CVE-2026-81665
HIGH
MEDIUM
Priority: 0.03
BB Relevance:
50/100
Published: 2026-09-04
Modified: 2026-11-02
First seen: 2026-11-02
Status: active
Attack Surface
Adjacent
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
High
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
A heap-based buffer overflow was found in Corosync's Totem Process Group (totempg) message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast protocol messages to the cluster could cause a heap buffer overflow with attacker-controlled data. This can crash the Corosync daemon, causing a denial of service to the entire cluster, and may potentially allow further exploitation given sufficient heap-corruption control.
Weakness Classification (1)
References & Advisories (13)
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vendor-advisory
x_refsource_REDHAT
vdb-entry
x_refsource_REDHAT
issue-tracking
x_refsource_REDHAT