What’s Vulnerable › Vulnerabilities
CVE-2026-35091: Corosync: corosync: denial of service and information disclosure via crafted udp packet
- Severity: high (CVSS 8.2 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-04-01 · updated 2026-10-26
- Weakness: CWE-253
Description
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
Affected products
- Corosync: all versions
- Red Hat Enterprise Linux: 7.0, 8.0, 9.0, 10.0
- Openshift: 4.0
References
- https://access.redhat.com/errata/RHSA-2026:13644
- https://access.redhat.com/errata/RHSA-2026:13657
- https://access.redhat.com/errata/RHSA-2026:13673
- https://access.redhat.com/errata/RHSA-2026:14205
- https://access.redhat.com/errata/RHSA-2026:14210
- https://access.redhat.com/errata/RHSA-2026:14211
- https://access.redhat.com/errata/RHSA-2026:14212
- https://access.redhat.com/errata/RHSA-2026:14213
- https://access.redhat.com/errata/RHSA-2026:14214
- https://access.redhat.com/errata/RHSA-2026:14215
- https://access.redhat.com/errata/RHSA-2026:14216
- https://access.redhat.com/errata/RHSA-2026:19043
Get alerted when CVE-2026-35091 or the next vulnerability affects your stack