RHSA-2026:13644
Vulnerability from csaf_redhat - Published: 2026-05-05 09:31 - Updated: 2026-05-05 14:44Summary
Red Hat Security Advisory: corosync security update
Severity
Moderate
Notes
Topic: An update for corosync is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software.
Security Fix(es):
* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)
* corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.
8.2 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2026:13644
Workaround
Systems using totemudp or totemudpu should migrate to the supported knet transport and enable encryption.
Disabling the Corosync service is a valid workaround if clustering is not required, but for active clusters, enabling encryption via knet is the preferred and recommended approach.
A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.
7.5 (High)
Vendor Fix
For details on how to apply this update, which includes the changes described in this advisory, refer to:
https://access.redhat.com/articles/11258
https://access.redhat.com/errata/RHSA-2026:13644
Workaround
Restrict network access to Corosync cluster communication ports. Configure firewall rules to limit incoming UDP traffic to the Corosync service (default port 5405) to only trusted hosts within the cluster. This will prevent unauthenticated remote attackers from sending crafted packets to exploit the vulnerability. A service restart may be required for firewall changes to take full effect.
References
Acknowledgments
Sebastián Alba Vives
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for corosync is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software.\n\nSecurity Fix(es):\n\n* corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091)\n\n* corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13644",
"url": "https://access.redhat.com/errata/RHSA-2026:13644"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "2453813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453813"
},
{
"category": "external",
"summary": "2453814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453814"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13644.json"
}
],
"title": "Red Hat Security Advisory: corosync security update",
"tracking": {
"current_release_date": "2026-05-05T14:44:43+00:00",
"generator": {
"date": "2026-05-05T14:44:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.9"
}
},
"id": "RHSA-2026:13644",
"initial_release_date": "2026-05-05T09:31:59+00:00",
"revision_history": [
{
"date": "2026-05-05T09:31:59+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-05T09:31:59+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-05T14:44:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux High Availability (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-devel@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debugsource@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debuginfo@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim-debuginfo@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-debuginfo@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"product": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"product_id": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim@3.1.9-2.el10_1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "corosync-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosync-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosync-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-devel@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debugsource@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debuginfo@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim-debuginfo@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-debuginfo@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib@3.1.9-2.el10_1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"product": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"product_id": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim@3.1.9-2.el10_1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-devel@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debugsource@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debuginfo@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim-debuginfo@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-debuginfo@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib@3.1.9-2.el10_1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"product": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"product_id": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim@3.1.9-2.el10_1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-devel@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debugsource@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-debuginfo@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim-debuginfo@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib-debuginfo@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosynclib@3.1.9-2.el10_1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"product": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"product_id": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync-vqsim@3.1.9-2.el10_1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "corosync-0:3.1.9-2.el10_1.1.src",
"product": {
"name": "corosync-0:3.1.9-2.el10_1.1.src",
"product_id": "corosync-0:3.1.9-2.el10_1.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/corosync@3.1.9-2.el10_1.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.src",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.src as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.src",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)",
"product_id": "CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "CRB-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.src as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.src",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"relates_to_product_reference": "HighAvailability-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64 as a component of Red Hat Enterprise Linux High Availability (v. 10)",
"product_id": "HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
},
"product_reference": "corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"relates_to_product_reference": "HighAvailability-10.1.Z"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Sebasti\u00e1n Alba Vives"
]
}
],
"cve": "CVE-2026-35091",
"cwe": {
"id": "CWE-253",
"name": "Incorrect Check of Function Return Value"
},
"discovery_date": "2026-04-01T11:31:01.742390+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User Datagram Protocol (UDP) packet. This can lead to an out-of-bounds read, causing a denial of service (DoS) and potentially disclosing limited memory contents. This vulnerability affects Corosync when running in totemudp/totemudpu mode, which is the default configuration.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability has a Moderate impact on Red Hat products. A flaw in Corosync\u0027s membership commit token sanity check, when running in the default totemudp/totemudpu mode, allows a remote unauthenticated attacker to send a crafted UDP packet. This can lead to an out-of-bounds read, resulting in a denial of service and potential limited memory content disclosure. This issue affects Corosync only when configured to use the legacy totemudp or totemudpu transport modes with unencrypted communication.\n\nThese modes are not the default in modern Corosync versions. The default transport is knet, which supports encryption and is the standard configuration in RHEL.Additionally, totemudp and totemudpu are unsupported in RHEL, and their use requires explicit manual configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35091"
},
{
"category": "external",
"summary": "RHBZ#2453813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35091",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35091"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35091",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35091"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2453169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453169"
}
],
"release_date": "2026-04-01T11:48:13.254000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-05T09:31:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13644"
},
{
"category": "workaround",
"details": "Systems using totemudp or totemudpu should migrate to the supported knet transport and enable encryption.\n\nDisabling the Corosync service is a valid workaround if clustering is not required, but for active clusters, enabling encryption via knet is the preferred and recommended approach.",
"product_ids": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet"
},
{
"acknowledgments": [
{
"names": [
"Sebasti\u00e1n Alba Vives"
]
}
],
"cve": "CVE-2026-35092",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-04-01T11:32:04.388505+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453814"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Corosync. An integer overflow vulnerability in Corosync\u0027s join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "corosync: Corosync: Denial of Service via integer overflow in join message validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in Corosync, affecting deployments configured to use totemudp/totemudpu mode. A remote, unauthenticated attacker can send specially crafted UDP packets to trigger an integer overflow, causing the Corosync service to crash.This issue affects Corosync only when using the legacy totemudp or totemudpu transports with unencrypted communication. These are not the default.The default transport is knet, which supports encryption and is the standard configuration in RHEL.\nThe totemudp and totemudpu transports are unsupported in RHEL and require explicit manual configuration.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35092"
},
{
"category": "external",
"summary": "RHBZ#2453814",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453814"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35092",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35092"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35092",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35092"
},
{
"category": "external",
"summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2453169",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453169"
}
],
"release_date": "2026-04-01T11:48:22.309000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-05T09:31:59+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13644"
},
{
"category": "workaround",
"details": "Restrict network access to Corosync cluster communication ports. Configure firewall rules to limit incoming UDP traffic to the Corosync service (default port 5405) to only trusted hosts within the cluster. This will prevent unauthenticated remote attackers from sending crafted packets to exploit the vulnerability. A service restart may be required for firewall changes to take full effect.",
"product_ids": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"AppStream-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"AppStream-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"CRB-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"CRB-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.src",
"HighAvailability-10.1.Z:corosync-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-debugsource-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosync-vqsim-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-debuginfo-0:3.1.9-2.el10_1.1.x86_64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.aarch64",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.ppc64le",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.s390x",
"HighAvailability-10.1.Z:corosynclib-devel-0:3.1.9-2.el10_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "corosync: Corosync: Denial of Service via integer overflow in join message validation"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…