CVE-2026-27143

Public on 2026-04-08
Modified on 2026-04-14
Description
Arithmetic over induction variables in loops were not correctly checked for underflow or overflow in the Go compiler (cmd/compile). As a result, the compiler would allow for invalid indexing to occur at runtime, potentially leading to memory corruption in programs compiled with affected Go versions.
Severity
Medium severity
Medium
See what this means
CVSS v3 Base Score
5.6
See breakdown

Affected Packages

Platform Package Release Date Advisory Status
Amazon Linux 2 - Core amazon-cloudwatch-agent Pending Fix
Amazon Linux 2023 amazon-cloudwatch-agent Pending Fix
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra amazon-ecr-credential-helper Pending Fix
Amazon Linux 2 - Docker Extra amazon-ecr-credential-helper Pending Fix
Amazon Linux 2 - Ecs Extra amazon-ecr-credential-helper Pending Fix
Amazon Linux 2023 amazon-ecr-credential-helper Pending Fix
Amazon Linux 2 - Core amazon-ssm-agent Pending Fix
Amazon Linux 2023 amazon-ssm-agent Pending Fix
Amazon Linux 2 - Core cni-plugins Pending Fix
Amazon Linux 2023 cni-plugins Pending Fix
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra containerd 2026-04-30 ALAS2NITRO-ENCLAVES-2026-098 Fixed
Amazon Linux 2 - Docker Extra containerd 2026-04-30 ALAS2DOCKER-2026-112 Fixed
Amazon Linux 2 - Ecs Extra containerd Pending Fix
Amazon Linux 2023 containerd 2026-04-30 ALAS2023-2026-1606 Fixed
Amazon Linux 2023 credentials-fetcher 2026-04-30 ALAS2023-2026-1598 Fixed
Amazon Linux 2 - Core cri-tools Pending Fix
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra docker 2026-04-30 ALAS2NITRO-ENCLAVES-2026-097 Fixed
Amazon Linux 2 - Docker Extra docker 2026-04-30 ALAS2DOCKER-2026-111 Fixed
Amazon Linux 2 - Ecs Extra docker Pending Fix
Amazon Linux 2023 docker 2026-04-30 ALAS2023-2026-1615 Fixed
Amazon Linux 2 - Ecs Extra ecs-init Pending Fix
Amazon Linux 2023 ecs-init Pending Fix
Amazon Linux 2023 git-lfs Pending Fix
Amazon Linux 2 - Core golang 2026-04-30 ALAS2-2026-3259 Fixed
Amazon Linux 2023 golang 2026-04-30 ALAS2023-2026-1593 Fixed
Amazon Linux 2 - Core golist 2026-04-30 ALAS2-2026-3260 Fixed
Amazon Linux 2023 golist 2026-04-30 ALAS2023-2026-1599 Fixed
Amazon Linux 2023 libcap Pending Fix
Amazon Linux 2 - Core nerdctl 2026-04-30 ALAS2-2026-3265 Fixed
Amazon Linux 2023 nerdctl 2026-04-30 ALAS2023-2026-1605 Fixed
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra oci-add-hooks Pending Fix
Amazon Linux 2 - Docker Extra oci-add-hooks Pending Fix
Amazon Linux 2 - Ecs Extra oci-add-hooks Pending Fix
Amazon Linux 2023 oci-add-hooks Pending Fix
Amazon Linux 2 - Core rclone Pending Fix
Amazon Linux 2 - Aws-nitro-enclaves-cli Extra runc Pending Fix
Amazon Linux 2 - Docker Extra runc Pending Fix
Amazon Linux 2 - Ecs Extra runc Pending Fix
Amazon Linux 2023 runc Pending Fix
Amazon Linux 2 - Docker Extra runfinch-finch Pending Fix
Amazon Linux 2023 runfinch-finch Pending Fix
Amazon Linux 2 - Docker Extra soci-snapshotter Pending Fix
Amazon Linux 2023 soci-snapshotter Pending Fix
Amazon Linux 2023 yq Pending Fix

CVSS Scores

Score Type Score Vector
Amazon Linux CVSSv3 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
NVD CVSSv3 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H