REDHAT-BUG-2456340: Medium severity Google Go vulnerability

Published Apr 8, 2026

Updated

The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory corruption at runtime.

Affected Software

1 affected component

Google Go

Event History

Apr 8, 2026

Data Sourced

via Red Hat·02:01 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2456340?

The severity of REDHAT-BUG-2456340 is categorized as critical due to the potential for memory corruption at runtime.

How do I fix REDHAT-BUG-2456340?

To fix REDHAT-BUG-2456340, update your Google Go compiler to the latest version that addresses this vulnerability.

Which software is affected by REDHAT-BUG-2456340?

The affected software for REDHAT-BUG-2456340 is Google Go.

What could happen if REDHAT-BUG-2456340 is exploited?

If REDHAT-BUG-2456340 is exploited, it could lead to undefined behavior or memory corruption in applications using affected versions of the compiler.

Is there a workaround for REDHAT-BUG-2456340?

There are currently no recommended workarounds for REDHAT-BUG-2456340, and updating is the best mitigation strategy.