๐Ÿ” CVE Alert

CVE-2026-15588

MEDIUM 5.3

Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering

CVSS Score
5.3
EPSS Score
0.5%
EPSS Percentile
40th

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

CWE CWE-770
Vendor red hat
Product red hat enterprise linux 10
Published Jul 20, 2026
Last Updated Oct 14, 2026
Stay Ahead of the Next One

Get instant alerts for red hat red hat enterprise linux 10

Be the first to know when new medium vulnerabilities affecting red hat red hat enterprise linux 10 are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Affected Versions

Red Hat / Red Hat Enterprise Linux 10
All versions affected
Red Hat / Red Hat Enterprise Linux 10.0 Extended Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
All versions affected
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Service
All versions affected
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
All versions affected
Red Hat / Red Hat Enterprise Linux 9.6 Extended Update Support
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.17
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.18
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.19
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Cert Manager support for Red Hat OpenShift release 1.20
All versions affected
Red Hat / Red Hat AI Inference Server 3.2
All versions affected
Red Hat / Red Hat AI Inference Server 3.2
All versions affected
Red Hat / Red Hat AI Inference Server 3.2
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat AI Inference Server 3.5
All versions affected
Red Hat / Red Hat Discovery 2
All versions affected
Red Hat / Red Hat Discovery 2
All versions affected
Red Hat / Red Hat Hardened Images
All versions affected
Red Hat / Red Hat Hardened Images
All versions affected
Red Hat / Red Hat Hardened Images
All versions affected
Red Hat / Red Hat OpenShift AI 3.0
All versions affected
Red Hat / Red Hat OpenShift AI 3.0
All versions affected
Red Hat / Red Hat OpenShift AI 3.0
All versions affected
Red Hat / Red Hat OpenShift AI 3.0
All versions affected
Red Hat / Red Hat OpenShift AI 3.0
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.2
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.4
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat OpenShift AI 3.5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Update Infrastructure 5
All versions affected
Red Hat / Red Hat Enterprise Linux 10
All versions affected
Red Hat / Red Hat Enterprise Linux 6
All versions affected
Red Hat / Red Hat Enterprise Linux 8
All versions affected
Red Hat / Red Hat Enterprise Linux 9
All versions affected
Red Hat / Red Hat OpenShift Container Platform 4
All versions affected
Red Hat / Red Hat OpenShift Container Platform 4
All versions affected

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
access.redhat.com: https://access.redhat.com/errata/RHSA-2026:39985 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:40485 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:42329 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:55440 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:57015 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:58981 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:61766 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:61783 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:63135 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:63138 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:63140 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65762 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65763 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65767 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65768 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65770 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65771 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:65773 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:66018 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72394 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72395 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72399 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72470 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72475 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72476 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:72502 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73859 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73909 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73929 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73930 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73959 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73960 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73961 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:73962 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74458 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74459 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74460 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74461 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74462 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74463 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74674 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74677 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74678 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74679 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74681 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74683 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74685 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74687 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74688 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:74771 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75652 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75654 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75655 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75657 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75658 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75659 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:75660 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:76042 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:80769 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:80771 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82059 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82061 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82066 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82304 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82322 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82336 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82347 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82354 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82368 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82371 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82372 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82415 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82857 access.redhat.com: https://access.redhat.com/errata/RHSA-2026:82888 access.redhat.com: https://access.redhat.com/security/cve/CVE-2026-15588 bugzilla.redhat.com: https://bugzilla.redhat.com/show_bug.cgi?id=2499675 gitlab.gnome.org: https://gitlab.gnome.org/GNOME/glib/-/issues/3985

Credits

Red Hat would like to thank Gitee Codepecker Lab for reporting this issue.