CVE-2026-10649: Pacemaker: pacemaker: denial of service via integer overflow in remote message decompression

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-16 · updated 2026-08-21
Weakness: CWE-190

Description

A flaw was found in Pacemaker. An unauthenticated remote attacker can exploit an integer overflow vulnerability in the remote message decompression process. By sending a specially crafted compressed remote message before authentication, an attacker can cause memory corruption, leading to a denial of service (DoS) in the CIB remote listener. This can result in the affected service crashing.

Affected products

Red Hat Enterprise Linux 10: all versions — fixed in 0:3.0.1-5.el10_2.1
Red Hat Enterprise Linux 10.0 Extended Update Support: all versions — fixed in 0:3.0.0-5.3.el10_0
Red Hat Enterprise Linux 7 Extended Lifecycle Support: all versions — fixed in 0:1.1.23-1.el7_9.2
Red Hat Enterprise Linux 8: all versions — fixed in 0:2.1.7-5.6.el8_10
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: all versions — fixed in 0:2.0.5-9.el8_4.12
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: all versions — fixed in 0:2.0.5-9.el8_4.12
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: all versions — fixed in 0:2.1.2-4.el8_6.11
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: all versions — fixed in 0:2.1.2-4.el8_6.11
Red Hat Enterprise Linux 8.8 Telecommunications Update Service: all versions — fixed in 0:2.1.5-9.7.el8_8
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: all versions — fixed in 0:2.1.5-9.7.el8_8
Red Hat Enterprise Linux 9: all versions — fixed in 0:2.1.10-3.el9_8
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: all versions — fixed in 0:2.1.5-9.el9_2.7
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions: all versions — fixed in 0:2.1.7-5.5.el9_4
Red Hat Enterprise Linux 9.6 Extended Update Support: all versions — fixed in 0:2.1.9-1.4.el9_6

How to fix

Upgrade to a fixed version: Red Hat Enterprise Linux 10 0:3.0.1-5.el10_2.1; Red Hat Enterprise Linux 10.0 Extended Update Support 0:3.0.0-5.3.el10_0; Red Hat Enterprise Linux 7 Extended Lifecycle Support 0:1.1.23-1.el7_9.2; Red Hat Enterprise Linux 8 0:2.1.7-5.6.el8_10; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 0:2.0.5-9.el8_4.12; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On 0:2.0.5-9.el8_4.12; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 0:2.1.2-4.el8_6.11; Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On 0:2.1.2-4.el8_6.11; Red Hat Enterprise Linux 8.8 Telecommunications Update Service 0:2.1.5-9.7.el8_8; Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 0:2.1.5-9.7.el8_8; Red Hat Enterprise Linux 9 0:2.1.10-3.el9_8; Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 0:2.1.5-9.el9_2.7. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-10649 or the next vulnerability affects your stack