Threats Tagged 'cve-2026-81666'

A heap-based buffer overflow vulnerability (CVE-2026-81665) exists in the Corosync Cluster Engine's totempg assembly buffer during fragmented message reassembly. This issue affects multiple architectures and versions of Corosync used in SUSE and Red Hat Enterprise Linux distributions. The vulnerability has been rated as high severity. Red Hat has issued security updates to address this flaw in their Corosync packages for various platforms. The vulnerability could potentially allow memory corruption during message processing in cluster communications.

An integer overflow vulnerability exists in Corosync's handling of membership commit token messages on 32-bit systems. This overflow allows bypassing length-validation checks, leading to out-of-bounds memory access and crashing the Corosync daemon, causing denial of service for the affected cluster node. The issue does not affect 64-bit systems due to correct 64-bit arithmetic handling.

CVE-2026-81666 is an integer overflow vulnerability in Corosync's handling of membership commit token messages on 32-bit systems in Red Hat Enterprise Linux 10. This overflow allows crafted network packets to bypass length validation, causing out-of-bounds memory access that crashes the Corosync daemon and results in denial of service for the affected cluster node. The issue does not affect 64-bit systems due to correct 64-bit arithmetic. The vulnerability is rated as moderate with a CVSS score of 6.5. Default cluster message authentication in RHEL High Availability Add-On clusters reduces the practical risk, but this protection can be disabled via supported configuration. No complete fix is currently available, but mitigation steps include enabling cluster message authentication, restricting network access to cluster ports, and preferring 64-bit deployments.