The vulnerability in kronosnet (<=1.34) involves improper removal of sensitive information from memory after cryptographic configuration changes. Specifically, raw encryption keys remain in memory after the associated structures are freed, due to failure to zero-out or wipe memory segments. This allows a local attacker who can perform memory disclosure to obtain active encryption keys, enabling decryption of cluster network communications or injection of malicious packets that could destabilize high-availability clusters. The issue affects Red Hat Enterprise Linux 10 environments using the vulnerable kronosnet versions. No vendor advisory indicates an available patch or fix at this time.

An attacker with local access and the ability to perform memory disclosure could retrieve active encryption keys from memory. This compromises confidentiality by allowing decryption of cluster network communications and impacts integrity and availability by enabling injection of malicious packets that may cause cluster instability. The overall impact is rated medium with partial confidentiality loss, limited integrity impact, and some availability disruption.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15811 for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for any unusual cluster behavior. No official patch or workaround is currently documented by Red Hat.