Skip to content
Critical Buffer Overflow Vulnerabilities in Corosync for Fedora

Critical Buffer Overflow Vulnerabilities in Corosync for Fedora

First seen 12 Sep 2026, 19:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 13, 2026 at 00:41 UTC
  • •CVE-2026-81665 and CVE-2026-81666 are critical vulnerabilities in Corosync.
  • •Both vulnerabilities involve heap-based buffer overflows during message reassembly.
  • •Users are urged to apply patches released on September 4, 2026, to secure their systems.

Two critical vulnerabilities, CVE-2026-81665 and CVE-2026-81666, were disclosed for the Corosync Cluster Engine affecting Fedora versions 43 and 45. Both vulnerabilities involve heap-based buffer overflows that could be exploited during fragmented message reassembly. The vulnerabilities were published on September 4, 2026, and have been addressed in updates released by Jan Friesse. Users are advised to apply the updates using the 'dnf' package manager to mitigate potential exploitation. The affected systems include various configurations of Fedora Linux that utilize Corosync. No active exploitation has been reported as of now, but the vulnerabilities are critical and should be patched immediately.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-04
CVE-2026-81665 and CVE-2026-81666 published
Two critical vulnerabilities in Corosync were disclosed, affecting Fedora versions 43 and 45.
Linuxsecurity
2026-09-04
Patch released for Fedora 45
An update was released by Jan Friesse to fix the vulnerabilities in Corosync for Fedora 45.
Linuxsecurity
2026-09-04
Patch released for Fedora 43
An update was released by Jan Friesse to fix the vulnerabilities in Corosync for Fedora 43.
Linuxsecurity

More articles in this cluster (2)

Following this threat?

Track Fedora and CVE-2026-81665 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 3