Vulnerability · Published May 7, 2026 · Assigned by Go
CVE-2026-33811Crash when handling long CNAME response in net
High 7.5
In plain English
A high-severity security flaw in net from Go standard library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.9%top 40.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:38504 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4047+545787c4 | ALSA-2026:38504 |
| AlmaLinux:8 | aardvark-dns | 2:1.10.1-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:38504 |
| AlmaLinux:8 | buildah | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:38504 |
| AlmaLinux:8 | buildah-tests | 2:1.33.14-4.module_el8.10.0+4213+0493256b | ALSA-2026:38504 |
| AlmaLinux:8 | cockpit-podman | 84.1-1.module_el8.10.0+4102+6c76e544 | ALSA-2026:38504 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4090+91932338 | ALSA-2026:38504 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:8 | conmon | 3:2.1.10-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux:8 | container-selinux | 2:2.229.0-3.module_el8.10.0+4213+0493256b | ALSA-2026:38504 |
| AlmaLinux:8 | containernetworking-plugins | 1:1.4.0-8.module_el8.10.0+4136+16425343 | ALSA-2026:38504 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+4089+ce72bbbe | ALSA-2026:38504 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:38504 |
| AlmaLinux:8 | containers-common | 2:1-82.module_el8.10.0+3876+e55593a8 | ALSA-2026:38504 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3845+87b84552 | ALSA-2026:38504 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4047+545787c4 | ALSA-2026:38504 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:38504 |
| AlmaLinux:8 | crit | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:38504 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | criu | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:38504 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4089+ce72bbbe | ALSA-2026:38504 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4016+efd18bf8 | ALSA-2026:38504 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:8 | criu-devel | 3.18-5.module_el8.10.0+3858+6ad51f9f | ALSA-2026:38504 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3926+f12484f5 | ALSA-2026:38504 |
| AlmaLinux:8 | criu-libs | 3.18-5.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:38504 |
| AlmaLinux:8 | crun | 1.14.3-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | delve | 1.25.2-1.module_el8.10.0+4074+24330916 | ALSA-2026:22112 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+4047+545787c4 | ALSA-2026:38504 |
| AlmaLinux:8 | fuse-overlayfs | 1.13-1.module_el8.10.0+3792+03eaed9c | ALSA-2026:38504 |
| AlmaLinux:10 | git-lfs | 3.7.1-5.el10_2.6 | ALSA-2026:39272 |
| AlmaLinux:8 | git-lfs | 3.4.1-12.el8_10 | ALSA-2026:39266 |
| AlmaLinux:9 | git-lfs | 3.7.1-4.el9_8.2 | ALSA-2026:39319 |
| AlmaLinux:8 | go-toolset | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | go-toolset | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-bin | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-bin | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-docs | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-docs | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-misc | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-misc | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-race | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-race | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-src | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-src | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:8 | golang-tests | 1.25.10-1.module_el8.10.0+4187+c45165c4 | ALSA-2026:22112 |
| AlmaLinux:9 | golang-tests | 1.26.3-1.el9_8 | ALSA-2026:22121 |
| AlmaLinux:10 | ipp-usb | 0.9.27-7.el10_2.2 | ALSA-2026:35832 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4023+db236c53 | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4090+91932338 | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4089+ce72bbbe | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp | 4.4.0-2.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4102+6c76e544 | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:8 | libslirp-devel | 4.4.0-2.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:38504 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux:8 | netavark | 2:1.10.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4047+545787c4 | ALSA-2026:38504 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+3909+6e1c1eb7 | ALSA-2026:38504 |
| AlmaLinux:8 | oci-seccomp-bpf-hook | 1.2.10-1.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:9 | oci-seccomp-bpf-hook | 1.2.11-2.el9_8 | ALSA-2026:36617 |
| AlmaLinux:10 | opentelemetry-collector | 0.152.1-1.el10_2 | ALSA-2026:34357 |
| AlmaLinux:9 | opentelemetry-collector | 0.152.1-1.el9_8 | ALSA-2026:34359 |
| AlmaLinux:8 | podman | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-catatonit | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-docker | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-gvproxy | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-plugins | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-remote | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | podman-tests | 4:4.9.4-34.module_el8.10.0+4227+f1240cfc | ALSA-2026:38504 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3876+e55593a8 | ALSA-2026:38504 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3970+8445edf6 | ALSA-2026:38504 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+3901+4b80ecd7 | ALSA-2026:38504 |
| AlmaLinux:8 | python3-criu | 3.18-5.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | python3-podman | 4.9.0-3.module_el8.10.0+4016+efd18bf8 | ALSA-2026:38504 |
| AlmaLinux:8 | runc | 4:1.2.9-4.module_el8.10.0+4136+16425343 | ALSA-2026:38504 |
| AlmaLinux:8 | skopeo | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:38504 |
| AlmaLinux:8 | skopeo-tests | 2:1.14.6-2.module_el8.10.0+4211+49ea0979 | ALSA-2026:38504 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+3926+f12484f5 | ALSA-2026:38504 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4082+f7f0c95e | ALSA-2026:38504 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4023+db236c53 | ALSA-2026:38504 |
| AlmaLinux:8 | slirp4netns | 1.2.3-1.module_el8.10.0+4047+545787c4 | ALSA-2026:38504 |
| AlmaLinux:8 | toolbox | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | toolbox-tests | 0.0.99.5.1-1.module_el8.10.0+4120+03ad4b47 | ALSA-2026:38504 |
| AlmaLinux:8 | udica | 0.2.6-21.module_el8.10.0+4068+0e21408f | ALSA-2026:38504 |
| AlmaLinux:10 | yggdrasil | 0.4.9.2-1.el10_2 | ALSA-2026:39573 |
| AlmaLinux:10 | yggdrasil-devel | 0.4.9.2-1.el10_2 | ALSA-2026:39573 |
| Alpine:v3.23 | go | 1.25.10-r0 | ALPINE-CVE-2026-33811 |
| Alpine:v3.24 | go | 1.26.3-r0 | ALPINE-CVE-2026-33811 |
| Alpine:v3.24 | rclone | 1.74.1-r0 | ALPINE-CVE-2026-33811 |
| Debian:12 | golang-1.19 | no fix listed | DEBIAN-CVE-2026-33811 |
| Debian:13 | golang-1.24 | no fix listed | DEBIAN-CVE-2026-33811 |
| Debian:14 | golang-1.26 | 1.26.3-1 | DEBIAN-CVE-2026-33811 |
| Go | stdlib | 1.25.10, 1.26.3 | GO-2026-4981 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | aardvark-dns | 2:1.10.1-2.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | cockpit-podman | 0:84.1-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | conmon | 3:2.1.10-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | container-selinux | 2:2.229.0-3.module+el8.10.0+40223+e940a224 | RLSA-2026:38504 |
| Rocky Linux:8 | containernetworking-plugins | 1:1.4.0-8.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | containers-common | 2:1-82.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | criu | 0:3.18-5.module+el8.10.0+1825+623b0c20 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | crun | 0:1.14.3-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:38504 |
| Rocky Linux:8 | delve | 0:1.25.2-1.module+el8.10.0+40035+ee0a7047 | RLSA-2026:22112 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40047+0c0a73f4 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1880+8e896d1b | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1825+623b0c20 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | fuse-overlayfs | 0:1.13-1.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:10 | git-lfs | 0:3.7.1-5.el10_2.6 | RLSA-2026:39272 |
| Rocky Linux:8 | git-lfs | 0:3.4.1-12.el8_10 | RLSA-2026:39266 |
| Rocky Linux:9 | git-lfs | 0:3.7.1-4.el9_8.2 | RLSA-2026:39319 |
| Rocky Linux:10 | golang | 0:1.26.3-4.el10_2 | RLSA-2026:22120 |
| Rocky Linux:8 | golang | 0:1.25.10-1.module+el8.10.0+40200+0fd0f175 | RLSA-2026:22112 |
| Rocky Linux:9 | golang | 0:1.26.3-1.el9_8 | RLSA-2026:22121 |
| Rocky Linux:10 | golang-github-openprinting-ipp-usb | 0:0.9.27-7.el10_2.2 | RLSA-2026:35832 |
| Rocky Linux:10 | image-builder | 0:52.1-1.el10_2.2.rocky.0.1 | RLSA-2026:65534 |
| Rocky Linux:9 | image-builder | 0:52.1-1.el9_8.2 | RLSA-2026:65886 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1843+6892ab28 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1825+623b0c20 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1815+5fe7415e | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1896+b18fa106 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1948+4b5cd4a9 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1872+2e18eb19 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+1874+ce489889 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+40133+32c21f88 | RLSA-2026:38504 |
| Rocky Linux:8 | libslirp | 0:4.4.0-2.module+el8.10.0+2001+6a33db9f | RLSA-2026:38504 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Go standard library | net | 0 – before 1.25.101.26.0-0 – before 1.26.3 |
Weakness: CWE-1341 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- https://go.dev/issue/78803
- https://go.dev/cl/767860
- https://groups.google.com/g/golang-announce/c/qcCIEXso47M
- https://pkg.go.dev/vuln/GO-2026-4981
- https://access.redhat.com/security/cve/CVE-2026-33811 vdb-entry, x_refsource_REDHAT
- RHBZ#2467822 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:42079 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:41019 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54191 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42078 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50319 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54757 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56785 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56910 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:56852 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:60018 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:57482 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54552 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42082 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:50336 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:48151 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:36796 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39810 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42150 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42151 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42240 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49703 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:67149 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:49702 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:53413 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:61313 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:54168 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:51187 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:39272 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22120 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:65534 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:35832 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:34357 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:42946 vendor-advisory, x_refsource_REDHAT