Skip to main content

GLib CVE-2026-15588

| EUVDEUVD-2026-45939 MEDIUM
Allocation of Resources Without Limits or Throttling (CWE-770)
2026-07-20 secalert@redhat.com GHSA-hrq7-vgh7-p534
Denial Of Service
5.3
CVSS 3.1 · Vendor: redhat
Share

Severity by source

Vendor (redhat) PRIMARY
5.3 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
vuln.today AI
5.5 MEDIUM

Pure resource exhaustion DoS warrants A:H and C:N/I:N; local socket access with low privileges required, consistent with AV:L/PR:L.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SUSE
MEDIUM
qualitative
Red Hat
5.3 MEDIUM
qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low

Lifecycle Timeline

2
Analysis Generated
Jul 20, 2026 - 12:31 vuln.today
CVE Published
Jul 20, 2026 - 12:17 nvd
MEDIUM 5.3

DescriptionCVE.org

A denial-of-service and resource exhaustion vulnerability exists within the GDBus component of GLib. The gdbusauth authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

AnalysisAI

Resource exhaustion in GLib's GDBus authentication component allows attackers to crash or hang processes by sending unbounded data streams before authentication completes. The gdbusauth handler reads lines from connecting clients without enforcing any maximum length, meaning an attacker who can reach a GDBus endpoint can force the target process to allocate unbounded memory and saturate CPU cycles. No public exploit code has been identified and the vulnerability is not listed in the CISA KEV catalog, but the unbounded allocation primitive (CWE-770) in a widely-deployed system library warrants attention from Red Hat and GNOME ecosystem consumers.

Technical ContextAI

GLib is a foundational C library providing core utilities for GNOME and GTK-based applications across Linux and other Unix-like platforms. Its GDBus subsystem implements the D-Bus inter-process communication protocol, and the gdbusauth component specifically governs the authentication handshake that occurs when a client initiates a new D-Bus connection. CWE-770 (Allocation of Resources Without Limits or Throttling) identifies the root cause: the authentication line-reading logic imposes no ceiling on how many bytes it will buffer per line. D-Bus operates primarily over Unix domain sockets (AV:L in CVSS) but can also be configured for TCP transport; the GNOME GitLab issue #3985 tracks this defect upstream. Because the flaw manifests during the pre-authentication phase, even partially privileged local users with access to the socket can trigger it before any credential exchange succeeds. Affected product scope is tracked via the GNOME/glib repository; no CPE string was included in the provided intelligence.

Affected ProductsAI

The affected product is GLib, specifically its GDBus authentication subsystem (gdbusauth). Specific vulnerable version ranges were not enumerated in the provided intelligence data; affected versions must be confirmed via the Red Hat CVE advisory at https://access.redhat.com/security/cve/CVE-2026-15588 and the upstream GNOME GitLab issue at https://gitlab.gnome.org/GNOME/glib/-/issues/3985. Red Hat products shipping GLib (including RHEL and downstream distributions) may be affected; the Red Hat Bugzilla entry at https://bugzilla.redhat.com/show_bug.cgi?id=2499675 provides further triage detail. Consumers of GLib across other Linux distributions and embedded platforms using GDBus should consult their vendor's security advisories to determine exposure.

RemediationAI

No vendor-released patched version has been independently confirmed from the available intelligence; the upstream tracking issue at https://gitlab.gnome.org/GNOME/glib/-/issues/3985 indicates the defect is known to the GNOME project but a tagged release containing the fix has not been identified in the provided data. Defenders should monitor the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15588 and the Red Hat Bugzilla entry at https://bugzilla.redhat.com/show_bug.cgi?id=2499675 for patch availability. As a compensating control, restrict access to D-Bus sockets using filesystem permissions or SELinux/AppArmor policies to limit which users and processes can initiate GDBus connections, reducing the population of potential initiators; this may affect inter-process communication for legitimate applications and must be tested against workload requirements. If GDBus is configured over TCP (rather than Unix socket), implement host-based firewall rules to restrict that port to trusted source addresses. Additionally, consider deploying system-level memory and CPU resource limits (e.g., via systemd unit MemoryLimit and CPUQuota directives) for processes that expose GDBus endpoints, so that runaway allocation is bounded by the OS before causing a full system hang.

Same weakness CWE-770 – Allocation of Resources Without Limits or Throttling

View all
CVE-2017-8779 HIGH POC
7.5
CVE-2025-53521 CRITICAL POC
9.3
CVE-2017-5850 HIGH POC
7.5
CVE-2025-26682 HIGH
7.5
CVE-2025-41770 HIGH
8.7
CVE-2025-26466 MEDIUM
5.9
CVE-2020-37067 CRITICAL POC
9.8
CVE-2021-47875 CRITICAL POC
9.8

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Affected
SUSE Linux Enterprise High Performance Computing 15 SP7 Affected
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected
SUSE Linux Enterprise Micro 5.5 Affected

Share

CVE-2026-15588 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy