CVE-2026-81666

Name of the Vulnerable Software and Affected Versions Corosync (affected versions not specified)

Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message length calculation suffers from an integer overflow. This allows a specially crafted network packet to trigger an out-of-bounds memory access, causing the Corosync daemon to crash and resulting in a denial of service for the affected cluster node. This issue does not affect 64-bit systems as they utilize 64-bit arithmetic for the length calculation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.