Threats Tagged 'cve-2026-81665'

A heap-based buffer overflow vulnerability (CVE-2026-81665) exists in the Corosync Cluster Engine's totempg assembly buffer during fragmented message reassembly. This issue affects multiple architectures and versions of Corosync used in SUSE and Red Hat Enterprise Linux distributions. The vulnerability has been rated as high severity. Red Hat has issued security updates to address this flaw in their Corosync packages for various platforms. The vulnerability could potentially allow memory corruption during message processing in cluster communications.

A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast protocol messages to the cluster could cause a heap buffer overflow with attacker-controlled data. This can crash the Corosync daemon, causing a denial of service to the entire cluster, and may potentially allow further exploitation given sufficient heap-corruption control.