VDB
RHSA-2026%3A2164
RHSA-2026%3A2164
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:ac92cd35c9af846fcb7021a0ed5ada4676f96861775a10cabd9d1f7c24011cd1_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-cli-rhel9@sha256:ac92cd35c9af846fcb7021a0ed5ada4676f96861775a10cabd9d1f7c24011cd1_ppc64le, registry.redhat.io/odf4/odf-cli-rhel9@sha256:ac92cd35c9af846fcb7021a0ed5ada4676f96861775a10cabd9d1f7c24011cd1_ppc64le, registry.redhat.io/odf4/odf-cli-rhel9@sha256:ac92cd35c9af846fcb7021a0ed5ada4676f96861775a10cabd9d1f7c24011cd1_ppc64le |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:229abfc417053621b89b2cf37daab14eb981cb7f881fae63e90bf3af6c0f2d49_s390x as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:229abfc417053621b89b2cf37daab14eb981cb7f881fae63e90bf3af6c0f2d49_s390x, *, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:229abfc417053621b89b2cf37daab14eb981cb7f881fae63e90bf3af6c0f2d49_s390x |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b512157c94826d9ec1ca9e814cded99835cd984350ba6efe423cf70d1f7700d9_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b512157c94826d9ec1ca9e814cded99835cd984350ba6efe423cf70d1f7700d9_ppc64le, *, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:b512157c94826d9ec1ca9e814cded99835cd984350ba6efe423cf70d1f7700d9_ppc64le |
| Red Hat | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:50ff6b8bccb25519aba55a1ba926a543a924130ea9506c682ccfdf685e81844e_s390x as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:50ff6b8bccb25519aba55a1ba926a543a924130ea9506c682ccfdf685e81844e_s390x, registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:50ff6b8bccb25519aba55a1ba926a543a924130ea9506c682ccfdf685e81844e_s390x, registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:50ff6b8bccb25519aba55a1ba926a543a924130ea9506c682ccfdf685e81844e_s390x |
| Red Hat | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5a4ee1bf283b2854e80035faadd4c2358aa3420b4da2f6131de81309278fbff6_amd64 as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5a4ee1bf283b2854e80035faadd4c2358aa3420b4da2f6131de81309278fbff6_amd64, *, registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:5a4ee1bf283b2854e80035faadd4c2358aa3420b4da2f6131de81309278fbff6_amd64 |
| Red Hat | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cde511cc866cbdbead632cc65796294668a108b042383a2c82e9a8a37b577ce5_arm64 as a component of Red Hat Openshift Data Foundation 4.16 | *, registry.redhat.io/odf4/mcg-rhel9-operator@sha256:cde511cc866cbdbead632cc65796294668a108b042383a2c82e9a8a37b577ce5_arm64, * |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:190732ec87bd61cfee694d5d42718d1ed04eea5b3ddea93c281cf573a34508d2_s390x as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:190732ec87bd61cfee694d5d42718d1ed04eea5b3ddea93c281cf573a34508d2_s390x, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:190732ec87bd61cfee694d5d42718d1ed04eea5b3ddea93c281cf573a34508d2_s390x, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:7490cd67ad8376dc4e5722c7d44d29d3b1c05f1f05aecd71176f47e7cf60764f_amd64 as a component of Red Hat Openshift Data Foundation 4.16 | *, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:7490cd67ad8376dc4e5722c7d44d29d3b1c05f1f05aecd71176f47e7cf60764f_amd64, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:7490cd67ad8376dc4e5722c7d44d29d3b1c05f1f05aecd71176f47e7cf60764f_amd64 |
| Red Hat | registry.redhat.io/odf4/cephcsi-rhel9@sha256:6b79a6a9dd9d44b0af2be6e721c88f48ebf4fc9add4ca5dba0424081ee0305ec_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/cephcsi-rhel9@sha256:6b79a6a9dd9d44b0af2be6e721c88f48ebf4fc9add4ca5dba0424081ee0305ec_ppc64le, registry.redhat.io/odf4/cephcsi-rhel9@sha256:6b79a6a9dd9d44b0af2be6e721c88f48ebf4fc9add4ca5dba0424081ee0305ec_ppc64le, registry.redhat.io/odf4/cephcsi-rhel9@sha256:6b79a6a9dd9d44b0af2be6e721c88f48ebf4fc9add4ca5dba0424081ee0305ec_ppc64le |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:38afcab2951e27bc6f887697eeb14b19b230db88e2287ad484b4693b810caa5e_s390x as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:38afcab2951e27bc6f887697eeb14b19b230db88e2287ad484b4693b810caa5e_s390x, *, * |
| Red Hat | registry.redhat.io/odf4/odr-rhel9-operator@sha256:d43f31ad5b1b125ec931ba2d2e143b5485655b072026a1bc62abcaf9ae060829_s390x as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odr-rhel9-operator@sha256:d43f31ad5b1b125ec931ba2d2e143b5485655b072026a1bc62abcaf9ae060829_s390x, registry.redhat.io/odf4/odr-rhel9-operator@sha256:d43f31ad5b1b125ec931ba2d2e143b5485655b072026a1bc62abcaf9ae060829_s390x, * |
| Red Hat | registry.redhat.io/odf4/mcg-core-rhel9@sha256:3fa0370b77d5f5b75b29303c25b8a02ed98e022d201b960ae7f76a1f5fbeec5e_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | *, registry.redhat.io/odf4/mcg-core-rhel9@sha256:3fa0370b77d5f5b75b29303c25b8a02ed98e022d201b960ae7f76a1f5fbeec5e_ppc64le, * |
| Red Hat | registry.redhat.io/odf4/odf-console-rhel9@sha256:7e9277018d8c44b134d405aee6a531b7685d95085ca7bf308aaa886810c30adc_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-console-rhel9@sha256:7e9277018d8c44b134d405aee6a531b7685d95085ca7bf308aaa886810c30adc_ppc64le, registry.redhat.io/odf4/odf-console-rhel9@sha256:7e9277018d8c44b134d405aee6a531b7685d95085ca7bf308aaa886810c30adc_ppc64le, * |
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:5d4041eafb1143ec1c19a02f11737b1e60e40559dfe1a59be05d5075d8179571_amd64 as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-cli-rhel9@sha256:5d4041eafb1143ec1c19a02f11737b1e60e40559dfe1a59be05d5075d8179571_amd64, registry.redhat.io/odf4/odf-cli-rhel9@sha256:5d4041eafb1143ec1c19a02f11737b1e60e40559dfe1a59be05d5075d8179571_amd64, registry.redhat.io/odf4/odf-cli-rhel9@sha256:5d4041eafb1143ec1c19a02f11737b1e60e40559dfe1a59be05d5075d8179571_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-rhel9-operator@sha256:92c74c2813019bb65a1f89bf4031f0ff0c8ec3cf1636e8350ff428c294661f9b_amd64 as a component of Red Hat Openshift Data Foundation 4.16 | *, registry.redhat.io/odf4/odf-rhel9-operator@sha256:92c74c2813019bb65a1f89bf4031f0ff0c8ec3cf1636e8350ff428c294661f9b_amd64, registry.redhat.io/odf4/odf-rhel9-operator@sha256:92c74c2813019bb65a1f89bf4031f0ff0c8ec3cf1636e8350ff428c294661f9b_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b0921fe95dbf5101d662fea188a2b5b3aabb83513f92167fed5befbc7dd4222_arm64 as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b0921fe95dbf5101d662fea188a2b5b3aabb83513f92167fed5befbc7dd4222_arm64, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b0921fe95dbf5101d662fea188a2b5b3aabb83513f92167fed5befbc7dd4222_arm64, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:9b0921fe95dbf5101d662fea188a2b5b3aabb83513f92167fed5befbc7dd4222_arm64 |
| Red Hat | registry.redhat.io/odf4/cephcsi-rhel9@sha256:47a959cc6f8fdc22c33f3220bf2f46afc36f2f4550c0be5a8d494507f575d251_s390x as a component of Red Hat Openshift Data Foundation 4.16 | *, registry.redhat.io/odf4/cephcsi-rhel9@sha256:47a959cc6f8fdc22c33f3220bf2f46afc36f2f4550c0be5a8d494507f575d251_s390x, registry.redhat.io/odf4/cephcsi-rhel9@sha256:47a959cc6f8fdc22c33f3220bf2f46afc36f2f4550c0be5a8d494507f575d251_s390x |
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:227110cf83abc62e8bf9d1edbffab292b4f3cc6e08bf94bfad0f73cdb42494a3_arm64 as a component of Red Hat Openshift Data Foundation 4.16 | *, *, * |
| Red Hat | registry.redhat.io/odf4/mcg-core-rhel9@sha256:471cf5dcd91d7ffba22cde9e9c854d44542af7c5f173f8ab7cb93c23d27707eb_amd64 as a component of Red Hat Openshift Data Foundation 4.16 | registry.redhat.io/odf4/mcg-core-rhel9@sha256:471cf5dcd91d7ffba22cde9e9c854d44542af7c5f173f8ab7cb93c23d27707eb_amd64, registry.redhat.io/odf4/mcg-core-rhel9@sha256:471cf5dcd91d7ffba22cde9e9c854d44542af7c5f173f8ab7cb93c23d27707eb_amd64, registry.redhat.io/odf4/mcg-core-rhel9@sha256:471cf5dcd91d7ffba22cde9e9c854d44542af7c5f173f8ab7cb93c23d27707eb_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:2b85bfdb796d8dd747d83290ded528567f05b3eda3266ad4d9ee3da20086ec8c_ppc64le as a component of Red Hat Openshift Data Foundation 4.16 | *, *, * |
…and 132 more
Timeline
- Feb 5, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2164 advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 advisory
- https://access.redhat.com/security/cve/CVE-2024-34158 advisory
- https://access.redhat.com/security/cve/CVE-2025-22868 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2164.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34155 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34155 advisory
- https://go.dev/cl/611238 advisory
- https://go.dev/issue/69138 advisory
- https://groups.google.com/g/golang-dev/c/S9POB9NCTdk advisory
- https://pkg.go.dev/vuln/GO-2024-3105 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34156 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34156 advisory
- https://go.dev/cl/611239 advisory
…and 20 more