Cryptographic Configuration Flaw in Kronosnet Software by KronosNet
CVE-2026-15811

5.8MEDIUM

Key Information:

Vendor

Red Hat
Status
Red Hat Enterprise Linux 10
Red Hat Enterprise Linux 8
Red Hat Enterprise Linux 9
Red Hat Openshift Container Platform 4
Vendor
CVE Published:
21 July 2026

What is CVE-2026-15811?

A security vulnerability exists in Kronosnet's cryptographic configuration management, where sensitive memory segments are not properly zeroed out after alterations. This oversight enables local attackers to potentially access unprotected encryption keys remaining in memory. By leveraging techniques to disclose memory content, malicious actors could exploit this flaw to decrypt secured cluster network communications, or insert harmful packets, which could lead to significant disruptions in high-availability cluster operations.

References

https://access.redhat.com/security/cve/CVE-2026-15811
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2500849
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Red Hat would like to thank Fabio Di Nitto for reporting this issue.
.