REDHAT-BUG-2458898: Use After Free

Published Apr 16, 2026
·
Updated

In rsync 3.0.1 through 3.4.1, receivexattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.

Affected Software

1 affected component
rsync rsync>=3.0.1<=3.4.1

Event History

Apr 16, 2026
Data Sourced
via Red Hat·08:01 AM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2458898?

The severity of REDHAT-BUG-2458898 is high, rated at 7.

2

How do I fix REDHAT-BUG-2458898?

To fix REDHAT-BUG-2458898, update rsync to a non-vulnerable version after ensuring that you are not using the -X option.

3

What platforms are affected by REDHAT-BUG-2458898?

REDHAT-BUG-2458898 affects many common Linux configurations as well as some non-Linux platforms.

4

What is the primary risk associated with REDHAT-BUG-2458898?

The primary risk associated with REDHAT-BUG-2458898 is a receiver use-after-free vulnerability during the qsort call.

5

What versions of rsync are affected by REDHAT-BUG-2458898?

Rsync versions from 3.0.1 through 3.4.1 are affected by REDHAT-BUG-2458898.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203