CVE-2026-33811

HIGH 7.5

Crash when handling long CNAME response in net

CVSS Score

7.5

EPSS Score

0.8%

EPSS Percentile

55th

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Vendor	go standard library
Product	net
Published	May 7, 2026
Last Updated	Sep 18, 2026

Stay Ahead of the Next One

Get instant alerts for go standard library net

Be the first to know when new high vulnerabilities affecting go standard library net are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Go standard library / net

0 < 1.25.10 1.26.0-0 < 1.26.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

go.dev: https://go.dev/issue/78803 go.dev: https://go.dev/cl/767860 groups.google.com: https://groups.google.com/g/golang-announce/c/qcCIEXso47M pkg.go.dev: https://pkg.go.dev/vuln/GO-2026-4981 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-33811 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2467822 security.access.redhat.com: https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42079 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41019 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54191 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42078 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54757 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56785 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56910 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56852 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60018 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57482 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54552 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42082 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50336 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:48151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36796 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39810 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42150 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42151 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42240 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:49703 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:67149 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:49702 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:53413 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:61313 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54168 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:51187 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39272 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22120 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65534 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35832 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34357 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42946 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39573 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:38504 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22112 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39266 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36776 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:67319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:61253 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57649 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:53412 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:67287 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:49712 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:53415 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:22121 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65886 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36617 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34359 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54500 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:34364 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56340 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47952 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50843 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41030 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:44622 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47149 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:53530 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:51033 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:59467 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:66022 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43692 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:51057 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57191 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36319 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36625 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36207 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42132 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33574 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36651 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40945 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40118 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23262 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:23264 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54441 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41928 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50300 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:43038 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65126 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42644 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60520 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36648 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56790 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56789 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56913 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56912 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:56855 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60025 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57488 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54556 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54584 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54603 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54602 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35994 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35993 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:35995 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33120 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33123 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33142 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:33150 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54287 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54284 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54286 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54285 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54274 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54283 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:50205 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:60302 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:51341 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:51194 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:36797 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42043 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42047 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42050 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42051 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42049 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42048 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42852 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:54435 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57194 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:46885 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:41055 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:47735 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:59559

Credits

hamayanhamayan