CVE-2026-33811

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.
References
Link Resource
https://go.dev/cl/767860 Patch
https://go.dev/issue/78803 Issue Tracking
https://groups.google.com/g/golang-announce/c/qcCIEXso47M Mailing List Third Party Advisory
https://pkg.go.dev/vuln/GO-2026-4981 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:23262
https://access.redhat.com/errata/RHSA-2026:23264
https://access.redhat.com/errata/RHSA-2026:33120
https://access.redhat.com/errata/RHSA-2026:33123
https://access.redhat.com/errata/RHSA-2026:33142
https://access.redhat.com/errata/RHSA-2026:33150
https://access.redhat.com/errata/RHSA-2026:33574
https://access.redhat.com/errata/RHSA-2026:34357
https://access.redhat.com/errata/RHSA-2026:34359
https://access.redhat.com/errata/RHSA-2026:34364
https://access.redhat.com/errata/RHSA-2026:35832
https://access.redhat.com/errata/RHSA-2026:35993
https://access.redhat.com/errata/RHSA-2026:35994
https://access.redhat.com/errata/RHSA-2026:35995
https://access.redhat.com/errata/RHSA-2026:36207
https://access.redhat.com/errata/RHSA-2026:36319
https://access.redhat.com/errata/RHSA-2026:36617
https://access.redhat.com/errata/RHSA-2026:36625
https://access.redhat.com/errata/RHSA-2026:36648
https://access.redhat.com/errata/RHSA-2026:36651
https://access.redhat.com/errata/RHSA-2026:36776
https://access.redhat.com/errata/RHSA-2026:36796
https://access.redhat.com/errata/RHSA-2026:36797
https://access.redhat.com/errata/RHSA-2026:38504
https://access.redhat.com/errata/RHSA-2026:39266
https://access.redhat.com/errata/RHSA-2026:39272
https://access.redhat.com/errata/RHSA-2026:39319
https://access.redhat.com/errata/RHSA-2026:39573
https://access.redhat.com/errata/RHSA-2026:39810
https://access.redhat.com/errata/RHSA-2026:40118
https://access.redhat.com/errata/RHSA-2026:40945
https://access.redhat.com/errata/RHSA-2026:41019
https://access.redhat.com/errata/RHSA-2026:41030
https://access.redhat.com/errata/RHSA-2026:41055
https://access.redhat.com/errata/RHSA-2026:41928
https://access.redhat.com/errata/RHSA-2026:42043
https://access.redhat.com/errata/RHSA-2026:42047
https://access.redhat.com/errata/RHSA-2026:42048
https://access.redhat.com/errata/RHSA-2026:42049
https://access.redhat.com/errata/RHSA-2026:42050
https://access.redhat.com/errata/RHSA-2026:42051
https://access.redhat.com/errata/RHSA-2026:42078
https://access.redhat.com/errata/RHSA-2026:42079
https://access.redhat.com/errata/RHSA-2026:42082
https://access.redhat.com/errata/RHSA-2026:42132
https://access.redhat.com/errata/RHSA-2026:42150
https://access.redhat.com/errata/RHSA-2026:42151
https://access.redhat.com/errata/RHSA-2026:42240
https://access.redhat.com/errata/RHSA-2026:42644
https://access.redhat.com/errata/RHSA-2026:42852
https://access.redhat.com/errata/RHSA-2026:42946
https://access.redhat.com/errata/RHSA-2026:43038
https://access.redhat.com/errata/RHSA-2026:43692
https://access.redhat.com/errata/RHSA-2026:44622
https://access.redhat.com/errata/RHSA-2026:46885
https://access.redhat.com/errata/RHSA-2026:47149
https://access.redhat.com/errata/RHSA-2026:47735
https://access.redhat.com/errata/RHSA-2026:47952
https://access.redhat.com/errata/RHSA-2026:48151
https://access.redhat.com/security/cve/CVE-2026-33811
https://bugzilla.redhat.com/show_bug.cgi?id=2467822
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*

History

30 Jul 2026, 12:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:47952 -
  • () https://access.redhat.com/errata/RHSA-2026:48151 -

29 Jul 2026, 13:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:47149 -
  • () https://access.redhat.com/errata/RHSA-2026:47735 -

28 Jul 2026, 13:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:46885 -

27 Jul 2026, 13:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:44622 -

23 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:42852 -
  • () https://access.redhat.com/errata/RHSA-2026:42946 -
  • () https://access.redhat.com/errata/RHSA-2026:43038 -
  • () https://access.redhat.com/errata/RHSA-2026:43692 -

21 Jul 2026, 12:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:41928 -
  • () https://access.redhat.com/errata/RHSA-2026:42043 -
  • () https://access.redhat.com/errata/RHSA-2026:42047 -
  • () https://access.redhat.com/errata/RHSA-2026:42048 -
  • () https://access.redhat.com/errata/RHSA-2026:42049 -
  • () https://access.redhat.com/errata/RHSA-2026:42050 -
  • () https://access.redhat.com/errata/RHSA-2026:42051 -
  • () https://access.redhat.com/errata/RHSA-2026:42078 -
  • () https://access.redhat.com/errata/RHSA-2026:42079 -
  • () https://access.redhat.com/errata/RHSA-2026:42082 -
  • () https://access.redhat.com/errata/RHSA-2026:42132 -
  • () https://access.redhat.com/errata/RHSA-2026:42150 -
  • () https://access.redhat.com/errata/RHSA-2026:42151 -
  • () https://access.redhat.com/errata/RHSA-2026:42240 -
  • () https://access.redhat.com/errata/RHSA-2026:42644 -

20 Jul 2026, 12:18

Type Values Removed Values Added
References
  • {'url': 'https://access.redhat.com/errata/RHSA-2026:40119', 'source': '0b0ca135-0b70-47e7-9f44-1890c2a1c46c'}

17 Jul 2026, 13:18

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:40945 -
  • () https://access.redhat.com/errata/RHSA-2026:41019 -
  • () https://access.redhat.com/errata/RHSA-2026:41030 -
  • () https://access.redhat.com/errata/RHSA-2026:41055 -

16 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:40118 -
  • () https://access.redhat.com/errata/RHSA-2026:40119 -

15 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:39573 -
  • () https://access.redhat.com/errata/RHSA-2026:39810 -

15 Jul 2026, 02:20

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:39266 -
  • () https://access.redhat.com/errata/RHSA-2026:39272 -
  • () https://access.redhat.com/errata/RHSA-2026:39319 -

13 Jul 2026, 13:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:38504 -

09 Jul 2026, 13:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:36651 -
  • () https://access.redhat.com/errata/RHSA-2026:36776 -
  • () https://access.redhat.com/errata/RHSA-2026:36796 -
  • () https://access.redhat.com/errata/RHSA-2026:36797 -

08 Jul 2026, 13:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:36207 -
  • () https://access.redhat.com/errata/RHSA-2026:36319 -
  • () https://access.redhat.com/errata/RHSA-2026:36617 -
  • () https://access.redhat.com/errata/RHSA-2026:36625 -
  • () https://access.redhat.com/errata/RHSA-2026:36648 -

07 Jul 2026, 12:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:35993 -
  • () https://access.redhat.com/errata/RHSA-2026:35994 -
  • () https://access.redhat.com/errata/RHSA-2026:35995 -

06 Jul 2026, 13:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:35832 -

02 Jul 2026, 12:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:34357 -
  • () https://access.redhat.com/errata/RHSA-2026:34359 -
  • () https://access.redhat.com/errata/RHSA-2026:34364 -

01 Jul 2026, 13:17

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2026:33574 -

30 Jun 2026, 03:18

Type Values Removed Values Added
CWE CWE-1341
References
  • () https://access.redhat.com/errata/RHSA-2026:23262 -
  • () https://access.redhat.com/errata/RHSA-2026:23264 -
  • () https://access.redhat.com/errata/RHSA-2026:33120 -
  • () https://access.redhat.com/errata/RHSA-2026:33123 -
  • () https://access.redhat.com/errata/RHSA-2026:33142 -
  • () https://access.redhat.com/errata/RHSA-2026:33150 -
  • () https://access.redhat.com/security/cve/CVE-2026-33811 -
  • () https://bugzilla.redhat.com/show_bug.cgi?id=2467822 -
  • () https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json -

12 May 2026, 20:23

Type Values Removed Values Added
CPE cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*
CWE CWE-415
First Time Golang
Golang go
References () https://go.dev/cl/767860 - () https://go.dev/cl/767860 - Patch
References () https://go.dev/issue/78803 - () https://go.dev/issue/78803 - Issue Tracking
References () https://groups.google.com/g/golang-announce/c/qcCIEXso47M - () https://groups.google.com/g/golang-announce/c/qcCIEXso47M - Mailing List, Third Party Advisory
References () https://pkg.go.dev/vuln/GO-2026-4981 - () https://pkg.go.dev/vuln/GO-2026-4981 - Vendor Advisory

08 May 2026, 15:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5

07 May 2026, 20:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-05-07 20:16

Updated : 2026-07-31 13:17


NVD link : CVE-2026-33811

Mitre link : CVE-2026-33811

CVE.ORG link : CVE-2026-33811


JSON object : View

Products Affected

golang

  • go
CWE
CWE-415

Double Free

CWE-1341

Multiple Releases of Same Resource or Handle