CVE-2026-35091 | BDVDB-2026-324262 Detail
Red HatRed Hat Enterprise Linux 10
Description#
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-253 Incorrect Check of Function Return Value
References#
- https://access.redhat.com/errata/RHSA-2026:13644
- https://access.redhat.com/errata/RHSA-2026:13657
- https://access.redhat.com/errata/RHSA-2026:13673
- https://access.redhat.com/errata/RHSA-2026:14205
- https://access.redhat.com/errata/RHSA-2026:14210
- https://access.redhat.com/errata/RHSA-2026:14211
- https://access.redhat.com/errata/RHSA-2026:14212
- https://access.redhat.com/errata/RHSA-2026:14213
- https://access.redhat.com/errata/RHSA-2026:14214
- https://access.redhat.com/errata/RHSA-2026:14215
- https://access.redhat.com/errata/RHSA-2026:14216
- https://access.redhat.com/errata/RHSA-2026:19043
- https://access.redhat.com/errata/RHSA-2026:19200
- https://access.redhat.com/errata/RHSA-2026:20916
- https://access.redhat.com/security/cve/CVE-2026-35091
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.