# CVE-2026-33811 ## Summary - **CVE ID:** CVE-2026-33811 - **Severity:** UNKNOWN - **CVSS Score:** 0.04 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) - **CWE:** N/A - **Published:** May 7, 2026 - **Last Modified:** Sep 18, 2026 ## Description When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash. ## Affected Products - Go standard library — net (0) - Go standard library — net (1.26.0-0) ## References - [CNA](https://go.dev/issue/78803) - [CNA](https://go.dev/cl/767860) - [CNA](https://groups.google.com/g/golang-announce/c/qcCIEXso47M) - [CNA](https://pkg.go.dev/vuln/GO-2026-4981) - [redhat-SADP](https://access.redhat.com/security/cve/CVE-2026-33811) - [redhat-SADP](https://bugzilla.redhat.com/show_bug.cgi?id=2467822) - [redhat-SADP](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-33811.json) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23262) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:23264) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33120) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33123) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33142) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33150) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:33574) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34357) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34359) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:34364) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:35832) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36617) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36625) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36207) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36648) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:35994) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:35993) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:35995) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36796) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36776) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36651) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:36797) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:38504) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39272) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39266) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39810) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:39573) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40118) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40119) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41019) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41030) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:40945) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41055) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42079) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42078) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42082) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42150) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42151) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42240) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42132) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:41928) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42644) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42043) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42047) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42050) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42051) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42049) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42048) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42946) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:42852) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43692) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:43038) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:44622) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:46885) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47149) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47735) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:48151) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:47952) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49703) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50336) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50300) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50205) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:50843) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51033) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51057) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51187) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51341) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:51194) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54191) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:53413) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54168) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:53412) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:53415) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:53530) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54287) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54285) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54283) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54500) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54441) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54284) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54286) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54274) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54435) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54757) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54552) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56340) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57191) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54556) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54584) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54603) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:54602) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57194) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49702) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22120) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22112) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57649) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:49712) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:22121) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59467) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56790) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56789) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:59559) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56785) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56910) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56852) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57482) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56913) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56912) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:56855) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:57488) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60302) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60520) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61313) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:61253) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60025) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:60018) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65534) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65886) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:65126) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:66022) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67149) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67319) - [redhat-SADP](https://access.redhat.com/errata/RHSA-2026:67287) ## Exploitation Prediction (EPSS) - **EPSS Score:** 0.81% - **EPSS Percentile:** 55.4 --- _Exported from OnDuty AI Vulnerability Intelligence on 2026-09-19._