7.5
High
CVE-2026-33811 When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
Description
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| net 1.26 | 1.26.0-0 → < 1.26.3 | 1.26.3 |
| net 1.25 | earliest → < 1.25.10 | 1.25.10 |
| Red Hat Hardened Images 1.26 | earliest → < 1.26.4-2.hum1 | 1.26.4-2.hum1 |
| Red Hat OpenShift Service Mesh 3.0 1782222607 | earliest → < 1782222607 | 1782222607 |
| Red Hat OpenShift Service Mesh 3.1 1782222451 | earliest → < 1782222451 | 1782222451 |
| Red Hat OpenShift Service Mesh 3.2 1782224541 | earliest → < 1782224541 | 1782224541 |
| Red Hat OpenShift Service Mesh 3.3 1782222038 | earliest → < 1782222038 | 1782222038 |
| Assisted Installer for Red Hat OpenShift Container Platform 2 | Versions not published | |
| Builds for Red Hat OpenShift | Versions not published |
Show the 196 other branches Hide the 196 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| cert-manager Operator for Red Hat OpenShift | Versions not published | |
| Compliance Operator | Versions not published | |
| Confidential Compute Attestation | Versions not published | |
| Cryostat 4 | Versions not published | |
| Custom Metric Autoscaler operator for Red Hat Openshift | Versions not published | |
| Deployment Validation Operator | Versions not published | |
| External Secrets Operator for Red Hat OpenShift | Versions not published | |
| Fence Agents Remediation Operator | Versions not published | |
| File Integrity Operator | Versions not published | |
| Gatekeeper 3 | Versions not published | |
| Logging Subsystem for Red Hat OpenShift | Versions not published | |
| Logical Volume Manager Storage | Versions not published | |
| Machine Deletion Remediation Operator | Versions not published | |
| Migration Toolkit for Applications 8 | Versions not published | |
| Migration Toolkit for Containers | Versions not published | |
| mirror registry for Red Hat OpenShift | Versions not published | |
| mirror registry for Red Hat OpenShift 2 | Versions not published | |
| Multiarch Tuning Operator | Versions not published | |
| Multicluster Engine for Kubernetes | Versions not published | |
| Multicluster Global Hub | Versions not published | |
| Network Observability Operator | Versions not published | |
| Node HealthCheck Operator | Versions not published | |
| OpenShift API for Data Protection | Versions not published | |
| OpenShift Developer Tools and Services | Versions not published | |
| OpenShift Lightspeed | Versions not published | |
| OpenShift Pipelines | Versions not published | |
| OpenShift Serverless | Versions not published | |
| OpenShift Source-to-Image (S2I) | Versions not published | |
| Power monitoring for Red Hat OpenShift | Versions not published | |
| Red Hat Advanced Cluster Management for Kubernetes 2 | Versions not published | |
| Red Hat Advanced Cluster Security 4 | Versions not published | |
| Red Hat Ansible Automation Platform 2 | Versions not published | |
| Red Hat build of Apicurio Registry 2 | Versions not published | |
| Red Hat Ceph Storage 5 | Versions not published | |
| Red Hat Ceph Storage 6 | Versions not published | |
| Red Hat Ceph Storage 9 | Versions not published | |
| Red Hat Certification Program for Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Connectivity Link 1 | Versions not published | |
| Red Hat Developer Hub | Versions not published | |
| Red Hat Edge Manager 1 | Versions not published | |
| Red Hat Enterprise Linux 10 | Versions not published | |
| Red Hat Enterprise Linux 7 | Versions not published | |
| Red Hat Enterprise Linux 8 | Versions not published | |
| Red Hat Enterprise Linux 9 | Versions not published | |
| Red Hat Enterprise Linux AI (RHEL AI) 3 | Versions not published | |
| Red Hat Lightspeed for Runtimes Operator | Versions not published | |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift Cluster Manager CLI | Versions not published | |
| Red Hat OpenShift Container Platform 4 | Versions not published | |
| Red Hat Openshift Data Foundation 4 | Versions not published | |
| Red Hat OpenShift Dev Spaces | Versions not published | |
| Red Hat OpenShift Dev Workspaces Operator | Versions not published | |
| Red Hat OpenShift distributed tracing 3 | Versions not published | |
| Red Hat OpenShift for Windows Containers | Versions not published | |
| Red Hat OpenShift GitOps | Versions not published | |
| Red Hat OpenShift on AWS | Versions not published | |
| Red Hat OpenShift Virtualization 4 | Versions not published | |
| Red Hat OpenStack Platform 16.2 | Versions not published | |
| Red Hat OpenStack Platform 17.1 | Versions not published | |
| Red Hat OpenStack Platform 18.0 | Versions not published | |
| Red Hat Quay 3 | Versions not published | |
| Red Hat Satellite 6 | Versions not published | |
| Red Hat Service Interconnect 1 | Versions not published | |
| Red Hat Service Interconnect 2 | Versions not published | |
| Red Hat Trusted Artifact Signer | Versions not published | |
| Red Hat Web Terminal | Versions not published | |
| Security Profiles Operator | Versions not published | |
| Service Telemetry Framework 1.5 | Versions not published | |
| streams for Apache Kafka 3 | Versions not published | |
| Zero Trust Workload Identity Manager | Versions not published | |
| Zero Trust Workload Identity Manager - Tech Preview | Versions not published | |
| OpenShift Service Mesh 2 | Versions not published | |
| OpenShift Service Mesh 3 | Versions not published | |
| Red Hat 3scale API Management Platform 2 | Versions not published | |
| Red Hat AMQ Clients | Versions not published | |
| Red Hat Developer Hub 1.9 1782767215 | earliest → < 1782767215 | 1782767215 |
| Red Hat Enterprise Linux AppStream (v. 10) | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 9) | Versions not published | |
| Logging Subsystem for Red Hat OpenShift 6.4 1782408807 | earliest → < 1782408807 | 1782408807 |
| Red Hat OpenShift GitOps 1.19 1782292352 | earliest → < 1782292352 | 1782292352 |
| Red Hat OpenShift GitOps 1.20 1782383826 | earliest → < 1782383826 | 1782383826 |
| Red Hat OpenShift GitOps 1.21 1782910941 | earliest → < 1782910941 | 1782910941 |
| Red Hat Advanced Cluster Security for Kubernetes 4.10 1783357140 | earliest → < 1783357140 | 1783357140 |
| Red Hat Advanced Cluster Security for Kubernetes 4.11 1783352589 | earliest → < 1783352589 | 1783352589 |
| Red Hat Advanced Cluster Security for Kubernetes 4.9 1783357116 | earliest → < 1783357116 | 1783357116 |
| Red Hat OpenShift Builds 1.7.4 1783057868 | earliest → < 1783057868 | 1783057868 |
| RHEM 1.0 for RHEL 9 | Versions not published | |
| Red Hat Enterprise Linux AppStream (v. 8) | Versions not published | |
| Red Hat Edge Manager 1.0 1783502438 | earliest → < 1783502438 | 1783502438 |
| Red Hat Trusted Artifact Signer 1.4 4 | earliest → < 4-1.4.2 | 4-1.4.2 |
| Red Hat OpenShift Service Mesh 3 1782222607 | earliest → < 1782222607 | 1782222607 |
| Red Hat OpenStack Services on OpenShift 18.0 1786612662 | earliest → < 1786612662 | 1786612662 |
| multicluster engine for Kubernetes 2.6 1783985999 | earliest → < 1783985999 | 1783985999 |
| Red Hat Edge Manager 1.1 1784127736 | earliest → < 1784127736 | 1784127736 |
| RHEM 1.1 for RHEL 10 | Versions not published | |
| RHEM 1.1 for RHEL 9 | Versions not published | |
| Multicluster Global Hub 1.4.5 1784061472 | earliest → < 1784061472 | 1784061472 |
| Red Hat Advanced Cluster Security 4.9 1783357116 | earliest → < 1783357116 | 1783357116 |
| Red Hat multicluster global hub 1.4.3 1784061472 | earliest → < 1784061472 | 1784061472 |
| Red Hat OpenShift Builds 1.7.1 1783057868 | earliest → < 1783057868 | 1783057868 |
| Red Hat OpenShift GitOps 1.2 1782383826 | earliest → < 1782383826 | 1782383826 |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions not published | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 for RHEL 9 | Versions not published | |
| Red Hat Satellite 6.16 for RHEL 8 | Versions not published | |
| Red Hat Satellite 6.16 for RHEL 9 | Versions not published | |
| Red Hat Satellite 6.17 for RHEL 9 | Versions not published | |
| Red Hat Satellite 6.18 for RHEL 9 | Versions not published | |
| Red Hat Satellite 6.19 for RHEL 9 | Versions not published | |
| Red Hat Ansible Automation Platform 2.6 1783962464 | earliest → < 1783962464 | 1783962464 |
| Red Hat Migration Toolkit 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat OpenShift AI 2.25 1787330073 | earliest → < 1787330073 | 1787330073 |
| Red Hat Web Terminal 1.11 1784296203 | earliest → < 1784296203 | 1784296203 |
| Red Hat Web Terminal 1.12 1784247610 | earliest → < 1784247610 | 1784247610 |
| Red Hat Web Terminal 1.13 1784296127 | earliest → < 1784296127 | 1784296127 |
| Red Hat Web Terminal 1.14 1784296114 | earliest → < 1784296114 | 1784296114 |
| Red Hat Web Terminal 1.15 1784296033 | earliest → < 1784296033 | 1784296033 |
| Red Hat Web Terminal 1.16 1784295767 | earliest → < 1784295767 | 1784295767 |
| Multicluster Global Hub 1.5.6 1784127491 | earliest → < 1784127491 | 1784127491 |
| OpenShift API for Data Protection 1.6 1784058822 | earliest → < 1784058822 | 1784058822 |
| Red Hat Migration Toolkit for Applications 8.2 1784211378 | earliest → < 1784211378 | 1784211378 |
| Multicluster Global Hub 1.6.4 1784152046 | earliest → < 1784152046 | 1784152046 |
| Logging for Red Hat OpenShift 6.4 1782408807 | earliest → < 1782408807 | 1782408807 |
| multicluster engine for Kubernetes 2.10 1784915379 | earliest → < 1784915379 | 1784915379 |
| Multicluster Global Hub 1.6.2 1784152046 | earliest → < 1784152046 | 1784152046 |
| Red Hat multicluster global hub 1.5.0 1784127491 | earliest → < 1784127491 | 1784127491 |
| multicluster engine for Kubernetes 2.8 1784306906 | earliest → < 1784306906 | 1784306906 |
| Multicluster Global Hub 1.7.2 1785775948 | earliest → < 1785775948 | 1785775948 |
| Multicluster Global Hub 1.7.2 1784768332 | earliest → < 1784768332 | 1784768332 |
| Cryostat 4 on RHEL 9 4.2 | earliest → < 4.2.0-19 | 4.2.0-19 |
| Logging Subsystem for Red Hat OpenShift 6.2 1784747813 | earliest → < 1784747813 | 1784747813 |
| Logging for Red Hat OpenShift 6.2 1784747813 | earliest → < 1784747813 | 1784747813 |
| multicluster engine for Kubernetes 2.1 1784915379 | earliest → < 1784915379 | 1784915379 |
| Multicluster Global Hub 1.5.4 1784127491 | earliest → < 1784127491 | 1784127491 |
| Multicluster Global Hub 1.7.1 1784768332 | earliest → < 1784768332 | 1784768332 |
| Red Hat multicluster global hub 1.4.4 1784061472 | earliest → < 1784061472 | 1784061472 |
| Red Hat multicluster global hub 1.6.0 1784152046 | earliest → < 1784152046 | 1784152046 |
| Red Hat OpenShift Builds 1.7.3 1783057868 | earliest → < 1783057868 | 1783057868 |
| Red Hat Enterprise Linux 10.0 Extended Update Support | Versions not published | |
| Red Hat Migration Toolkit for Applications 8.1 1785171639 | earliest → < 1785171639 | 1785171639 |
| Red Hat OpenShift distributed tracing 3.10.1 1785704547 | earliest → < 1785704547 | 1785704547 |
| Logging Subsystem for Red Hat OpenShift 6.0 1785418851 | earliest → < 1785418851 | 1785418851 |
| OpenShift API for Data Protection 1.3 1785180878 | earliest → < 1785180878 | 1785180878 |
| OpenShift Developer Tools and Services 1.6.3 1784728036 | earliest → < 1784728036 | 1784728036 |
| Red Hat Satellite 6.18 1785923308 | earliest → < 1785923308 | 1785923308 |
| Red Hat Satellite 6.19 1785929994 | earliest → < 1785929994 | 1785929994 |
| Logging for Red Hat OpenShift 6.0 1785418851 | earliest → < 1785418851 | 1785418851 |
| OpenShift Developer Tools and Services 1.6.2 1784728036 | earliest → < 1784728036 | 1784728036 |
| Red Hat OpenShift distributed tracing 3.10.2 1785704547 | earliest → < 1785704547 | 1785704547 |
| Node Maintenance Operator | Versions not published | |
| Self Node Remediation Operator | Versions not published | |
| Storage-Based Remediation | Versions not published | |
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | Versions not published | |
| Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | Versions not published | |
| Red Hat Enterprise Linux 9.6 Extended Update Support | Versions not published | |
| Red Hat OpenShift Workload Availability 0.12 1785202723 | earliest → < 1785202723 | 1785202723 |
| Red Hat OpenShift Workload Availability 0.7 1785203508 | earliest → < 1785203508 | 1785203508 |
| Red Hat OpenShift Workload Availability 5.7 1785202847 | earliest → < 1785202847 | 1785202847 |
| Streams for Apache Kafka 3.2.1 | Versions not published | |
| Multicluster Global Hub 1.5.7 1784127491 | earliest → < 1784127491 | 1784127491 |
| Multicluster Global Hub 1.6.5 1784152046 | earliest → < 1784152046 | 1784152046 |
| OpenShift Compliance Operator 1 1786380082 | earliest → < 1786380082 | 1786380082 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 1786483782 | earliest → < 1786483782 | 1786483782 |
| Red Hat OpenShift Workload Availability 0.13 1785203036 | earliest → < 1785203036 | 1785203036 |
| Red Hat OpenShift Workload Availability 0.3 1785203474 | earliest → < 1785203474 | 1785203474 |
| Red Hat OpenShift Workload Availability 0.8 1785203079 | earliest → < 1785203079 | 1785203079 |
| Compliance Operator 1 1786380082 | earliest → < 1786380082 | 1786380082 |
| Red Hat multicluster global hub 1.4.2 1784061472 | earliest → < 1784061472 | 1784061472 |
| Red Hat OpenShift distributed tracing 3.10.0 1785704547 | earliest → < 1785704547 | 1785704547 |
| Red Hat Migration Toolkit for Containers 1.8 1783914276 | earliest → < 1783914276 | 1783914276 |
| Red Hat multicluster global hub 1.5.1 1784127491 | earliest → < 1784127491 | 1784127491 |
| Red Hat OpenShift Container Platform 4.14 1787001863 | earliest → < 1787001863 | 1787001863 |
| Red Hat OpenShift Container Platform 4.15 1787028097 | earliest → < 1787028097 | 1787028097 |
| Red Hat OpenShift Container Platform 4.16 1786788331 | earliest → < 1786788331 | 1786788331 |
| Red Hat OpenShift Container Platform 4.18 1786754425 | earliest → < 1786754425 | 1786754425 |
| Red Hat OpenShift Container Platform 4.19 1786490745 | earliest → < 1786490745 | 1786490745 |
| Logging Subsystem for Red Hat OpenShift 6.5 1786645248 | earliest → < 1786645248 | 1786645248 |
| multicluster engine for Kubernetes 2.11 1786907276 | earliest → < 1786907276 | 1786907276 |
| multicluster engine for Kubernetes 2.9 1786658519 | earliest → < 1786658519 | 1786658519 |
| Multicluster Global Hub 1.7.0 1785775948 | earliest → < 1785775948 | 1785775948 |
| Multicluster Global Hub 1.7.0 1784768332 | earliest → < 1784768332 | 1784768332 |
| OpenShift API for Data Protection 1.4 1786944540 | earliest → < 1786944540 | 1786944540 |
| Red Hat Advanced Cluster Management for Kubernetes 2.16 1786908301 | earliest → < 1786908301 | 1786908301 |
| Red Hat OpenShift AI 3.4 1787562200 | earliest → < 1787562200 | 1787562200 |
| Red Hat OpenShift Container Platform 4.20 1786525840 | earliest → < 1786525840 | 1786525840 |
| Red Hat OpenShift Container Platform 4.21 1786526139 | earliest → < 1786526139 | 1786526139 |
| Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | Versions not published | |
| Red Hat OpenShift Container Platform 4.17 1787554347 | earliest → < 1787554347 | 1787554347 |
| OpenShift Developer Tools and Services 1.6.0 1784728036 | earliest → < 1784728036 | 1784728036 |
| Red Hat Lightspeed (formerly Insights) for Runtimes 1 1786483782 | earliest → < 1786483782 | 1786483782 |
| Red Hat multicluster global hub 1.5.3 1784127491 | earliest → < 1784127491 | 1784127491 |
| Red Hat OpenShift Container Platform 4.2 1786525840 | earliest → < 1786525840 | 1786525840 |
| Logging for Red Hat OpenShift 6 1785418851 | earliest → < 1785418851 | 1785418851 |
| ExternalDNS Operator | Versions not published | |
| OpenShift API for Data Protection 1.5 1788860461 | earliest → < 1788860461 | 1788860461 |
References
- go.dev go.dev
- go.dev go.dev
- groups.google.com groups.google.com
- pkg.go.dev pkg.go.dev
Timeline
- Published
- Last modified
Other CVEs of net
The 4 CVEs of net →
CVE-2026-46600
Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
7.5
High
CVE-2026-39836
The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
7.5
High
CVE-2024-24788
A malformed DNS message in response to a query can cause the Lookup functions to get stuck in an infinite loop
5.9
Medium