Red Hat Enterprise Linux (corosync): Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 8.2
  CVE-2026-35091

  Corosync: corosync: denial of service and information disclosure via crafted udp packet

  A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Apr 1, 2026
• High 7.5
  CVE-2026-35092

  Corosync: corosync: denial of service via integer overflow in join message validation

  A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a deni…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 10 Linux Debian Ubuntu Azure Linux
  Apr 1, 2026

Revision history

1. 2026-08-09 #12

   Neue Updates von IBM aufgenommen

2. 2026-06-22 #11

   Neue Updates von Oracle Linux aufgenommen

3. 2026-05-31 #10

   Neue Updates von Debian aufgenommen

4. 2026-05-28 #9

   Neue Updates von Rocky Enterprise Software Foundation aufgenommen

5. 2026-05-26 #8

   Neue Updates von Red Hat aufgenommen

6. 2026-05-19 #7

   Neue Updates von Red Hat aufgenommen

7. 2026-05-11 #6

   Neue Updates von Oracle Linux aufgenommen

8. 2026-05-10 #5

   Neue Updates von Debian aufgenommen

9. 2026-05-07 #4

   Neue Updates von Oracle Linux aufgenommen

10. 2026-05-06 #3

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

11. 2026-05-05 #2

    Neue Updates von Red Hat und Rocky Enterprise Software Foundation aufgenommen

12. 2026-05-04 #1

    Initiale Fassung

References

• Red Hat Security Advisory RHSA-2026:13644 vom 2026-05-04
  https://access.redhat.com/errata/RHSA-2026:13644
• RedHat Customer Portal vom 2026-05-04
  https://access.redhat.com/security/cve/cve-2026-35091
• RedHat Customer Portal vom 2026-05-04
  https://access.redhat.com/security/cve/cve-2026-35092
• Red Hat Security Advisory RHSA-2026:13657 vom 2026-05-05
  https://access.redhat.com/errata/RHSA-2026:13657
• Rocky Linux Security Advisory RLSA-2026:13657 vom 2026-05-06
  https://errata.build.resf.org/RLSA-2026:13657
• Rocky Linux Security Advisory RLSA-2026:13673 vom 2026-05-06
  https://errata.build.resf.org/RLSA-2026:13673
• Red Hat Security Advisory RHSA-2026:14212 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14212
• Red Hat Security Advisory RHSA-2026:14216 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14216
• Red Hat Security Advisory RHSA-2026:14211 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14211
• Red Hat Security Advisory RHSA-2026:14215 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14215
• Red Hat Security Advisory RHSA-2026:14214 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14214
• Red Hat Security Advisory RHSA-2026:14205 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14205
• Rocky Linux Security Advisory RLSA-2026:13644 vom 2026-05-06
  https://errata.build.resf.org/RLSA-2026:13644
• Red Hat Security Advisory RHSA-2026:14213 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14213
• Red Hat Security Advisory RHSA-2026:14210 vom 2026-05-06
  https://access.redhat.com/errata/RHSA-2026:14210
• Oracle Linux Security Advisory ELSA-2026-13673 vom 2026-05-07
  https://linux.oracle.com/errata/ELSA-2026-13673.html
• Debian Security Advisory DSA-6261 vom 2026-05-10
  https://lists.debian.org/debian-security-announce/2026/msg00172.html
• Oracle Linux Security Advisory ELSA-2026-13657 vom 2026-05-11
  https://linux.oracle.com/errata/ELSA-2026-13657.html
• Oracle Linux Security Advisory ELSA-2026-13644 vom 2026-05-11
  https://linux.oracle.com/errata/ELSA-2026-13644.html
• Red Hat Security Advisory RHSA-2026:19043 vom 2026-05-19
  https://access.redhat.com/errata/RHSA-2026:19043
• Red Hat Security Advisory RHSA-2026:19200 vom 2026-05-20
  https://access.redhat.com/errata/RHSA-2026:19200
• Red Hat Security Advisory RHSA-2026:20916 vom 2026-05-26
  https://access.redhat.com/errata/RHSA-2026:20916
• Rocky Linux Security Advisory RLSA-2026:19200 vom 2026-05-28
  https://errata.build.resf.org/RLSA-2026:19200
• Debian Security Advisory DLA-4608 vom 2026-05-30
  https://lists.debian.org/debian-lts-announce/2026/05/msg00053.html
• Oracle Linux Security Advisory ELSA-2026-19200 vom 2026-06-23
  https://linux.oracle.com/errata/ELSA-2026-19200.html
• IBM Security Bulletin 7282946 vom 2026-08-07
  https://www.ibm.com/support/pages/node/7282946