Description
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8 | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9 | — | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — | — |
| Red Hat | Red Hat Update Infrastructure 5 | — | — |
| Red Hat | Red Hat Enterprise Linux 6 | — | — |
| Red Hat | Red Hat Enterprise Linux 7 | — | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | rsyslog | 8.2608.0-1 | — |
| Debian 13 | rsyslog | 8.2504.0-1+deb13u1 | — |
| Debian 12 | rsyslog | 8.2302.0-1+deb12u2 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.04 LTS | rsyslog | 8.2512.0-1ubuntu4.1 | — |
| Ubuntu 24.04 LTS | rsyslog | 8.2312.0-3ubuntu9.3 | — |
| Ubuntu 22.04 LTS | rsyslog | 8.2112.0-2ubuntu2.4 | — |
| Ubuntu 14.04 LTS | rsyslog | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | rsyslog | No fix yet | — |
| Ubuntu Pro 18.04 LTS | rsyslog | No fix yet | — |
| Ubuntu Pro 16.04 LTS | rsyslog | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rsyslog +19 | 8.2510.0-5.el10_2.1 | RHSA-2026:67584 |
| RHEL 9 | rsyslog +20 | 8.2510.0-2.el9_8.1 | RHSA-2026:67583 |
| RHEL 8 | rsyslog +1 | 8.2102.0-15.el8_10.3 | RHSA-2026:80817 |
Show 10 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | rsyslog +19 | 8.2412.0-1.el10_0.1 | RHSA-2026:66405 |
| RHEL 9.6 EUS | rsyslog +19 | 8.2412.0-1.el9_6.2 | RHSA-2026:84576 |
| RHEL 9.4 E4S | rsyslog +6 | 8.2310.0-4.el9_4.1 | RHSA-2026:84571 |
| RHEL 9.2 E4S | rsyslog +19 | 8.2102.0-113.el9_2.3 | RHSA-2026:86124 |
| RHEL 8.8 TUS | rsyslog +18 | 8.2102.0-13.el8_8.1 | RHSA-2026:87408 |
| RHEL 8.8 E4S | rsyslog +18 | 8.2102.0-13.el8_8.1 | RHSA-2026:87408 |
| RHEL 8.6 EUS Long Life | rsyslog +18 | 8.2102.0-7.el8_6.2 | RHSA-2026:91582 |
| RHEL 8.6 AUS | rsyslog +18 | 8.2102.0-7.el8_6.2 | RHSA-2026:91582 |
| RHEL 8.4 EUS Long Life | rsyslog +16 | 8.1911.0-7.el8_4.5 | RHSA-2026:95573 |
| RHEL 8.4 AUS | rsyslog +16 | 8.1911.0-7.el8_4.5 | RHSA-2026:95573 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rsyslog +19 | 8.2510.0-5.el10_2.1 | ALSA-2026:67584 |
| AlmaLinux 9 | rsyslog +20 | 8.2510.0-2.el9_8.1 | ALSA-2026:67583 |
| AlmaLinux 8 | rsyslog +19 | 8.2102.0-15.el8_10.3 | ALSA-2026:80817 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | rsyslog | 8.2510.0-5.el10_2.1 | RLSA-2026:67584 |
| Rocky Linux 9 | rsyslog | 8.2510.0-2.el9_8.1 | RLSA-2026:67583 |
| Rocky Linux 8 | rsyslog | 8.2102.0-15.el8_10.3 | RLSA-2026:80817 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | rsyslog | 8.2608.0-150700.3.24.1 | SUSE-SU-2026:4611-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | rsyslog | 8.2608.0-160000.1.1 | SUSE-SU-2026:24598-1 |
| SLES 16.0 | rsyslog | 8.2608.0-160000.1.1 | SUSE-SU-2026:24598-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | rsyslog | 8.2608.0-160000.1.1 | openSUSE-SU-2026:22184-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | rsyslog | 8.2608.0-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | rsyslog +11 | 8.2204.0-3.amzn2023.0.5 | ALAS2023-2026-2118 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | rsyslog | 8.2308.0-6 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | rsyslog +19 | 8.2510.0-5.el10_2.1 | ELSA-2026-67584 |
| Oracle Linux 9 | rsyslog +20 | 8.2510.0-2.0.1.el9_8.1 | ELSA-2026-67583 |
| Oracle Linux 8 | rsyslog +19 | 8.2102.0-15.0.1.el8_10.3 | ELSA-2026-80817 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | rsyslog-snmp +3 | 8.2608.0-r2 | — |
Advisories 24
- RHSA-2026:95573 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:91582 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87408 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:86124 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- WID-SEC-2026-2477 rsyslog: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Nov 12, 2026
- SUSE-SU-2026:24598-1 Security update for rsyslog SUSE / openSUSE Security Updates · Nov 10, 2026
- openSUSE-SU-2026:22184-1 Security update for rsyslog SUSE / openSUSE Security Updates · Oct 31, 2026
- ALSA-2026:67584 Moderate: rsyslog security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:67583 Low: rsyslog security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:80817 Important: rsyslog security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2026:84571 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:84576 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:80817 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:67584 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:67583 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RHSA-2026:66405 Red Hat Security Advisory: rsyslog security update Red Hat Security Advisories (RHSA) · Oct 20, 2026
- RLSA-2026:80817 Important: rsyslog security update Rocky Linux Security Advisories · Oct 14, 2026
- ELSA-2026-80817 Important: rsyslog security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Oct 12, 2026
- SUSE-SU-2026:4611-1 Security update for rsyslog SUSE / openSUSE Security Updates · Oct 10, 2026
- RLSA-2026:67583 Low: rsyslog security update Rocky Linux Security Advisories · Sep 16, 2026
- RLSA-2026:67584 Moderate: rsyslog security update Rocky Linux Security Advisories · Sep 16, 2026
- ELSA-2026-67583 Low: rsyslog security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Sep 16, 2026
- ELSA-2026-67584 Moderate: rsyslog security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Sep 15, 2026
- ALAS2023-2026-2118 Important: rsyslog security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Aug 31, 2026
References
- RHSA-2026:66405 vendor-advisory
- RHSA-2026:67583 vendor-advisory
- RHSA-2026:67584 vendor-advisory
- RHSA-2026:71603 vendor-advisory
- RHSA-2026:80817 vendor-advisory
- RHSA-2026:84571 vendor-advisory
- RHSA-2026:84576 vendor-advisory
- RHSA-2026:86124 vendor-advisory
- RHSA-2026:87408 vendor-advisory
- RHSA-2026:91582 vendor-advisory
- RHSA-2026:95573 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-19654 vdb-entry
- RHBZ#2502868 issue-tracking
- https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29