Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-41035

Fixed in a distro release EPSS <1%CVSS 7.4

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.

Published 2026-04-16 · CVE record · OSV

Products: Samba rsync, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 4.16, Red Hat OpenShift Container Platform 4.17, Red Hat OpenShift Container Platform 4.18, Red Hat OpenShift Container Platform 4.19, Red Hat Discovery 2, Red Hat OpenShift Container Platform 4

Distro releases

ReleasePackageFixed in
AlmaLinux 10rsync3.4.1-6.el10_2
AlmaLinux 10rsync-daemon3.4.1-6.el10_2
AlmaLinux 10rsync-rrsync3.4.1-6.el10_2
AlmaLinux 8rsync3.1.3-25.el8_10
AlmaLinux 8rsync-daemon3.1.3-25.el8_10
AlmaLinux 9rsync3.2.5-7.el9_8
AlmaLinux 9rsync-daemon3.2.5-7.el9_8
AlmaLinux 9rsync-rrsync3.2.5-7.el9_8
Alpine 3.20rsync3.4.1-r2
Alpine 3.21rsync3.4.1-r2
Alpine 3.22rsync3.4.1-r2
Alpine 3.23rsync3.4.1-r2
Alpine 3.24rsync3.4.1-r2
Debian 12rsync3.2.7-1+deb12u5
Debian 13rsync3.4.1+ds1-5+deb13u2
Debian 14rsync3.4.2+ds1-1
Red Hat Enterprise Linux 10.2rsync0:3.4.1-6.el10_2
Red Hat Enterprise Linux 10.2rsync-daemon0:3.4.1-6.el10_2
Red Hat Enterprise Linux 10.2rsync-debuginfo0:3.4.1-6.el10_2
Red Hat Enterprise Linux 10.2rsync-debugsource0:3.4.1-6.el10_2
Red Hat Enterprise Linux 10.2rsync-rrsync0:3.4.1-6.el10_2
Red Hat Enterprise Linux 8rsync0:3.1.3-25.el8_10
Red Hat Enterprise Linux 8rsync-daemon0:3.1.3-25.el8_10
Red Hat Enterprise Linux 8rsync-debuginfo0:3.1.3-25.el8_10
Red Hat Enterprise Linux 8rsync-debugsource0:3.1.3-25.el8_10
Red Hat Enterprise Linux 9rsync0:3.2.5-7.el9_8
Red Hat Enterprise Linux 9rsync-daemon0:3.2.5-7.el9_8
Red Hat Enterprise Linux 9rsync-debuginfo0:3.2.5-7.el9_8
Red Hat Enterprise Linux 9rsync-debugsource0:3.2.5-7.el9_8
Red Hat Enterprise Linux 9rsync-rrsync0:3.2.5-7.el9_8
Red Hat Enterprise Linux eus 10.0rsync0:3.4.1-2.el10_0.2
Red Hat Enterprise Linux eus 10.0rsync-daemon0:3.4.1-2.el10_0.2
Red Hat rhel aus 8.4rsync0:3.1.3-12.el8_4.7
Red Hat rhel aus 8.4rsync-daemon0:3.1.3-12.el8_4.7
Red Hat rhel aus 8.6rsync0:3.1.3-14.el8_6.10
Red Hat rhel e4s 8.8rsync0:3.1.3-20.el8_8.5
Red Hat rhel e4s 9.0rsync0:3.2.3-9.el9_0.5
Red Hat rhel e4s 9.0rsync-daemon0:3.2.3-9.el9_0.5
Red Hat rhel e4s 9.2rsync0:3.2.3-19.el9_2.3
Red Hat rhel e4s 9.2rsync-daemon0:3.2.3-19.el9_2.3
Red Hat rhel els 6rsync0:3.0.6-12.el6_10.3
Red Hat rhel els 7rsync0:3.1.2-12.el7_9.3
Red Hat rhel eus 9.4rsync0:3.2.3-19.el9_4.3
Red Hat rhel eus 9.4rsync-daemon0:3.2.3-19.el9_4.3
Red Hat rhel eus 9.6rsync0:3.2.5-3.el9_6.1
Red Hat rhel eus 9.6rsync-daemon0:3.2.5-3.el9_6.1
Red Hat rhel eus long life 8.4rsync0:3.1.3-12.el8_4.7
Red Hat rhel eus long life 8.4rsync-daemon0:3.1.3-12.el8_4.7
Red Hat rhel eus long life 8.6rsync0:3.1.3-14.el8_6.10
Red Hat rhel tus 8.8rsync0:3.1.3-20.el8_8.5
Rocky Linux 10rsync0:3.4.1-6.el10_2
Rocky Linux 8rsync0:3.1.3-25.el8_10
Rocky Linux 9rsync0:3.2.5-7.el9_8
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Micro 5.3rsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Micro 5.4rsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Micro 5.5rsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Server 15 SP4-LTSSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Server 15 SP5-LTSSrsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Server 16.0rsync3.4.1-160000.4.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4rsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5rsync3.2.3-150400.3.34.1
SUSE Linux Enterprise Server for SAP applications 16.0rsync3.4.1-160000.4.1
Ubuntu 22.04 LTSrsync3.2.7-0ubuntu0.22.04.6
Ubuntu 22.04 LTSrsync3.2.7-0ubuntu0.22.04.7
Ubuntu 24.04 LTSrsync3.2.7-1ubuntu1.5
Ubuntu 24.04 LTSrsync3.2.7-1ubuntu1.4
Ubuntu 25.10rsync3.4.1+ds1-5ubuntu1.3
Ubuntu 25.10rsync3.4.1+ds1-5ubuntu1.2
Ubuntu 26.04 LTSrsync3.4.1+ds1-7ubuntu0.2
Ubuntu 26.04 LTSrsync3.4.1+ds1-7ubuntu0.3
Ubuntu Pro 14.04 LTSrsync3.1.0-2ubuntu0.4+esm4
Ubuntu Pro 14.04 LTSrsync3.1.0-2ubuntu0.4+esm3
Ubuntu Pro 16.04 LTSrsync3.1.1-3ubuntu1.3+esm5
Ubuntu Pro 16.04 LTSrsync3.1.1-3ubuntu1.3+esm6
Ubuntu Pro 18.04 LTSrsync3.1.2-2.1ubuntu1.6+esm3
Ubuntu Pro 18.04 LTSrsync3.1.2-2.1ubuntu1.6+esm4
Ubuntu Pro 20.04 LTSrsync3.1.3-8ubuntu0.9+esm1
Ubuntu Pro 20.04 LTSrsync3.1.3-8ubuntu0.9+esm2
openSUSE Tumbleweedrsync3.4.1-5.1