Double-free CVE-2026-33811 via LookupCNAME in Go net (<=1.26.2)
CVE-2026-33811 Published on May 7, 2026
Crash when handling long CNAME response in net
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
Vulnerability Analysis
CVE-2026-33811 can be exploited with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality and integrity, and a high impact on availability.
Privileges Required:
NONE
Confidentiality Impact:
NONE
Availability Impact:
HIGH
Weakness Type
CWE-1341
Products Associated with CVE-2026-33811
Want to know whenever a new CVE is published for Red Hat products? stack.watch will email you.
Affected Versions
Go standard library
net:
-
Before 1.25.10
is affected.
-
Version 1.26.0-0 and below 1.26.3
is affected.
Red Hat
Cryostat 4 on RHEL 9:
-
Version 4.2.0-19 and below *
is unaffected.
Red Hat Ansible Automation Platform 2.5 for RHEL 8:
-
Version 0:1.6.6-1.el8ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.5 for RHEL 8:
-
Version 0:2.5.10-7.el8ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.5 for RHEL 9:
-
Version 0:1.6.6-1.el9ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.5 for RHEL 9:
-
Version 0:2.6.17-2.el9ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.6 for RHEL 10:
-
Version 0:1.6.6-1.el10ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.6 for RHEL 9:
-
Version 0:1.6.6-1.el9ap and below *
is unaffected.
Red Hat Ansible Automation Platform 2.6 for RHEL 9:
-
Version 0:2.6.17-2.el9ap and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 0:0.152.1-1.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 0:0.9.27-7.el10_2.2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 0:3.7.1-5.el10_2.6 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 0:0.4.9.2-1.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10:
-
Version 0:0.2.10-1.el10_2 and below *
is unaffected.
Red Hat Enterprise Linux 10.0 Extended Update Support:
-
Version 0:1.26.1-1.el10_0 and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 1:0.2.5-8.el8_10 and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 8100020260709093628.afee755d and below *
is unaffected.
Red Hat Enterprise Linux 8:
-
Version 0:3.4.1-12.el8_10 and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 0:0.152.1-1.el9_8 and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 0:1.2.11-2.el9_8 and below *
is unaffected.
Red Hat Enterprise Linux 9:
-
Version 0:3.7.1-4.el9_8.2 and below *
is unaffected.
Red Hat OpenStack Services on OpenShift 18.0:
-
Version 0:0.1.1-18.0.20260602234716.a95ae05.el9ost and below *
is unaffected.
Red Hat Satellite 6.16 for RHEL 8:
-
Version 0:0.0.4-1.el8sat and below *
is unaffected.
Red Hat Satellite 6.16 for RHEL 9:
-
Version 0:0.0.4-1.el9sat and below *
is unaffected.
Red Hat Satellite 6.17 for RHEL 9:
-
Version 0:0.0.4-1.el9sat and below *
is unaffected.
Red Hat Satellite 6.18 for RHEL 9:
-
Version 0:0.0.4-1.el9sat and below *
is unaffected.
Red Hat Satellite 6.19 for RHEL 9:
-
Version 0:0.0.4-1.el9sat and below *
is unaffected.
Red Hat
RHEM 1.0 for RHEL 9:
-
Version 0:1.0.3-1.el9em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 10:
-
Version 0:1.1.3-1.el10em and below *
is unaffected.
Red Hat
RHEM 1.1 for RHEL 9:
-
Version 0:1.1.3-1.el9em and below *
is unaffected.
Logging for Red Hat OpenShift 6.2:
-
Version 1784747813 and below *
is unaffected.
Logging for Red Hat OpenShift 6.4:
-
Version 1782408807 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.1:
-
Version 1784915379 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.6:
-
Version 1783985999 and below *
is unaffected.
Red Hat
multicluster engine for Kubernetes 2.8:
-
Version 1784306906 and below *
is unaffected.
Red Hat
Multicluster Global Hub 1.5.4:
-
Version 1784127491 and below *
is unaffected.
Red Hat
Multicluster Global Hub 1.7.1:
-
Version 1784768332 and below *
is unaffected.
Red Hat
OpenShift API for Data Protection 1.6:
-
Version 1784058822 and below *
is unaffected.
Red Hat Advanced Cluster Security 4.9:
-
Version 1783357116 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.10:
-
Version 1783357140 and below *
is unaffected.
Red Hat Advanced Cluster Security for Kubernetes 4.11:
-
Version 1783352589 and below *
is unaffected.
Red Hat Ansible Automation Platform 2.6:
-
Version 1783962464 and below *
is unaffected.
Red Hat Developer Hub 1.9:
-
Version 1782767215 and below *
is unaffected.
Red Hat Edge Manager 1.0:
-
Version 1783502438 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784194574 and below *
is unaffected.
Red Hat Edge Manager 1.1:
-
Version 1784127736 and below *
is unaffected.
Red Hat Hardened Images:
-
Version 1.25.11-2.hum1 and below *
is unaffected.
Red Hat Hardened Images:
-
Version 1.26.4-2.hum1 and below *
is unaffected.
Red Hat Migration Toolkit 1.8:
-
Version 1783914276 and below *
is unaffected.
Red Hat Migration Toolkit for Applications 8.1:
-
Version 1785171639 and below *
is unaffected.
Red Hat Migration Toolkit for Applications 8.2:
-
Version 1784211378 and below *
is unaffected.
Red Hat multicluster global hub 1.4.4:
-
Version 1784061472 and below *
is unaffected.
Red Hat multicluster global hub 1.6.0:
-
Version 1784152046 and below *
is unaffected.
Red Hat OpenShift AI 2.25:
-
Version 1783544461 and below *
is unaffected.
Red Hat OpenShift AI 2.25:
-
Version 1783946386 and below *
is unaffected.
Red Hat OpenShift Builds 1.7.3:
-
Version 1783057868 and below *
is unaffected.
Red Hat OpenShift distributed tracing 3.10.1:
-
Version 1785704547 and below *
is unaffected.
Red Hat OpenShift GitOps 1.19:
-
Version 1782292352 and below *
is unaffected.
Red Hat OpenShift GitOps 1.2:
-
Version 1782383826 and below *
is unaffected.
Red Hat OpenShift GitOps 1.21:
-
Version 1782910941 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.0:
-
Version 1782222217 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.0:
-
Version 1782223341 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.0:
-
Version 1782296193 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.0:
-
Version 1782222607 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.1:
-
Version 1782222163 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.1:
-
Version 1782223138 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.1:
-
Version 1782222394 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.1:
-
Version 1782222451 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.2:
-
Version 1782226178 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.2:
-
Version 1782224487 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.2:
-
Version 1782303211 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.2:
-
Version 1782224541 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.3:
-
Version 1782223045 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.3:
-
Version 1782222366 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.3:
-
Version 1782310747 and below *
is unaffected.
Red Hat OpenShift Service Mesh 3.3:
-
Version 1782222038 and below *
is unaffected.
Red Hat Trusted Artifact Signer 1.4:
-
Version 4-1.4.2 and below *
is unaffected.
-
Version 4-1.4.3 and below *
is unaffected.
Red Hat Web Terminal 1.11:
-
Version 1784296203 and below *
is unaffected.
Red Hat Web Terminal 1.12:
-
Version 1784247610 and below *
is unaffected.
Red Hat Web Terminal 1.13:
-
Version 1784296127 and below *
is unaffected.
Red Hat Web Terminal 1.14:
-
Version 1784296114 and below *
is unaffected.
Red Hat Web Terminal 1.15:
-
Version 1784296033 and below *
is unaffected.
Red Hat Web Terminal 1.16:
-
Version 1784295767 and below *
is unaffected.
Assisted Installer for Red Hat OpenShift Container Platform 2:
cert-manager Operator for Red Hat OpenShift:
Red Hat
Compliance Operator:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Red Hat
Confidential Compute Attestation:
Custom Metric Autoscaler operator for Red Hat Openshift:
Red Hat
Deployment Validation Operator:
External Secrets Operator for Red Hat OpenShift:
Red Hat
Fence Agents Remediation Operator:
Red Hat
File Integrity Operator:
Red Hat
Gatekeeper 3:
Logging Subsystem for Red Hat OpenShift:
Red Hat
Logical Volume Manager Storage:
Red Hat
Logical Volume Manager Storage:
Red Hat
Logical Volume Manager Storage:
Red Hat
Machine Deletion Remediation Operator:
mirror registry for Red Hat OpenShift:
mirror registry for Red Hat OpenShift 2:
Red Hat
Multiarch Tuning Operator:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Engine for Kubernetes:
Red Hat
Multicluster Global Hub:
Red Hat
Network Observability Operator:
Red Hat
Node HealthCheck Operator:
Red Hat
Node HealthCheck Operator:
Red Hat
Node HealthCheck Operator:
Red Hat
OpenShift Developer Tools and Services:
Red Hat
OpenShift Lightspeed:
Red Hat
OpenShift Pipelines:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Serverless:
Red Hat
OpenShift Service Mesh 2:
Red Hat
OpenShift Service Mesh 2:
Red Hat
OpenShift Service Mesh 3:
Red Hat
OpenShift Source-to-Image (S2I):
Power monitoring for Red Hat OpenShift:
Red Hat 3scale API Management Platform 2:
Red Hat 3scale API Management Platform 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat Advanced Cluster Management for Kubernetes 2:
Red Hat AMQ Clients:
Red Hat AMQ Clients:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat Ansible Automation Platform 2:
Red Hat build of Apicurio Registry 2:
Red Hat build of Apicurio Registry 2:
Red Hat Ceph Storage 5:
Red Hat Ceph Storage 6:
Red Hat Ceph Storage 9:
Red Hat Certification Program for Red Hat Enterprise Linux 9:
Red Hat Connectivity Link 1:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 10:
Red Hat Enterprise Linux 7:
Red Hat Enterprise Linux 7:
Red Hat Enterprise Linux 7:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 8:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux 9:
Red Hat Enterprise Linux AI (RHEL AI) 3:
Red Hat Lightspeed for Runtimes Operator:
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift AI (RHOAI):
Red Hat OpenShift Cluster Manager CLI:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat OpenShift Container Platform 4:
Red Hat Openshift Data Foundation 4:
Red Hat Openshift Data Foundation 4:
Red Hat Openshift Data Foundation 4:
Red Hat OpenShift Dev Spaces:
Red Hat OpenShift Dev Workspaces Operator:
Red Hat OpenShift for Windows Containers:
Red Hat OpenShift on AWS:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenShift Virtualization 4:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 16.2:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 17.1:
Red Hat OpenStack Platform 18.0:
Red Hat Quay 3:
Red Hat Quay 3:
Red Hat Satellite 6:
Red Hat Satellite 6:
Red Hat Service Interconnect 1:
Red Hat Service Interconnect 1:
Red Hat Service Interconnect 2:
Red Hat Service Interconnect 2:
Red Hat Service Interconnect 2:
Red Hat
Security Profiles Operator:
Red Hat
Service Telemetry Framework 1.5:
Red Hat
streams for Apache Kafka 3:
Red Hat
Zero Trust Workload Identity Manager:
Red Hat
Zero Trust Workload Identity Manager - Tech Preview:
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.