Description
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
Metrics
CVSS 3.1 5.3/10
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LWeakness enumeration
Affected software
Source: the vendor's advisory (CNA). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | — |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | — |
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | — |
| Red Hat | Red Hat Enterprise Linux 8 | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | — |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | — |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9 | — |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | — |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.17 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.18 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.20 | — |
| Red Hat | Red Hat AI Inference Server 3.2 | — |
| Red Hat | Red Hat AI Inference Server 3.2 | — |
| Red Hat | Red Hat AI Inference Server 3.2 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat AI Inference Server 3.5 | — |
| Red Hat | Red Hat Discovery 2 | — |
| Red Hat | Red Hat Discovery 2 | — |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — |
| Red Hat | Red Hat Enterprise Linux AI 3.5 | — |
References
- https://access.redhat.com/errata/RHSA-2026:39985
- https://access.redhat.com/errata/RHSA-2026:40485
- https://access.redhat.com/errata/RHSA-2026:42329
- https://access.redhat.com/errata/RHSA-2026:55440
- https://access.redhat.com/errata/RHSA-2026:57015
- https://access.redhat.com/errata/RHSA-2026:58981
- https://access.redhat.com/errata/RHSA-2026:61766
- https://access.redhat.com/errata/RHSA-2026:61783
- https://access.redhat.com/errata/RHSA-2026:63135
- https://access.redhat.com/errata/RHSA-2026:63138
- https://access.redhat.com/errata/RHSA-2026:63140
- https://access.redhat.com/errata/RHSA-2026:65762
- https://access.redhat.com/errata/RHSA-2026:65763
- https://access.redhat.com/errata/RHSA-2026:65767
- https://access.redhat.com/errata/RHSA-2026:65768
- https://access.redhat.com/errata/RHSA-2026:65769
- https://access.redhat.com/errata/RHSA-2026:65770
- https://access.redhat.com/errata/RHSA-2026:65771
- https://access.redhat.com/errata/RHSA-2026:65773
- https://access.redhat.com/errata/RHSA-2026:66018
- https://access.redhat.com/errata/RHSA-2026:72394
- https://access.redhat.com/errata/RHSA-2026:72395
- https://access.redhat.com/errata/RHSA-2026:72399
- https://access.redhat.com/errata/RHSA-2026:72470
- https://access.redhat.com/errata/RHSA-2026:72475
- https://access.redhat.com/errata/RHSA-2026:72476
- https://access.redhat.com/errata/RHSA-2026:72502
- https://access.redhat.com/errata/RHSA-2026:73859
- https://access.redhat.com/errata/RHSA-2026:73909
- https://access.redhat.com/errata/RHSA-2026:73929
- https://access.redhat.com/errata/RHSA-2026:73930
- https://access.redhat.com/errata/RHSA-2026:73959
- https://access.redhat.com/errata/RHSA-2026:73960
- https://access.redhat.com/errata/RHSA-2026:73961
- https://access.redhat.com/errata/RHSA-2026:73962
- https://access.redhat.com/errata/RHSA-2026:74458
- https://access.redhat.com/errata/RHSA-2026:74459
- https://access.redhat.com/errata/RHSA-2026:74460
- https://access.redhat.com/errata/RHSA-2026:74461
- https://access.redhat.com/errata/RHSA-2026:74462
- https://access.redhat.com/errata/RHSA-2026:74463
- https://access.redhat.com/errata/RHSA-2026:74674
- https://access.redhat.com/errata/RHSA-2026:74677
- https://access.redhat.com/errata/RHSA-2026:74678
- https://access.redhat.com/errata/RHSA-2026:74679
- https://access.redhat.com/errata/RHSA-2026:74681
- https://access.redhat.com/errata/RHSA-2026:74683
- https://access.redhat.com/errata/RHSA-2026:74685
- https://access.redhat.com/errata/RHSA-2026:74687
- https://access.redhat.com/errata/RHSA-2026:74688
- https://access.redhat.com/errata/RHSA-2026:74771
- https://access.redhat.com/errata/RHSA-2026:75652
- https://access.redhat.com/errata/RHSA-2026:75654
- https://access.redhat.com/errata/RHSA-2026:75655
- https://access.redhat.com/errata/RHSA-2026:75657
- https://access.redhat.com/errata/RHSA-2026:75658
- https://access.redhat.com/errata/RHSA-2026:75659
- https://access.redhat.com/errata/RHSA-2026:75660
- https://access.redhat.com/errata/RHSA-2026:76042
- https://access.redhat.com/errata/RHSA-2026:80769
Timeline
- Published
- Jul 20, 2026
- Last modified
- Nov 6, 2026
- NVD status
- Awaiting Analysis