RHSA-2026:14212: Moderate: corosync security update
Published May 6, 2026
·Updated
Moderate: corosync security update
Other sources
The corosync packages provide the Corosync Cluster Engine and C APIs for Red Hat Enterprise Linux cluster software.Security Fix(es): corosync: Corosync: Denial of Service and information disclosure via crafted UDP packet (CVE-2026-35091) corosync: Corosync: Denial of Service via integer overflow in join message validation (CVE-2026-35092) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
61 affected componentsFixes available
Red Hat Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for Power, little endian - 4 years of updates
Red Hat Red Hat Enterprise Linux High Availability for IBM z Systems - Extended Life Cycle
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux High Availability (for ARM 64) - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for Power, little endian - Extended Life Cycle
Red Hat Red Hat Enterprise Linux High Availability for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux High Availability for ARM 64 - 4 years of updates
Red Hat Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Life Cycle
Red Hat Red Hat Enterprise Linux High Availability for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux High Availability for ARM 64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux High Availability for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Life Cycle
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux High Availability (for IBM z Systems) - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux High Availability for Power, little endian - Extended Life Cycle
Red Hat Red Hat Enterprise Linux High Availability for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux Resilient Storage for IBM z Systems - Extended Update Support
redhat/corosync<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debugsource<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debugsource<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-devel<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-devel<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-debugsource<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-debuginfo<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosynclib-devel<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosync-debuginfo<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosync-debugsource<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosync-vqsim-debuginfo<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosynclib<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosynclib-debuginfo<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosynclib-devel<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
redhat/corosync-vqsim<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim<3.1.8-1.el9_4.1
3.1.8-1.el9_4.1
redhat/corosync-vqsim<3.1.8-1.el9_4.1.aa
3.1.8-1.el9_4.1.aa
Remediation
Event History
May 6, 2026
Advisory Published
via Red Hat·03:54 PM
Data Sourced
via Red Hat·03:54 PM
DescriptionSeverityAffected Software
May 16, 2026
Advisory Published
via Red Hat·02:15 AM
Data Sourced
via Red Hat·02:15 AM
Remedy
Frequently Asked Questions
1
What is the severity of RHSA-2026:14212?
The severity of RHSA-2026:14212 is classified as moderate.
2
How do I fix RHSA-2026:14212?
To fix RHSA-2026:14212, update the corosync package to version 3.1.8-1.el9_4.1 or later.
3
What vulnerabilities does RHSA-2026:14212 address?
RHSA-2026:14212 addresses a denial of service and information disclosure vulnerability via crafted UDP packets.
4
Which systems are affected by RHSA-2026:14212?
RHSA-2026:14212 affects various Red Hat Enterprise Linux packages including those for x86_64, ARM 64, and IBM z Systems.
5
Is there a recommended action for RHSA-2026:14212?
It is recommended to apply the security update as soon as possible to mitigate the identified vulnerabilities.