Buffer Access with Incorrect Length Value The advisory has been revoked - it doesn't affect any version of package rsync (opens in a new tab)

Threat Intelligence

0.39% (32^nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL7-RSYNC-16098376
published17 Apr 2026
disclosed16 Apr 2026

Report a new vulnerability Found a mistake?

Introduced: 16 Apr 2026

CVE-2026-41035 (opens in a new tab) CWE-805 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:7.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rsync package and not the rsync package as distributed by RHEL.

In rsync 3.0.1 through 3.4.1, receive_xattr relies on an untrusted length value during a qsort call, leading to a receiver use-after-free. The victim must run rsync with -X (aka --xattrs). On Linux, many (but not all) common configurations are vulnerable. Non-Linux platforms are more widely vulnerable.