A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade corosynclib-develUpgrade corosynclibUpgrade spauseddUpgrade corosync-vqsimUpgrade corosync | May 6, 2026 | May 5, 2026 |
| Amazon_linux_2023 | — | Upgrade corosynclibUpgrade corosyncUpgrade corosynclib-debuginfoUpgrade corosynclib-develUpgrade corosync-vqsim-debuginfoUpgrade corosync-debuginfoUpgrade corosync-debugsourceUpgrade corosync-vqsim | Apr 14, 2026 | Apr 1, 2026 |
| Debian | — | Upgrade corosync | May 12, 2026 | May 12, 2026 |
| Oracle_linux | — | Upgrade corosync-vqsimUpgrade corosyncUpgrade corosynclib | May 8, 2026 | Apr 1, 2026 |
| Redhat_linux | — | Upgrade spauseddUpgrade corosync-vqsimUpgrade corosynclibUpgrade corosyncUpgrade corosync-debuginfoUpgrade corosynclib-debuginfoUpgrade corosynclib-develUpgrade spausedd-debuginfoUpgrade corosync-vqsim-debuginfoUpgrade corosync-qdeviceUpgrade corosync-debugsourceUpgrade corosync-qnetd | May 7, 2026 | Apr 1, 2026 |
| Rocky_linux | — | Upgrade corosync-debuginfoUpgrade corosynclib-develUpgrade corosync-vqsim-debuginfoUpgrade spauseddUpgrade corosyncUpgrade spausedd-debuginfoUpgrade corosynclib-debuginfoUpgrade corosynclibUpgrade corosync-debugsourceUpgrade corosync-vqsim | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade corosync | Apr 14, 2026 | Apr 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub