VDB
RHSA-2026%3A2172
RHSA-2026%3A2172
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A flaw was found in the go/parser package of the Golang standard library. Calling any Parse functions on Go source code containing deeply nested literals can cause a panic due to stack exhaustion.
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:bb2de6047a196b52893da6b265adf5bdf1ed4673d625bace5acb239cb70362c4_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:bb2de6047a196b52893da6b265adf5bdf1ed4673d625bace5acb239cb70362c4_amd64, registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:bb2de6047a196b52893da6b265adf5bdf1ed4673d625bace5acb239cb70362c4_amd64, registry.redhat.io/odf4/odr-hub-operator-bundle@sha256:bb2de6047a196b52893da6b265adf5bdf1ed4673d625bace5acb239cb70362c4_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:42a33efe4a21e40da1acbab3f9fc6c7d55e8f63f0986fc7ca51a380c614cc568_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/odf-multicluster-rhel9-operator@sha256:42a33efe4a21e40da1acbab3f9fc6c7d55e8f63f0986fc7ca51a380c614cc568_amd64, * |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d62da1538cdcd7534e70b192c33eeec65459ff926e52c0d394a555f44f9ba980_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d62da1538cdcd7534e70b192c33eeec65459ff926e52c0d394a555f44f9ba980_amd64, registry.redhat.io/odf4/odf-multicluster-operator-bundle@sha256:d62da1538cdcd7534e70b192c33eeec65459ff926e52c0d394a555f44f9ba980_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:1d50736c62fe89c39e91aec36259862562b5642a32183b93982b214f9e1466f5_arm64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-cli-rhel9@sha256:1d50736c62fe89c39e91aec36259862562b5642a32183b93982b214f9e1466f5_arm64, registry.redhat.io/odf4/odf-cli-rhel9@sha256:1d50736c62fe89c39e91aec36259862562b5642a32183b93982b214f9e1466f5_arm64, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:bdb177c25cbb41b0c67e8eca925e7c870d863f7acdd9f31cb955d7a68e1c17d6_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:bdb177c25cbb41b0c67e8eca925e7c870d863f7acdd9f31cb955d7a68e1c17d6_amd64, registry.redhat.io/odf4/odf-csi-addons-operator-bundle@sha256:bdb177c25cbb41b0c67e8eca925e7c870d863f7acdd9f31cb955d7a68e1c17d6_amd64, * |
| Red Hat | registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e76942cdd3a6cbe5ae0c3f463800b56709d1e43f6070b97eb1fd739c74940a71_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e76942cdd3a6cbe5ae0c3f463800b56709d1e43f6070b97eb1fd739c74940a71_amd64, registry.redhat.io/odf4/ocs-client-rhel9-operator@sha256:e76942cdd3a6cbe5ae0c3f463800b56709d1e43f6070b97eb1fd739c74940a71_amd64 |
| Red Hat | registry.redhat.io/odf4/odf-cli-rhel9@sha256:5f7a6746a98a78d43137a514d9db1fac6275ae089ea74499a2581cc2bb6fe9ee_ppc64le as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-cli-rhel9@sha256:5f7a6746a98a78d43137a514d9db1fac6275ae089ea74499a2581cc2bb6fe9ee_ppc64le, registry.redhat.io/odf4/odf-cli-rhel9@sha256:5f7a6746a98a78d43137a514d9db1fac6275ae089ea74499a2581cc2bb6fe9ee_ppc64le, registry.redhat.io/odf4/odf-cli-rhel9@sha256:5f7a6746a98a78d43137a514d9db1fac6275ae089ea74499a2581cc2bb6fe9ee_ppc64le |
| Red Hat | registry.redhat.io/odf4/ocs-client-console-rhel9@sha256:afff7ada1847281a3d4fade353eb5a2474adc0c8c5eddbdf9ad82b28ff911221_s390x | |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:75c08058594e2a1b3cdf60e4abe85a8607e4c86152c523e6be52ee61972c2744_s390x as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:75c08058594e2a1b3cdf60e4abe85a8607e4c86152c523e6be52ee61972c2744_s390x, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:75c08058594e2a1b3cdf60e4abe85a8607e4c86152c523e6be52ee61972c2744_s390x, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:75c08058594e2a1b3cdf60e4abe85a8607e4c86152c523e6be52ee61972c2744_s390x |
| Red Hat | registry.redhat.io/odf4/odf-console-rhel9@sha256:025680e0a38837852b8d8c3fe62e0539ef424a282b9fdfa3436b33aeff4d839e_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-console-rhel9@sha256:025680e0a38837852b8d8c3fe62e0539ef424a282b9fdfa3436b33aeff4d839e_amd64, registry.redhat.io/odf4/odf-console-rhel9@sha256:025680e0a38837852b8d8c3fe62e0539ef424a282b9fdfa3436b33aeff4d839e_amd64, * |
| Red Hat | registry.redhat.io/odf4/odf-console-rhel9@sha256:b77b376c960b038e989141d5564d06a661c730f58ec7879c5475bcb6bbe5c47b_ppc64le as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-console-rhel9@sha256:b77b376c960b038e989141d5564d06a661c730f58ec7879c5475bcb6bbe5c47b_ppc64le, registry.redhat.io/odf4/odf-console-rhel9@sha256:b77b376c960b038e989141d5564d06a661c730f58ec7879c5475bcb6bbe5c47b_ppc64le, registry.redhat.io/odf4/odf-console-rhel9@sha256:b77b376c960b038e989141d5564d06a661c730f58ec7879c5475bcb6bbe5c47b_ppc64le |
| Red Hat | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:16078bbda1255d54dfee917cec0309125c953380944aec89475b41b917e127a7_ppc64le as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:16078bbda1255d54dfee917cec0309125c953380944aec89475b41b917e127a7_ppc64le, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:16078bbda1255d54dfee917cec0309125c953380944aec89475b41b917e127a7_ppc64le, registry.redhat.io/odf4/odf-cosi-sidecar-rhel9@sha256:16078bbda1255d54dfee917cec0309125c953380944aec89475b41b917e127a7_ppc64le |
| Red Hat | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | *, *, registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64 |
| Red Hat | registry.redhat.io/odf4/ocs-rhel9-operator@sha256:cf2b4e3c1d9ad247ecdd80536966263c0a679220769692ecfa0d026a03b16988_arm64 as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/ocs-rhel9-operator@sha256:cf2b4e3c1d9ad247ecdd80536966263c0a679220769692ecfa0d026a03b16988_arm64, * |
| Red Hat | registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:340263ebbffe8a45d40ace68792b8b52012806481b9f8c312605c84d44b2a3ab_ppc64le as a component of Red Hat Openshift Data Foundation 4.15 | *, *, registry.redhat.io/odf4/odf-multicluster-console-rhel9@sha256:340263ebbffe8a45d40ace68792b8b52012806481b9f8c312605c84d44b2a3ab_ppc64le |
| Red Hat | registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6e968ba345dd668e31596d07a3d8496d7e7f21ae96d3e4c3e3ee36b7386301cb_s390x as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6e968ba345dd668e31596d07a3d8496d7e7f21ae96d3e4c3e3ee36b7386301cb_s390x, registry.redhat.io/odf4/mcg-rhel9-operator@sha256:6e968ba345dd668e31596d07a3d8496d7e7f21ae96d3e4c3e3ee36b7386301cb_s390x |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:4d6fcd9c5d5ec84ce24c9ab57911ef671596a145890c3776cbb048a3d9e6ebd5_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | *, *, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:8b3929a262eca5abb6270477b58b2e645c6d537112afbcc4068a2301208558f0_arm64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:8b3929a262eca5abb6270477b58b2e645c6d537112afbcc4068a2301208558f0_arm64, registry.redhat.io/odf4/odf-csi-addons-rhel9-operator@sha256:8b3929a262eca5abb6270477b58b2e645c6d537112afbcc4068a2301208558f0_arm64, * |
| Red Hat | registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:e027b3d35f60e4a0adc610e26cabb33ac2229431a72a2d26e24b4049d20699be_arm64 as a component of Red Hat Openshift Data Foundation 4.15 | *, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:e027b3d35f60e4a0adc610e26cabb33ac2229431a72a2d26e24b4049d20699be_arm64, registry.redhat.io/odf4/odf-csi-addons-sidecar-rhel9@sha256:e027b3d35f60e4a0adc610e26cabb33ac2229431a72a2d26e24b4049d20699be_arm64 |
| Red Hat | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64 as a component of Red Hat Openshift Data Foundation 4.15 | registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64, registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64, registry.redhat.io/odf4/ocs-metrics-exporter-rhel9@sha256:fa4ddc9392fa793f52d2f41b7008ac31cd5049da4f9dffb314de329474a8c1e2_amd64 |
…and 127 more
Timeline
- Feb 5, 2026 CVE Published
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Distribution Patch
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Apr 24, 2026 Security Advisory
- Jun 18, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2026:2172 advisory
- https://access.redhat.com/security/cve/CVE-2024-34155 advisory
- https://access.redhat.com/security/cve/CVE-2024-34156 advisory
- https://access.redhat.com/security/cve/CVE-2024-34158 advisory
- https://access.redhat.com/security/cve/CVE-2025-22868 advisory
- https://access.redhat.com/security/cve/CVE-2025-30204 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_openshift_data_foundation/ advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2172.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310527 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34155 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34155 advisory
- https://go.dev/cl/611238 advisory
- https://go.dev/issue/69138 advisory
- https://groups.google.com/g/golang-dev/c/S9POB9NCTdk advisory
- https://pkg.go.dev/vuln/GO-2024-3105 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2310528 issue
- https://www.cve.org/CVERecord?id=CVE-2024-34156 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-34156 advisory
- https://go.dev/cl/611239 advisory
…and 20 more