Integer Overflow Vulnerability in Oracle Linux Pacemaker Affects Multiple Versions

Linuxsecurity

Integer Overflow Vulnerability in Oracle Linux Pacemaker Affects Multiple Versions

First seen 22 Jul 2026, 15:26 UTC • •70.5

Article Content

1 / 3

Browse articles

ThreatCluster •July 23, 2026 at 14:55 UTC

•CVE-2026-10649 is a critical integer overflow vulnerability in Oracle Linux Pacemaker.
•Affected versions include Oracle Linux 8 and 9, with potential for remote code execution.
•Users are advised to audit privileges and apply the latest patches to mitigate risks.

Oracle has released security advisories for Oracle Linux 8 and 9 addressing a critical integer overflow vulnerability (CVE-2026-10649) in the Pacemaker software. This vulnerability allows for potential remote code execution through message decompression, affecting systems running specific versions of Pacemaker. The flaw could lead to privilege escalation and system-wide damage if exploited. Users are urged to audit Linux privileges to limit the risk of compromise and escalation. The vulnerability was published on June 16, 2026, and has been linked to upstream references in the pacemaker crm_report binary. Immediate action is recommended to mitigate risks associated with this vulnerability. The advisories provide specific package updates for affected systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 61d ago How this analysis works

Timeline

2026-06-16

CVE-2026-10649 published

Oracle disclosed an integer overflow vulnerability in Pacemaker affecting multiple Linux versions.

2026-07-20

Oracle Linux 9 advisory released

Oracle released an advisory for Oracle Linux 9 addressing CVE-2026-10649 with specific package updates.

2026-07-22

Oracle Linux 8 advisory released

An advisory for Oracle Linux 8 was published, also addressing CVE-2026-10649 with necessary patches.

More articles in this cluster (2)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Vulnerability (1)

CVE-2026-10649

Weakness (2)

Cwe-190 - Integer Overflow Or Wraparound
CWE-269 - Improper Privilege Management

Indicator (1)

5.6.0.1

Affected Platform (3)

Linux
Oracle Linux
Oracle Linux 9

Relationships

CVE-2026-10649 targets Linux
CVE-2026-10649 targets Oracle Linux
CVE-2026-10649 targets Oracle Linux 9
CVE-2026-10649 related to Cwe-190 - Integer Overflow Or Wraparound
CVE-2026-10649 related to CWE-269 - Improper Privilege Management
CVE-2026-10649 related to 5.6.0.1

Following this threat?

Track CVE-2026-10649 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…