Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-35092

Fixed in a distro release EPSS <1%CVSS 7.5

A flaw was found in Corosync. An integer overflow vulnerability in Corosync's join message sanity validation allows a remote, unauthenticated attacker to send crafted User Datagram Protocol (UDP) packets. This can cause the service to crash, leading to a denial of service. This vulnerability specifically affects Corosync deployments configured to use totemudp/totemudpu mode.

Published 2026-04-01 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenShift Container Platform 4

Distro releases

ReleasePackageFixed in
AlmaLinux 10corosync3.1.10-1.el10_2.1
AlmaLinux 10corosync3.1.9-2.el10_1.1
AlmaLinux 10corosync-vqsim3.1.9-2.el10_1.1
AlmaLinux 10corosync-vqsim3.1.10-1.el10_2.1
AlmaLinux 10corosynclib3.1.9-2.el10_1.1
AlmaLinux 10corosynclib3.1.10-1.el10_2.1
AlmaLinux 10corosynclib-devel3.1.9-2.el10_1.1
AlmaLinux 10corosynclib-devel3.1.10-1.el10_2.1
AlmaLinux 8corosync3.1.8-1.el8_10.1
AlmaLinux 8corosync-vqsim3.1.8-1.el8_10.1
AlmaLinux 8corosynclib3.1.8-1.el8_10.1
AlmaLinux 8corosynclib-devel3.1.8-1.el8_10.1
AlmaLinux 8spausedd3.1.8-1.el8_10.1
AlmaLinux 9corosync3.1.9-2.el9_7.1
AlmaLinux 9corosync3.1.10-1.el9_8.1
AlmaLinux 9corosync-vqsim3.1.9-2.el9_7.1
AlmaLinux 9corosync-vqsim3.1.10-1.el9_8.1
AlmaLinux 9corosynclib3.1.9-2.el9_7.1
AlmaLinux 9corosynclib3.1.10-1.el9_8.1
AlmaLinux 9corosynclib-devel3.1.9-2.el9_7.1
AlmaLinux 9corosynclib-devel3.1.10-1.el9_8.1
Debian 12corosync3.1.7-1+deb12u2
Debian 13corosync3.1.9-2+deb13u1
Debian 14corosync3.1.10-2
Red Hat Enterprise Linux 10.1corosync0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosync-debuginfo0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosync-debugsource0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosync-vqsim0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosync-vqsim-debuginfo0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosynclib0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosynclib-debuginfo0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.1corosynclib-devel0:3.1.9-2.el10_1.1
Red Hat Enterprise Linux 10.2corosync0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosync-debuginfo0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosync-debugsource0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosync-vqsim0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosync-vqsim-debuginfo0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosynclib0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosynclib-debuginfo0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 10.2corosynclib-devel0:3.1.10-1.el10_2.1
Red Hat Enterprise Linux 7corosync0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7corosync-debuginfo0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7corosync-qdevice0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7corosync-qnetd0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7corosynclib0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7corosynclib-devel0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 7spausedd0:2.4.5-7.el7_9.3
Red Hat Enterprise Linux 8corosync0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosync-debuginfo0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosync-debugsource0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosync-vqsim0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosync-vqsim-debuginfo0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosynclib0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosynclib-debuginfo0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8corosynclib-devel0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8spausedd0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 8spausedd-debuginfo0:3.1.8-1.el8_10.1
Red Hat Enterprise Linux 9corosync0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosync0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosync-debuginfo0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosync-debuginfo0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosync-debugsource0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosync-debugsource0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosync-vqsim0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosync-vqsim0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosync-vqsim-debuginfo0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosync-vqsim-debuginfo0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosynclib0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosynclib0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosynclib-debuginfo0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux 9corosynclib-debuginfo0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosynclib-devel0:3.1.10-1.el9_8.1
Red Hat Enterprise Linux 9corosynclib-devel0:3.1.9-2.el9_7.1
Red Hat Enterprise Linux eus 10.0corosync0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosync-debuginfo0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosync-debugsource0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosync-vqsim0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosync-vqsim-debuginfo0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosynclib0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosynclib-debuginfo0:3.1.9-1.el10_0.2
Red Hat Enterprise Linux eus 10.0corosynclib-devel0:3.1.9-1.el10_0.2
Red Hat rhel aus 8.4corosync0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosync-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosync-debugsource0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosync-vqsim-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosynclib0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosynclib-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4corosynclib-devel0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4spausedd0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.4spausedd-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel aus 8.6corosync0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6corosync-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6corosync-debugsource0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6corosync-vqsim-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6corosynclib0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6corosynclib-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel aus 8.6spausedd-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosync0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosync-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosync-debugsource0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosync-vqsim-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosynclib0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosynclib-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6corosynclib-devel0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6spausedd0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.6spausedd-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel e4s 8.8corosync0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosync-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosync-debugsource0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosync-vqsim-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosynclib0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosynclib-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8corosynclib-devel0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8spausedd0:3.1.7-1.el8_8.1
Red Hat rhel e4s 8.8spausedd-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel e4s 9.0corosync0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosync-debuginfo0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosync-debugsource0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosync-vqsim-debuginfo0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosynclib0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosynclib-debuginfo0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.0corosynclib-devel0:3.1.5-3.el9_0.1
Red Hat rhel e4s 9.2corosync0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosync-debuginfo0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosync-debugsource0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosync-vqsim-debuginfo0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosynclib0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosynclib-debuginfo0:3.1.7-1.el9_2.1
Red Hat rhel e4s 9.2corosynclib-devel0:3.1.7-1.el9_2.1
Red Hat rhel eus 9.4corosync0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosync-debuginfo0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosync-debugsource0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosync-vqsim0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosync-vqsim-debuginfo0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosynclib0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosynclib-debuginfo0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.4corosynclib-devel0:3.1.8-1.el9_4.1
Red Hat rhel eus 9.6corosync0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosync-debuginfo0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosync-debugsource0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosync-vqsim0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosync-vqsim-debuginfo0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosynclib0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosynclib-debuginfo0:3.1.9-2.el9_6.1
Red Hat rhel eus 9.6corosynclib-devel0:3.1.9-2.el9_6.1
Red Hat rhel eus long life 8.4corosync0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosync-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosync-debugsource0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosync-vqsim-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosynclib0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosynclib-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4corosynclib-devel0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4spausedd0:3.1.0-3.el8_4.2
Red Hat rhel eus long life 8.4spausedd-debuginfo0:3.1.0-3.el8_4.2
Red Hat rhel tus 8.6corosync0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosync-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosync-debugsource0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosync-vqsim-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosynclib0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosynclib-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6corosynclib-devel0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6spausedd0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.6spausedd-debuginfo0:3.1.5-2.el8_6.1
Red Hat rhel tus 8.8corosync0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosync-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosync-debugsource0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosync-vqsim-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosynclib0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosynclib-debuginfo0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8corosynclib-devel0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8spausedd0:3.1.7-1.el8_8.1
Red Hat rhel tus 8.8spausedd-debuginfo0:3.1.7-1.el8_8.1
Rocky Linux 10corosync0:3.1.9-2.el10_1.1
Rocky Linux 10corosync0:3.1.10-1.el10_2.1
Rocky Linux 8corosync0:3.1.8-1.el8_10.1
Rocky Linux 9corosync0:3.1.9-2.el9_7.1
Rocky Linux 9corosync0:3.1.10-1.el9_8.1
SUSE Linux Enterprise High Availability Extension 15 SP4corosync2.4.6-150300.12.16.1
SUSE Linux Enterprise High Availability Extension 15 SP5corosync2.4.6-150300.12.16.1
SUSE Linux Enterprise High Availability Extension 15 SP6corosync2.4.6-150300.12.16.1
SUSE Linux Enterprise High Availability Extension 15 SP7corosync2.4.6-150300.12.16.1
SUSE Linux Enterprise Server for SAP applications 16.0corosync3.1.9-160000.3.1
Ubuntu 16.04 LTScorosyncno fix
Ubuntu 18.04 LTScorosyncno fix
Ubuntu 20.04 LTScorosyncno fix
Ubuntu 22.04 LTScorosync3.1.6-1ubuntu1.2
Ubuntu 24.04 LTScorosync3.1.7-1ubuntu3.2
Ubuntu 25.10corosync3.1.9-2ubuntu1.1
openSUSE Leap 15.6corosync2.4.6-150300.12.16.1
openSUSE Leap 16.0corosync3.1.9-160000.3.1