CVE & CISA-KEV CatalogNVD
CVE-2026-41035
HIGH7.4
CVSS v3
Description
In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.
How to fix
Remediation Available
rsyncDebian
Fixed in:3.2.3-4+deb11u4CVE-2026-41035
Fixed in:3.2.7-1+deb12u5CVE-2026-41035
Fixed in:3.4.1+ds1-5+deb13u2CVE-2026-41035
Fixed in:3.4.2+ds1-1CVE-2026-41035
registry.redhat.io/discovery/discoveryRocky
Fixed in:ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64RHSA-2026:29197
Fixed in:server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64RHSA-2026:29197
Fixed in:ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64RHSA-2026:29197
Fixed in:server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64RHSA-2026:29197
registry.redhat.io/discovery/discoveryRed Hat / RHEL
Fixed in:ui-rhel9@sha256:16b33ed961e598805d155db8fea7bb293fb8ef95ddd45169c61fbeb5a8944b6b_amd64RHSA-2026:29197
Fixed in:server-rhel9@sha256:6a26bc89c61e7fad594399ceda8e170d66fa241d818eada7a12d9fec6bb08ecc_amd64RHSA-2026:29197
Fixed in:server-rhel9@sha256:ccd969d2710875e82896556e7b3c02e39147d03612452af6b0a916b656ce5b34_arm64RHSA-2026:29197
Fixed in:ui-rhel9@sha256:335f5d49155804969d193c3104fd144d7e499e2d5433965b217f379cbcf1cc75_arm64RHSA-2026:29197
rhcos-aarch64Red Hat / RHEL
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:414.92.202606231112-0RHSA-2026:28887
rhcos-aarch64Rocky
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:418.94.202606051320-0RHSA-2026:25181
rhcos-ppc64leRed Hat / RHEL
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:417.94.202606250942-0RHSA-2026:34098
rhcos-ppc64leRocky
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
rhcos-s390xRocky
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
rhcos-s390xRed Hat / RHEL
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
rhcos-x86_64Red Hat / RHEL
Fixed in:414.92.202606231112-0RHSA-2026:28887
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:413.92.202606160406-0RHSA-2026:26542
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
Fixed in:417.94.202606250942-0RHSA-2026:34098
rhcos-x86_64Rocky
Fixed in:415.92.202606030318-0RHSA-2026:23233
Fixed in:417.94.202606250942-0RHSA-2026:34098
Fixed in:418.94.202606051320-0RHSA-2026:25181
Fixed in:416.94.202606051757-0RHSA-2026:25044
Fixed in:413.92.202606160406-0RHSA-2026:26542
Fixed in:4.19.9.6.202606031700-0RHSA-2026:23245
Fixed in:414.92.202606231112-0RHSA-2026:28887
rsyncRocky
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.1.2-12.el7_9.3.ppc64RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
rsyncRed Hat / RHEL
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3.ppc64RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
rsync-daemonRed Hat / RHEL
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
rsync-daemonRocky
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
rsync-debuginfoRocky
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3.ppc64RHSA-2026:25172
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
rsync-debuginfoRed Hat / RHEL
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.0.6-12.el6_10.3RHSA-2026:25173
Fixed in:0:3.1.2-12.el7_9.3.ppc64RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.2-12.el7_9.3RHSA-2026:25172
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
rsync-debugsourceRocky
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
rsync-debugsourceRed Hat / RHEL
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.1.3-12.el8_4.7RHSA-2026:25170
Fixed in:0:3.1.3-14.el8_6.10RHSA-2026:25190
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-25.el8_10RHSA-2026:17481
Fixed in:0:3.1.3-20.el8_8.5RHSA-2026:25149
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.3-9.el9_0.5RHSA-2026:20601
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_4.3RHSA-2026:20604
Fixed in:0:3.2.3-19.el9_2.3RHSA-2026:20602
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
rsync-rrsyncRed Hat / RHEL
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
rsync-rrsyncRocky
Fixed in:0:3.4.1-2.el10_0.2RHSA-2026:20696
Fixed in:0:3.4.1-6.el10_2RHSA-2026:19152
Fixed in:0:3.2.5-7.el9_8RHSA-2026:19368
Fixed in:0:3.2.5-3.el9_6.1RHSA-2026:20603
rsyncUbuntu
Fixed in:3.1.0-2ubuntu0.4+esm3USN-8349-1
Fixed in:3.1.1-3ubuntu1.3+esm5USN-8349-1
Fixed in:3.1.2-2.1ubuntu1.6+esm3USN-8349-1
Fixed in:3.1.3-8ubuntu0.9+esm1USN-8349-1
Fixed in:3.2.7-0ubuntu0.22.04.6USN-8283-1
Fixed in:3.2.7-1ubuntu1.4USN-8283-1
Fixed in:3.4.1+ds1-5ubuntu1.2USN-8283-1
TridentStack Control can deploy fixes like this automatically across your Windows, macOS, and Linux fleet. See how it works
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeChanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Exploit Intelligence
0.39%probability of exploitation in 30 days
32ndpercentile
Low risk: more likely to be exploited than 32% of all known CVEs.
References
Exploit1
Third-Party Advisory2
Issue Tracking1
Release Notes1
Other references24
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- security.access.redhat.com
Related Vulnerabilities
Other CWE-130 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2025-14847 | High | 7.5 | 83% | KEV | Fix |
| CVE-2024-39614 | High | 7.5 | 29% | - | Fix |
| CVE-2021-36090 | High | 7.5 | 13% | - | Fix |
| CVE-2021-35516 | High | 7.5 | 12% | - | Fix |
| CVE-2021-35517 | High | 7.5 | 11% | - | Fix |
| CVE-2019-3862 | High | 7.3 | 8.1% | - | Fix |
Embed a live status badge for CVE-2026-41035
Markdown
[](https://tridentstack.com/cve/CVE-2026-41035)HTML
<a href="https://tridentstack.com/cve/CVE-2026-41035"><img src="https://tridentstack.com/cve/badge/CVE-2026-41035.svg" alt="CVE-2026-41035"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-07-15.