VDB
KO

GO-2026-4981

Crash when handling long CNAME response in net

Details

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / stdlib
Introduced in: 0 Fixed in: 1.25.10
Fix go get stdlib@v1.25.10

References