A discrepancy between how Go and C/C++ comments were parsed allowed for code smuggling into the resulting cgo binary.
CVSS Details
- CVSS 3.1 Base Score: 8.6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade delveUpgrade go-toolsetUpgrade golang-binUpgrade golang-docsUpgrade golang-miscUpgrade golangUpgrade golang-testsUpgrade golang-srcUpgrade golang-race | Feb 17, 2026 | Feb 16, 2026 |
| Alpine Linux | — | Upgrade goUpgrade etcd | Feb 6, 2026 | Feb 5, 2026 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golangUpgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golang-bin | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade golang-docsUpgrade golang-sharedUpgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golang-miscUpgrade golang | Feb 20, 2026 | Feb 5, 2026 |
| Oracle_linux | — | Upgrade golang-srcUpgrade golangUpgrade golang-miscUpgrade golang-binUpgrade golang-docsUpgrade go-toolsetUpgrade golang-testsUpgrade delveUpgrade golang-race | Feb 24, 2026 | Feb 5, 2026 |
| Redhat_linux | — | Upgrade golangUpgrade go-toolsetUpgrade golang-docsNo solution existsUpgrade golang-miscUpgrade golang-binUpgrade golang-srcUpgrade golang-raceUpgrade delve-debugsourceUpgrade golang-testsUpgrade delve-debuginfoUpgrade delve | Feb 17, 2026 | Feb 5, 2026 |
| Rocky_linux | — | Upgrade golangUpgrade golang-raceUpgrade delveUpgrade go-toolsetUpgrade golang-binUpgrade delve-debuginfoUpgrade delve-debugsource | Feb 19, 2026 | Feb 17, 2026 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.4.12Upgrade Splunk Enterprise to version 10.0.7Upgrade Splunk Enterprise to version 10.2.3Upgrade Splunk Enterprise to version 10.4.0Upgrade Splunk Enterprise to version 9.3.13Upgrade Splunk Enterprise to version 10.2.4Upgrade Splunk Enterprise to version 10.0.6Upgrade Splunk Enterprise to version 9.3.12Upgrade Splunk Enterprise to version 9.4.11 | Jul 30, 2026 | Feb 5, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Feb 5, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub