Read the docs
TI-2026-56322 Aliases CVE-2026-81665GHSA-vj89-2c25-485x

Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly

Priority LOW 35CWE-122Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 39 fixed, 2 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-122 and the CVSS impact.

Summary

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast protocol messages to the cluster could cause a heap buffer overflow with attacker-controlled data. This can crash the Corosync daemon, causing a denial of service to the entire cluster, and may potentially allow further exploitation given sufficient heap-corruption control.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00416 36th percentileScored 2026-11-07
Fix Partial Red Hat: 11 advisoriesRed Hat: 39 fixed, 2 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Enterprise Linux 10—3.1.10-1.el10_2.2Patch availableCNA
Red HatRed Hat Enterprise Linux 10.0 Extended Update Support—3.1.9-1.el10_0.3Patch availableCNA
Red HatRed Hat Enterprise Linux 7 Extended Lifecycle Support—2.4.5-7.el7_9.4Patch availableCNA
Red HatRed Hat Enterprise Linux 8—3.1.8-1.el8_10.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support—3.1.0-3.el8_4.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On—3.1.0-3.el8_4.3Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support—3.1.5-2.el8_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On—3.1.5-2.el8_6.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Telecommunications Update Service—3.1.7-1.el8_8.2Patch availableCNA
Red HatRed Hat Enterprise Linux 8.8 Update Services for SAP Solutions—3.1.7-1.el8_8.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9—3.1.10-1.el9_8.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.2 Update Services for SAP Solutions—3.1.7-1.el9_2.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.4 Update Services for SAP Solutions—3.1.8-1.el9_4.2Patch availableCNA
Red HatRed Hat Enterprise Linux 9.6 Extended Update Support—3.1.9-2.el9_6.2Patch availableCNA
Red HatRed Hat OpenShift Container Platform 4——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 4——Not affectedCNA
Red HatRed Hat OpenShift Container Platform 5——No fix listedCNA
Red HatRed Hat OpenShift Container Platform 5——Not affectedCNA
  • Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in 3.1.10-1.el10_2.2 Patch available CNA
  • Red Hat Enterprise Linux 10.0 Extended Update Support VendorRed Hat Affected — Fixed in 3.1.9-1.el10_0.3 Patch available CNA
  • Red Hat Enterprise Linux 7 Extended Lifecycle Support VendorRed Hat Affected — Fixed in 2.4.5-7.el7_9.4 Patch available CNA
  • Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 3.1.8-1.el8_10.2 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 3.1.0-3.el8_4.3 Patch available CNA
  • Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 3.1.0-3.el8_4.3 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support VendorRed Hat Affected — Fixed in 3.1.5-2.el8_6.2 Patch available CNA
  • Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On VendorRed Hat Affected — Fixed in 3.1.5-2.el8_6.2 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Telecommunications Update Service VendorRed Hat Affected — Fixed in 3.1.7-1.el8_8.2 Patch available CNA
  • Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.7-1.el8_8.2 Patch available CNA
  • Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 3.1.10-1.el9_8.2 Patch available CNA
  • Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.7-1.el9_2.2 Patch available CNA
  • Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions VendorRed Hat Affected — Fixed in 3.1.8-1.el9_4.2 Patch available CNA
  • Red Hat Enterprise Linux 9.6 Extended Update Support VendorRed Hat Affected — Fixed in 3.1.9-2.el9_6.2 Patch available CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — Not affected CNA
  • Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — No fix listed CNA
  • Red Hat OpenShift Container Platform 5 VendorRed Hat Affected — Fixed in — Not affected CNA

CPE names CNA · 36

CPEVersionsRoleVendor
cpe:/o:redhat:enterprise_linux:10.210.2—Red Hat
cpe:/o:redhat:enterprise_linux_eus:10.010.0—Red Hat
cpe:/o:redhat:enterprise_linux:7::server7—Red Hat
cpe:/a:redhat:enterprise_linux:8::appstream8—Red Hat
cpe:/a:redhat:enterprise_linux:8::crb8—Red Hat
cpe:/a:redhat:enterprise_linux:8::highavailability8—Red Hat
cpe:/a:redhat:enterprise_linux:8::resilientstorage8—Red Hat
cpe:/a:redhat:rhel_aus:8.4::appstream8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.4::highavailability8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream8.4—Red Hat
  • cpe:/o:redhat:enterprise_linux:10.2 Versions 10.2 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux_eus:10.0 Versions 10.0 — ·Red Hat
  • cpe:/o:redhat:enterprise_linux:7::server Versions 7 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::highavailability Versions 8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:8::resilientstorage Versions 8 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::appstream Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.4::highavailability Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::appstream Versions 8.4 — ·Red Hat
Show 26 more CPE
CPEVersionsRoleVendor
cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability8.4—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.4::resilientstorage8.4—Red Hat
cpe:/a:redhat:rhel_aus:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::appstream8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::highavailability8.6—Red Hat
cpe:/a:redhat:rhel_eus_long_life:8.6::resilientstorage8.6—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_e4s:8.8::highavailability8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::appstream8.8—Red Hat
cpe:/a:redhat:rhel_tus:8.8::highavailability8.8—Red Hat
cpe:/a:redhat:enterprise_linux:9::appstream9—Red Hat
cpe:/a:redhat:enterprise_linux:9::crb9—Red Hat
cpe:/a:redhat:enterprise_linux:9::highavailability9—Red Hat
cpe:/a:redhat:enterprise_linux:9::resilientstorage9—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::appstream9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::highavailability9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.2::resilientstorage9.2—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::appstream9.4—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::highavailability9.4—Red Hat
cpe:/a:redhat:rhel_e4s:9.4::resilientstorage9.4—Red Hat
cpe:/a:redhat:rhel_eus:9.6::appstream9.6—Red Hat
cpe:/a:redhat:rhel_eus:9.6::crb9.6—Red Hat
cpe:/a:redhat:rhel_eus:9.6::highavailability9.6—Red Hat
cpe:/a:redhat:rhel_eus:9.6::resilientstorage9.6—Red Hat
cpe:/a:redhat:openshift:44—Red Hat
cpe:/a:redhat:openshift:55—Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.4::resilientstorage Versions 8.4 — ·Red Hat
  • cpe:/a:redhat:rhel_aus:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::appstream Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::highavailability Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus_long_life:8.6::resilientstorage Versions 8.6 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:8.8::highavailability Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::appstream Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:rhel_tus:8.8::highavailability Versions 8.8 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::crb Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::highavailability Versions 9 — ·Red Hat
  • cpe:/a:redhat:enterprise_linux:9::resilientstorage Versions 9 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::appstream Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::highavailability Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.2::resilientstorage Versions 9.2 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::appstream Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::highavailability Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_e4s:9.4::resilientstorage Versions 9.4 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::appstream Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::crb Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::highavailability Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:rhel_eus:9.6::resilientstorage Versions 9.6 — ·Red Hat
  • cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
  • cpe:/a:redhat:openshift:5 Versions 5 — ·Red Hat

Remediation

Red Hat 11 advisories

  • RHSA-2026:69277 Released 2026-09-21 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 8) corosync-3.1.8-1.el8_10.2, corosynclib-3.1.8-1.el8_10.2
    • Red Hat Enterprise Linux CRB (v. 8) corosync-vqsim-3.1.8-1.el8_10.2
    • Red Hat Enterprise Linux HighAvailability (v. 8) corosync-3.1.8-1.el8_10.2, corosynclib-devel-3.1.8-1.el8_10.2, spausedd-3.1.8-1.el8_10.2
    • Red Hat Enterprise Linux ResilientStorage (v. 8) corosync-3.1.8-1.el8_10.2, corosynclib-devel-3.1.8-1.el8_10.2, spausedd-3.1.8-1.el8_10.2
  • RHSA-2026:69279 Released 2026-09-21 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.6) corosync-3.1.5-2.el8_6.2, corosynclib-3.1.5-2.el8_6.2
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) corosync-3.1.5-2.el8_6.2, corosynclib-3.1.5-2.el8_6.2
    • Red Hat Enterprise Linux High Availability EUS EXTENSION (v.8.6) corosync-3.1.5-2.el8_6.2, corosynclib-devel-3.1.5-2.el8_6.2, spausedd-3.1.5-2.el8_6.2
    • Red Hat Enterprise Linux Resilient Storage EUS EXTENSION (v.8.6) corosync-3.1.5-2.el8_6.2, corosynclib-devel-3.1.5-2.el8_6.2, spausedd-3.1.5-2.el8_6.2
  • RHSA-2026:69280 Released 2026-09-21 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream AUS (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-3.1.0-3.el8_4.3
    • Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-3.1.0-3.el8_4.3
    • Red Hat Enterprise Linux High Availability AUS (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
    • Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
    • Red Hat Enterprise Linux ResilientStorage EUS EXTENSION (v.8.4) corosync-3.1.0-3.el8_4.3, corosynclib-devel-3.1.0-3.el8_4.3, spausedd-3.1.0-3.el8_4.3
Show 8 more Red Hat advisories
  • RHSA-2026:69278 Released 2026-09-21 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.8.8) corosync-3.1.7-1.el8_8.2, corosynclib-3.1.7-1.el8_8.2
    • Red Hat Enterprise Linux AppStream TUS (v.8.8) corosync-3.1.7-1.el8_8.2, corosynclib-3.1.7-1.el8_8.2
    • Red Hat Enterprise Linux High Availability E4S (v.8.8) corosync-3.1.7-1.el8_8.2, corosynclib-devel-3.1.7-1.el8_8.2, spausedd-3.1.7-1.el8_8.2
    • Red Hat Enterprise Linux High Availability TUS (v.8.8) corosync-3.1.7-1.el8_8.2, corosynclib-devel-3.1.7-1.el8_8.2, spausedd-3.1.7-1.el8_8.2
  • RHSA-2026:67880 Released 2026-09-18 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) corosync-3.1.7-1.el9_2.2, corosynclib-3.1.7-1.el9_2.2
    • Red Hat Enterprise Linux High Availability E4S (v.9.2) corosync-3.1.7-1.el9_2.2, corosynclib-3.1.7-1.el9_2.2, corosynclib-devel-3.1.7-1.el9_2.2
    • Red Hat Enterprise Linux Resilient Storage E4S (v.9.2) corosync-3.1.7-1.el9_2.2, corosynclib-3.1.7-1.el9_2.2, corosynclib-devel-3.1.7-1.el9_2.2
  • RHSA-2026:68574 Released 2026-09-17 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS) corosync-2.4.5-7.el7_9.4, corosync-qdevice-2.4.5-7.el7_9.4, corosync-qnetd-2.4.5-7.el7_9.4 +3
    • Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS) corosync-2.4.5-7.el7_9.4, corosync-qdevice-2.4.5-7.el7_9.4, corosync-qnetd-2.4.5-7.el7_9.4 +3
  • RHSA-2026:67879 Released 2026-09-16 · Red Hat rating Important
    corosync security update
    • Red Hat CodeReady Linux Builder EUS (v.9.6) corosync-vqsim-3.1.9-2.el9_6.2
    • Red Hat Enterprise Linux AppStream EUS (v.9.6) corosync-3.1.9-2.el9_6.2, corosynclib-3.1.9-2.el9_6.2
    • Red Hat Enterprise Linux High Availability EUS (v.9.6) corosync-3.1.9-2.el9_6.2, corosynclib-devel-3.1.9-2.el9_6.2
    • Red Hat Enterprise Linux Resilient Storage EUS (v.9.6) corosync-3.1.9-2.el9_6.2, corosynclib-devel-3.1.9-2.el9_6.2
  • RHSA-2026:67873 Released 2026-09-16 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 9) corosync-3.1.10-1.el9_8.2, corosynclib-3.1.10-1.el9_8.2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 9) corosync-vqsim-3.1.10-1.el9_8.2
    • Red Hat Enterprise Linux High Availability (v. 9) corosync-3.1.10-1.el9_8.2, corosynclib-devel-3.1.10-1.el9_8.2
    • Red Hat Enterprise Linux Resilient Storage (v. 9) corosync-3.1.10-1.el9_8.2, corosynclib-devel-3.1.10-1.el9_8.2
  • RHSA-2026:67881 Released 2026-09-16 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream EUS (v. 10.0) corosync-3.1.9-1.el10_0.3, corosynclib-3.1.9-1.el10_0.3
    • Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0) corosync-vqsim-3.1.9-1.el10_0.3
    • Red Hat Enterprise Linux High Availability EUS (v. 10.0) corosync-3.1.9-1.el10_0.3, corosynclib-devel-3.1.9-1.el10_0.3
  • RHSA-2026:67872 Released 2026-09-16 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream (v. 10) corosync-3.1.10-1.el10_2.2, corosynclib-3.1.10-1.el10_2.2
    • Red Hat Enterprise Linux CodeReady Linux Builder (v. 10) corosync-vqsim-3.1.10-1.el10_2.2
    • Red Hat Enterprise Linux High Availability (v. 10) corosync-3.1.10-1.el10_2.2, corosynclib-devel-3.1.10-1.el10_2.2
  • RHSA-2026:67878 Released 2026-09-16 · Red Hat rating Important
    corosync security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.4) corosync-3.1.8-1.el9_4.2, corosynclib-3.1.8-1.el9_4.2
    • Red Hat Enterprise Linux High Availability E4S (v.9.4) corosync-3.1.8-1.el9_4.2, corosynclib-3.1.8-1.el9_4.2, corosynclib-devel-3.1.8-1.el9_4.2
    • Red Hat Enterprise Linux Resilient Storage E4S (v.9.4) corosync-3.1.8-1.el9_4.2, corosynclib-3.1.8-1.el9_4.2, corosynclib-devel-3.1.8-1.el9_4.2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift Container Platform 4AffectedNo fix yet
Red Hat OpenShift Container Platform 5AffectedNo fix yet
Red Hat CodeReady Linux Builder EUS (v.9.6)Fixed RHSA-2026:67879
Red Hat Enterprise Linux AppStream (v. 10)Fixed RHSA-2026:67872
Red Hat Enterprise Linux AppStream (v. 8)Fixed RHSA-2026:69277
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2026:67873
Red Hat Enterprise Linux AppStream AUS (v.8.4)Fixed RHSA-2026:69280
Red Hat Enterprise Linux AppStream AUS (v.8.6)Fixed RHSA-2026:69279
Red Hat Enterprise Linux AppStream E4S (v.8.8)Fixed RHSA-2026:69278
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2026:67880
Red Hat Enterprise Linux AppStream E4S (v.9.4)Fixed RHSA-2026:67878
Red Hat Enterprise Linux AppStream EUS (v. 10.0)Fixed RHSA-2026:67881
Red Hat Enterprise Linux AppStream EUS (v.9.6)Fixed RHSA-2026:67879
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4)Fixed RHSA-2026:69280
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6)Fixed RHSA-2026:69279
Red Hat Enterprise Linux AppStream TUS (v.8.8)Fixed RHSA-2026:69278
Red Hat Enterprise Linux CRB (v. 8)Fixed RHSA-2026:69277
Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)Fixed RHSA-2026:67872
Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)Fixed RHSA-2026:67873
Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)Fixed RHSA-2026:67881
Red Hat Enterprise Linux High Availability (v. 10)Fixed RHSA-2026:67872
Red Hat Enterprise Linux High Availability (v. 9)Fixed RHSA-2026:67873
Red Hat Enterprise Linux High Availability AUS (v.8.4)Fixed RHSA-2026:69280
Red Hat Enterprise Linux High Availability E4S (v.8.8)Fixed RHSA-2026:69278
Red Hat Enterprise Linux High Availability E4S (v.9.2)Fixed RHSA-2026:67880
Red Hat Enterprise Linux High Availability E4S (v.9.4)Fixed RHSA-2026:67878
Red Hat Enterprise Linux High Availability EUS (v. 10.0)Fixed RHSA-2026:67881
Red Hat Enterprise Linux High Availability EUS (v.9.6)Fixed RHSA-2026:67879
Red Hat Enterprise Linux High Availability EUS EXTENSION (v.8.6)Fixed RHSA-2026:69279
Red Hat Enterprise Linux High Availability TUS (v.8.8)Fixed RHSA-2026:69278
Red Hat Enterprise Linux HighAvailability (v. 8)Fixed RHSA-2026:69277
Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)Fixed RHSA-2026:69280
Red Hat Enterprise Linux Resilient Storage (v. 9)Fixed RHSA-2026:67873
Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)Fixed RHSA-2026:67880
Red Hat Enterprise Linux Resilient Storage E4S (v.9.4)Fixed RHSA-2026:67878
Red Hat Enterprise Linux Resilient Storage EUS (v.9.6)Fixed RHSA-2026:67879
Red Hat Enterprise Linux Resilient Storage EUS EXTENSION (v.8.6)Fixed RHSA-2026:69279
Red Hat Enterprise Linux ResilientStorage (v. 8)Fixed RHSA-2026:69277
Red Hat Enterprise Linux ResilientStorage EUS EXTENSION (v.8.4)Fixed RHSA-2026:69280
Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)Fixed RHSA-2026:68574
Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)Fixed RHSA-2026:68574
Not affected: 2 products
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Container Platform 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-81665
  2. 2026-10-03 Alias added: GHSA-vj89-2c25-485x
  3. 2026-10-21 Affected versions changed · Red Hat
  4. 2026-10-21 Affected versions changed · CNA
  5. 2026-10-21 Affected versions changed · CNA
  6. 2026-10-22 Affected versions changed · Red Hat
  7. 2026-11-02 Affected versions changed · CNA
  8. 2026-11-02 Affected versions changed · Red Hat

References

Advisory 11

Other 2

  • TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
  • TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
  • TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
See all 7413 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences