Log in Start free

Vulnerability · Published Apr 16, 2026 · Assigned by mitre

CVE-2026-41035

High 7.4

In plain English

A high-severity security flaw in rsync from Samba. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.4High
Exploit odds (30 days)0.4%top 66.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:10rsync3.4.1-6.el10_2ALSA-2026:19152
AlmaLinux:8rsync3.1.3-25.el8_10ALSA-2026:17481
AlmaLinux:9rsync3.2.5-7.el9_8ALSA-2026:19368
AlmaLinux:10rsync-daemon3.4.1-6.el10_2ALSA-2026:19152
AlmaLinux:8rsync-daemon3.1.3-25.el8_10ALSA-2026:17481
AlmaLinux:9rsync-daemon3.2.5-7.el9_8ALSA-2026:19368
AlmaLinux:10rsync-rrsync3.4.1-6.el10_2ALSA-2026:19152
AlmaLinux:9rsync-rrsync3.2.5-7.el9_8ALSA-2026:19368
Alpine:v3.20rsync3.4.1-r2ALPINE-CVE-2026-41035
Alpine:v3.21rsync3.4.1-r2ALPINE-CVE-2026-41035
Alpine:v3.22rsync3.4.1-r2ALPINE-CVE-2026-41035
Alpine:v3.23rsync3.4.1-r2ALPINE-CVE-2026-41035
Alpine:v3.24rsync3.4.1-r2ALPINE-CVE-2026-41035
Debian:12rsync3.2.7-1+deb12u5DEBIAN-CVE-2026-41035
Debian:13rsync3.4.1+ds1-5+deb13u2DEBIAN-CVE-2026-41035
Debian:14rsync3.4.2+ds1-1DEBIAN-CVE-2026-41035
Rocky Linux:10rsync0:3.4.1-6.el10_2RLSA-2026:19152
Rocky Linux:8rsync0:3.1.3-25.el8_10RLSA-2026:17481
Rocky Linux:9rsync0:3.2.5-7.el9_8RLSA-2026:19368
Ubuntu:22.04:LTSrsync3.2.7-0ubuntu0.22.04.6UBUNTU-CVE-2026-41035
Ubuntu:24.04:LTSrsync3.2.7-1ubuntu1.4UBUNTU-CVE-2026-41035
Ubuntu:25.10rsync3.4.1+ds1-5ubuntu1.2UBUNTU-CVE-2026-41035
Ubuntu:26.04:LTSrsync3.4.1+ds1-7ubuntu0.2UBUNTU-CVE-2026-41035

Affected products (as reported)

VendorProductVersions
Samba rsync 3.0.1 – through 3.4.1

Weakness: CWE-130, CWE-805 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

References