# CVE-2026-10649: pacemaker: The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity an...

CVE-2026-10649 is fixed in 17 products on 1 platform, first by RHSA-2026:41041, released June 16, 2026. It is not reported as exploited. Patch Radar priority: High.

- Web page: https://patchblox.com/security/cve/CVE-2026-10649
- Priority: High
- CVSS: 8.6 (Important)
- EPSS: 0.0056
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 16, 2026

## Description

The Pacemaker cluster resource manager is a collection of technologies working together to maintain data integrity and application availability in the event of failures.   Security Fix(es):  * pacemaker: Pacemaker: Denial of Service via integer overflow in remote message decompression (CVE-2026-10649)  For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | pacemaker Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker RHEL 10 | 3.0.0-5.3.el10_0 | [RHSA-2026:41041](https://patchblox.com/security/data/fix/linux/rhsa-2026-41041.md) | Jun 16, 2026 |
| Linux | pacemaker RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | pacemaker opensuse-leap 16.0 | 3.0.3+20260728.7052efa194-160000.1.1 | [OPENSUSE-SU-2026:22069-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-22069-1.md) | Nov 7, 2026 |
| Linux | pacemaker rocky 10 | 0:3.0.1-5.el10_2.1 | [RLSA-2026:40833](https://patchblox.com/security/data/fix/linux/rlsa-2026-40833.md) | Jul 22, 2026 |
| Linux | pacemaker rocky 8 | 0:2.1.7-5.6.el8_10 | [RLSA-2026:39322](https://patchblox.com/security/data/fix/linux/rlsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker rocky 9 | 0:2.1.10-3.el9_8 | [RLSA-2026:39323](https://patchblox.com/security/data/fix/linux/rlsa-2026-39323.md) | Jul 15, 2026 |
| Linux | pacemaker sles 15.6 | 2.1.7+20231219.0f7f88312-150600.6.15.1 | [SUSE-SU-2026:2716-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2716-1.md) | Jun 30, 2026 |
| Linux | pacemaker sles 15.7 | 2.1.10+20260618.4bca25e3c1-150700.3.6.1 | [SUSE-SU-2026:2719-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-2719-1.md) | Jul 1, 2026 |
| Linux | pacemaker sles 16.0 | 3.0.3+20260728.7052efa194-160000.1.1 | [SUSE-SU-2026:24196-1](https://patchblox.com/security/data/fix/linux/suse-su-2026-24196-1.md) | Nov 7, 2026 |
| Linux | pacemaker-cli Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-cli RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-cli RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-cli almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-cli almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-cli almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-cli ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker-cli ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | pacemaker-cli-debuginfo Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-cluster-libs Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-cluster-libs RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-cluster-libs RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-cluster-libs almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-cluster-libs almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-cluster-libs almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-cluster-libs ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker-cluster-libs ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | pacemaker-cluster-libs-debuginfo Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-cts Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-cts RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-cts RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-cts almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-cts almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-cts almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-debuginfo Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-debugsource Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-doc Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-doc RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-doc RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-doc almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-doc almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-doc almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-libs Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-libs RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-libs RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-libs almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-libs almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-libs almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-libs ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker-libs ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | pacemaker-libs-debuginfo Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-libs-devel Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-libs-devel RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-libs-devel RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-libs-devel almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-libs-devel almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-libs-devel almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-nagios-plugins-metadata RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-nagios-plugins-metadata RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-nagios-plugins-metadata almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-nagios-plugins-metadata almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-remote Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-remote RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-remote RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-remote almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-remote almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-remote almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-remote ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker-remote ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | pacemaker-remote-debuginfo Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-schemas Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | pacemaker-schemas RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | pacemaker-schemas RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | pacemaker-schemas almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | pacemaker-schemas almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | pacemaker-schemas almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |
| Linux | pacemaker-schemas ol 8 | 0:2.1.7-5.6.0.1.el8_10 | [ELSA-2026-39322](https://patchblox.com/security/data/fix/linux/elsa-2026-39322.md) | Jul 15, 2026 |
| Linux | pacemaker-schemas ol 9 | 0:2.1.10-3.0.1.el9_8 | [ELSA-2026-39323](https://patchblox.com/security/data/fix/linux/elsa-2026-39323.md) | Jul 21, 2026 |
| Linux | python3-pacemaker Fedora 43 | 3.0.2-3.fc43 | [FEDORA-2026-6A4BFB1309](https://patchblox.com/security/data/fix/linux/fedora-2026-6a4bfb1309.md) | Jun 18, 2026 |
| Linux | python3-pacemaker RHEL 8 | 0:2.1.7-5.6.el8_10 | [RHSA-2026:39322](https://patchblox.com/security/data/fix/linux/rhsa-2026-39322.md) | Jul 18, 2026 |
| Linux | python3-pacemaker RHEL 9 | 0:2.1.10-3.el9_8 | [RHSA-2026:39323](https://patchblox.com/security/data/fix/linux/rhsa-2026-39323.md) | Jul 18, 2026 |
| Linux | python3-pacemaker almalinux 10 | 3.0.1-5.el10_2.1 | [ALSA-2026:40833](https://patchblox.com/security/data/fix/linux/alsa-2026-40833.md) | Jul 16, 2026 |
| Linux | python3-pacemaker almalinux 8 | 2.1.7-5.6.el8_10 | [ALSA-2026:39322](https://patchblox.com/security/data/fix/linux/alsa-2026-39322.md) | Jul 14, 2026 |
| Linux | python3-pacemaker almalinux 9 | 2.1.10-3.el9_8 | [ALSA-2026:39323](https://patchblox.com/security/data/fix/linux/alsa-2026-39323.md) | Jul 14, 2026 |

---

Data as of 2026-11-08T19:12:23Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.