux High Availability E4S (v.8.8) corosync-3.1.7-1.el8_8.1, corosynclib-devel-3.1.7-1.el8_8.1, spausedd-3.1.7-1.el8_8.1
    • Red Hat Enterprise Linux High Availability TUS (v.8.8) corosync-3.1.7-1.el8_8.1, corosynclib-devel-3.1.7-1.el8_8.1, spausedd-3.1.7-1.el8_8.1
  • RHSA-2026:14214 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) corosync-3.1.5-2.el8_6.1, corosynclib-3.1.5-2.el8_6.1
    • Red Hat Enterprise Linux AppStream E4S (v.8.6) corosync-3.1.5-2.el8_6.1, corosynclib-3.1.5-2.el8_6.1
    • Red Hat Enterprise Linux AppStream TUS (v.8.6) corosync-3.1.5-2.el8_6.1, corosynclib-3.1.5-2.el8_6.1
    • Red Hat Enterprise Linux High Availability E4S (v.8.6) corosync-3.1.5-2.el8_6.1, corosynclib-devel-3.1.5-2.el8_6.1, spausedd-3.1.5-2.el8_6.1
    • Red Hat Enterprise Linux High Availability TUS (v.8.6) corosync-3.1.5-2.el8_6.1, corosynclib-devel-3.1.5-2.el8_6.1, spausedd-3.1.5-2.el8_6.1
  • RHSA-2026:14210 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) corosync-3.1.7-1.el9_2.1, corosynclib-3.1.7-1.el9_2.1
    • Red Hat Enterprise Linux High Availability E4S (v.9.2) corosync-3.1.7-1.el9_2.1, corosynclib-3.1.7-1.el9_2.1, corosynclib-devel-3.1.7-1.el9_2.1
    • Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) corosync-3.1.7-1.el9_2.1, corosynclib-3.1.7-1.el9_2.1, corosynclib-devel-3.1.7-1.el9_2.1
  • RHSA-2026:14215 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) corosync-3.1.0-3.el8_4.2, corosynclib-3.1.0-3.el8_4.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.2, corosynclib-3.1.0-3.el8_4.2
    • Red Hat Enterprise Linux High Availability AUS (v.8.4) corosync-3.1.0-3.el8_4.2, corosynclib-devel-3.1.0-3.el8_4.2, spausedd-3.1.0-3.el8_4.2
    • Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.2, corosynclib-devel-3.1.0-3.el8_4.2, spausedd-3.1.0-3.el8_4.2
  • RHSA-2026:14211 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) corosync-3.1.5-3.el9_0.1, corosynclib-3.1.5-3.el9_0.1
    • Red Hat Enterprise Linux High Availability E4S (v.9.0) corosync-3.1.5-3.el9_0.1, corosynclib-3.1.5-3.el9_0.1, corosynclib-devel-3.1.5-3.el9_0.1
    • Red Hat Enterprise Linux ResilientStorage E4S (v.9.0) corosync-3.1.5-3.el9_0.1, corosynclib-3.1.5-3.el9_0.1, corosynclib-devel-3.1.5-3.el9_0.1
  • RHSA-2026:14205 Released 2026-05-06 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) corosync-3.1.9-1.el10_0.2, corosynclib-3.1.9-1.el10_0.2
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) corosync-vqsim-3.1.9-1.el10_0.2
    • Red Hat Enterprise Linux High Availability EUS (v. 10.0) corosync-3.1.9-1.el10_0.2, corosynclib-devel-3.1.9-1.el10_0.2
  • RHSA-2026:13673 Released 2026-05-05 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 9) corosync-3.1.9-2.el9_7.1, corosynclib-3.1.9-2.el9_7.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) corosync-vqsim-3.1.9-2.el9_7.1
    • Red Hat Enterprise Linux High Availability (v. 9) corosync-3.1.9-2.el9_7.1, corosynclib-devel-3.1.9-2.el9_7.1
    • Red Hat Enterprise Linux Resilient Storage (v. 9) corosync-3.1.9-2.el9_7.1, corosynclib-devel-3.1.9-2.el9_7.1
  • RHSA-2026:13657 Released 2026-05-05 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 8) corosync-3.1.8-1.el8_10.1, corosynclib-3.1.8-1.el8_10.1
    • Red Hat Enterprise Linux CRB (v. 8) corosync-vqsim-3.1.8-1.el8_10.1
    • Red Hat Enterprise Linux HighAvailability (v. 8) corosync-3.1.8-1.el8_10.1, corosynclib-devel-3.1.8-1.el8_10.1, spausedd-3.1.8-1.el8_10.1
    • Red Hat Enterprise Linux ResilientStorage (v. 8) corosync-3.1.8-1.el8_10.1, corosynclib-devel-3.1.8-1.el8_10.1, spausedd-3.1.8-1.el8_10.1
  • RHSA-2026:13644 Released 2026-05-05 · Red Hat rating Moderate
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 10) corosync-3.1.9-2.el10_1.1, corosynclib-3.1.9-2.el10_1.1
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) corosync-vqsim-3.1.9-2.el10_1.1
    • Red Hat Enterprise Linux High Availability (v. 10) corosync-3.1.9-2.el10_1.1, corosynclib-devel-3.1.9-2.el10_1.1

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:13644

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:13657

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
Show 12 more groups
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:13673

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14205

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14210

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14211

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14212

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14213

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14214

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14215

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:14216

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:19043

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:19200

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 15 more products — RHSA-2026:20916

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-27291 Corosync: corosync: denial of service and information disclosure via crafted udp packetPriority MEDIUM 43
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder EUS (v.9.4)Fixed RHSA-2026:14212
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:14213
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:13644, RHSA-2026:19043
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:13657
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:13673, RHSA-2026:19200
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:14215
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:14214
Red Hat Enterprise Linux AppStream E4S (v.8.6)Fixed RHSA-2026:14214
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:14216
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2026:14211
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:14210
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:14205
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2026:14212
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:14213
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:14215
Red Hat Enterprise Linux AppStream TUS (v.8.6)Fixed RHSA-2026:14214
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:14216
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:13657
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:13644, RHSA-2026:19043
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:13673, RHSA-2026:19200
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:14205
Red Hat Enterprise Linux High Availability (v. 10)Fixed RHSA-2026:13644, RHSA-2026:19043
Red Hat Enterprise Linux High Availability (v. 9)Fixed RHSA-2026:13673, RHSA-2026:19200
Red Hat Enterprise Linux High Availability AUS (v.8.4)Fixed RHSA-2026:14215
Red Hat Enterprise Linux High Availability E4S (v.8.6)Fixed RHSA-2026:14214
Red Hat Enterprise Linux High Availability E4S (v.8.8)Fixed RHSA-2026:14216
Red Hat Enterprise Linux High Availability E4S (v.9.0)Fixed RHSA-2026:14211
Red Hat Enterprise Linux High Availability E4S (v.9.2)Fixed RHSA-2026:14210
Red Hat Enterprise Linux High Availability EUS (v. 10.0)Fixed RHSA-2026:14205
Red Hat Enterprise Linux High Availability EUS (v.9.4)Fixed RHSA-2026:14212
Red Hat Enterprise Linux High Availability EUS (v.9.6)Fixed RHSA-2026:14213
Red Hat Enterprise Linux High Availability TUS (v.8.6)Fixed RHSA-2026:14214
Red Hat Enterprise Linux High Availability TUS (v.8.8)Fixed RHSA-2026:14216
Red Hat Enterprise Linux HighAvailability (v. 8)Fixed RHSA-2026:13657
Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)Fixed RHSA-2026:14215
Red Hat Enterprise Linux Resilient Storage (v. 9)Fixed RHSA-2026:13673, RHSA-2026:19200
Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)Fixed RHSA-2026:14210
Red Hat Enterprise Linux Resilient Storage EUS (v.9.4)Fixed RHSA-2026:14212
Red Hat Enterprise Linux Resilient Storage EUS (v.9.6)Fixed RHSA-2026:14213
Red Hat Enterprise Linux ResilientStorage (v. 8)Fixed RHSA-2026:13657
Red Hat Enterprise Linux ResilientStorage E4S (v.9.0)Fixed RHSA-2026:14211
Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)Fixed RHSA-2026:20916
Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)Fixed RHSA-2026:20916
Not affected: 1 product
  • Red Hat OpenShift Container Platform 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-35092
  2. 2026-10-03 Alias added: GHSA-g4g9-h6f9-v5x2

References

Exploit 1

Advisory 16

  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-10530 Code injection in [UNKNOWN] RichFaces KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05975 GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed… KEVCVSS 3.1CRITICAL 9.8
  • TI-2014-05157 GNU Bash through 4.3 processes trailing strings after function definitions in the values… KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-23530 Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf… KEVCVSS 3.1CRITICAL 9.3
  • TI-2021-17490 mod_proxy SSRF KEVCVSS 3.1CRITICAL 9.0
See all 1955 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences