RHSA-2026:20916MediumCVSS 8.2

Red Hat Security Advisory: corosync security update

Published
May 26, 2026
Last Modified
October 2, 2026

🔗 CVE IDs covered (2)

CVE-2026-35092 →CVE-2026-35091 →

📋 Description

CVE-2026-35091 — corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet CVE-2026-35092 — corosync: Corosync: Denial of Service via integer overflow in join message validation

🎯 Affected products38

  • Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.src as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.src as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-debuginfo-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-qdevice-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-qdevice-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-qdevice-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-qdevice-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-qnetd-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-qnetd-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosync-qnetd-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosync-qnetd-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.ppc64le as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosynclib-0:2.4.5-7.el7_9.3.x86_64 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • corosynclib-devel-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server HighAvailability (v. 7 ELS)
  • corosynclib-devel-0:2.4.5-7.el7_9.3.i686 as a component of Red Hat Enterprise Linux Server ResilientStorage (v. 7 ELS)
  • +8 more not shown

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Systems using totemudp or totemudpu should migrate to the supported knet transport and enable encryption. Disabling the Corosync service is a valid workaround if clustering is not required, but for active clusters, enabling encryption via knet is the preferred and recommended approach. Workaround: Systems using totemudp or totemudpu should migrate to the supported knet transport and enable encryption.

🔗 References (5)