A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade corosynclibUpgrade spauseddUpgrade corosync-vqsimUpgrade corosyncUpgrade corosynclib-devel | May 6, 2026 | May 5, 2026 |
| Amazon_linux_2023 | — | Upgrade corosync-vqsim-debuginfoUpgrade corosync-debugsourceUpgrade corosync-vqsimUpgrade corosync-debuginfoUpgrade corosynclib-develUpgrade corosynclib-debuginfoUpgrade corosynclibUpgrade corosync | Apr 14, 2026 | Apr 1, 2026 |
| Debian | — | Upgrade corosync | May 12, 2026 | May 12, 2026 |
| Oracle_linux | — | Upgrade corosyncUpgrade corosynclibUpgrade corosync-vqsim | May 8, 2026 | Apr 1, 2026 |
| Redhat_linux | — | Upgrade spauseddUpgrade corosynclibUpgrade corosyncUpgrade corosync-vqsimUpgrade corosync-debuginfoUpgrade corosynclib-debuginfoUpgrade corosync-debugsourceUpgrade corosynclib-develUpgrade corosync-vqsim-debuginfoUpgrade spausedd-debuginfoUpgrade corosync-qnetdUpgrade corosync-qdevice | May 7, 2026 | Apr 1, 2026 |
| Rocky_linux | — | Upgrade corosynclibUpgrade corosync-vqsimUpgrade corosynclib-debuginfoUpgrade corosync-debugsourceUpgrade corosynclib-develUpgrade spauseddUpgrade corosync-vqsim-debuginfoUpgrade spausedd-debuginfoUpgrade corosyncUpgrade corosync-debuginfo | May 11, 2026 | May 6, 2026 |
| Ubuntu | — | Upgrade corosync | Apr 14, 2026 | Apr 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub