VDB
RHSA-2026:2662
RHSA-2026:2662
PUBLISHED
CVSS 7.5 HIGH
A denial-of-service vulnerability in github.com/sirupsen/logrus occurs when Entry.Writer() processes a single-line payload larger than 64KB with no newline characters. Due to a limitation in Go’s internal bufio.Scanner, the read operation fails with a “token too long” error, causing the underlying writer pipe to close. In affected versions, this leaves the Writer interface unusable and can disrupt logging functionality, potentially degrading application availability.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:0011748983171c329752d066d603b31f2b8b8f08f204caeb08402b6c886d4346_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ingress-node-firewall-rhel9@sha256:6b06ad6b4acb31b74e0a660ed19384e098510a83a00bda426702f22e4f75cbc6_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:5399d039aad37f9b46b9acd484a9fbee126ff619c4fef747adeb9ec07be08365_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-egress-http-proxy-rhel9@sha256:5399d039aad37f9b46b9acd484a9fbee126ff619c4fef747adeb9ec07be08365_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:0a8046cf4888a7d62d1f79d69391dc0ceadf96ef03fa1d65d3685a322e0ee1c0_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-sriov-network-metrics-exporter-rhel9@sha256:0a8046cf4888a7d62d1f79d69391dc0ceadf96ef03fa1d65d3685a322e0ee1c0_ppc64le, * |
| Red Hat | registry.redhat.io/openshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:f7e17ead2eb30345e8b80fbf7db4f9f6b6ed7ac37b26fafa155c6d185bc94c1f_s390x as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-baremetal-cluster-api-controllers-rhel9@sha256:f7e17ead2eb30345e8b80fbf7db4f9f6b6ed7ac37b26fafa155c6d185bc94c1f_s390x, * |
| Red Hat | registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:51b8208d53ce3d6352bee07b047a47690d924889df62d528b674fb0b138a387f_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-local-storage-rhel9-operator@sha256:51b8208d53ce3d6352bee07b047a47690d924889df62d528b674fb0b138a387f_arm64 |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:b3f38a0b1efc34403c1cf23932e1c49bfcb6875e58a4e4a0a02d066c1711b75e_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9-operator@sha256:b3f38a0b1efc34403c1cf23932e1c49bfcb6875e58a4e4a0a02d066c1711b75e_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:68214240954447dc9b47471a70fb3e8df9686e0cb0ff2af8c9e39a33e98192af_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:ed75b491f5780abe4cca578517ca7c77d9c579abbfc33fccb4da90bfe39092f5_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-helm-rhel9-operator@sha256:ed75b491f5780abe4cca578517ca7c77d9c579abbfc33fccb4da90bfe39092f5_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-ptp-rhel9-operator@sha256:d804fd774e127cf90de2f22435717149dd5a6ca273ea7494f3a17fa299c8f745_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, * |
| Red Hat | registry.redhat.io/openshift4/sriov-network-metrics-exporter-rhel9@sha256:4699bf390cbd4b024ce151bfa15d4b783ddc92deacc292aa6590525ca12da81b_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/sriov-network-metrics-exporter-rhel9@sha256:4699bf390cbd4b024ce151bfa15d4b783ddc92deacc292aa6590525ca12da81b_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:99c2576488944ef436826e34e32daddb86f0f4c67b8909b0503249d74caa0c15_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-dpu-daemon-rhel9@sha256:99c2576488944ef436826e34e32daddb86f0f4c67b8909b0503249d74caa0c15_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:4f068a1e3460546b1788b09c6c15f34aa99e35ba5e724402d84117e8ec8d766b_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:4f068a1e3460546b1788b09c6c15f34aa99e35ba5e724402d84117e8ec8d766b_arm64, * |
| Red Hat | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:c92fdee70bd995ee0ebbdcb7cc9eba85e6389fbeab9342b6f6fc050c5d3385c3_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-gcp-filestore-csi-driver-rhel9@sha256:c92fdee70bd995ee0ebbdcb7cc9eba85e6389fbeab9342b6f6fc050c5d3385c3_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:88e720aaf2037e8c671cb542dec42edde62439a4ac134b312d87ae9fad3d2ed4_ppc64le as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-vertical-pod-autoscaler-rhel9@sha256:88e720aaf2037e8c671cb542dec42edde62439a4ac134b312d87ae9fad3d2ed4_ppc64le |
| Red Hat | registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel9@sha256:400d35b4517f533b4482da31206971ba8da26dac334c7d3f9ba8ce23edfaa537_s390x as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-csi-driver-shared-resource-mustgather-rhel9@sha256:400d35b4517f533b4482da31206971ba8da26dac334c7d3f9ba8ce23edfaa537_s390x |
| Red Hat | registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:492050bbac4428fac77e9904410f997341299fbfc7f91ff8788e5de3a74b3d49_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-smb-csi-driver-rhel9-operator@sha256:492050bbac4428fac77e9904410f997341299fbfc7f91ff8788e5de3a74b3d49_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:09dfe02f8b3b29a8c7ff3fb4dd2913712ac488d9fd3fd23d89ab82e136a1dfba_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-sriov-network-device-plugin-rhel9@sha256:09dfe02f8b3b29a8c7ff3fb4dd2913712ac488d9fd3fd23d89ab82e136a1dfba_amd64 |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:62356b4adfd75d8d04d7cca13f53f1a4c59db848acd8f74fe259e15d91294de5_amd64 as a component of Red Hat OpenShift Container Platform 4.16 | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-rhel9-operator@sha256:62356b4adfd75d8d04d7cca13f53f1a4c59db848acd8f74fe259e15d91294de5_amd64, * |
| Red Hat | registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:8030c685017d17ee83515eea9aec6f41a4023723d7a30e65f8f16d6163c9ef52_arm64 as a component of Red Hat OpenShift Container Platform 4.16 | *, registry.redhat.io/openshift4/ose-aws-efs-csi-driver-container-rhel9@sha256:8030c685017d17ee83515eea9aec6f41a4023723d7a30e65f8f16d6163c9ef52_arm64 |
…and 161 more
Timeline
- Feb 18, 2026 CVE Published
- May 11, 2026 Distribution Patch
- May 11, 2026 Security Advisory
- May 11, 2026 Security Advisory
- May 13, 2026 CVE Updated
- May 15, 2026 Distribution Patch
References
- https://access.redhat.com/errata/RHSA-2026:2662 advisory
- https://access.redhat.com/security/cve/CVE-2025-65637 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2418900 issue
- https://www.cve.org/CVERecord?id=CVE-2025-65637 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-65637 advisory
- https://github.com/mjuanxd/logrus-dos-poc exploit
- https://github.com/mjuanxd/logrus-dos-poc/blob/main/README.md exploit
- https://github.com/sirupsen/logrus/releases/tag/v1.8.3 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2662.json advisory
- https://github.com/sirupsen/logrus/issues/1370 advisory
- https://github.com/sirupsen/logrus/pull/1376 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.1 advisory
- https://github.com/sirupsen/logrus/releases/tag/v1.9.3 advisory
- https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMSIRUPSENLOGRUS-5564391 advisory