CVE-2026-15588: Red Hat Cert Manager Support For Red Hat Openshift Release 1.19

Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days.

A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.

Affected products

Red Hat Cert Manager Support For Red Hat Openshift Release 1.19: before 1788348522 (fixed in 1788348522); before 1788348571 (fixed in 1788348571); before 1788348594 (fixed in 1788348594)
Red Hat Cert Manager Support For Red Hat Openshift Release 1.20: before 1790223279 (fixed in 1790223279); before 1790223719 (fixed in 1790223719); before 1790272426 (fixed in 1790272426); before 1790589998 (fixed in 1790589998); before 1790589912 (fixed in 1790589912); before 1790589914 (fixed in 1790589914); …
Red Hat Red Hat Ai Inference Server 3.2: before 1790621714 (fixed in 1790621714); before 1790621718 (fixed in 1790621718); before 1790621713 (fixed in 1790621713)
Red Hat Red Hat Discovery 2: before 1788205779 (fixed in 1788205779); before 1788206196 (fixed in 1788206196)
Red Hat Red Hat Enterprise Linux 10: before 0:2.80.4-12.el10_2.21 (fixed in 0:2.80.4-12.el10_2.21)
Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support: before 0:2.80.4-4.el10_0.17 (fixed in 0:2.80.4-4.el10_0.17)
Red Hat Red Hat Enterprise Linux 6
Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: before 0:2.56.1-13.el7_9.1 (fixed in 0:2.56.1-13.el7_9.1)
Red Hat Red Hat Enterprise Linux 8: before 0:2.56.4-177.el8_10 (fixed in 0:2.56.4-177.el8_10)
Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: before 0:2.56.4-10.el8_4.7 (fixed in 0:2.56.4-10.el8_4.7)
Red Hat Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On: before 0:2.56.4-10.el8_4.7 (fixed in 0:2.56.4-10.el8_4.7)
Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: before 0:2.56.4-158.el8_6.7 (fixed in 0:2.56.4-158.el8_6.7)
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On: before 0:2.56.4-158.el8_6.7 (fixed in 0:2.56.4-158.el8_6.7)
Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: before 0:2.56.4-165.el8_8.2 (fixed in 0:2.56.4-165.el8_8.2)
Red Hat Red Hat Enterprise Linux 8.8 Update Services For SAP Solutions: before 0:2.56.4-165.el8_8.2 (fixed in 0:2.56.4-165.el8_8.2)
Red Hat Red Hat Enterprise Linux 9: before 0:2.68.4-19.el9_8.9 (fixed in 0:2.68.4-19.el9_8.9)
Red Hat Red Hat Enterprise Linux 9.2 Update Services For SAP Solutions: before 0:2.68.4-7.el9_2.7 (fixed in 0:2.68.4-7.el9_2.7)
Red Hat Red Hat Enterprise Linux 9.4 Update Services For SAP Solutions: before 0:2.68.4-14.el9_4.8 (fixed in 0:2.68.4-14.el9_4.8)
Red Hat Red Hat Enterprise Linux 9.6 Extended Update Support: before 0:2.68.4-16.el9_6.7 (fixed in 0:2.68.4-16.el9_6.7)
Red Hat Red Hat Hardened Images: before 2.89.1-1.1.hum1 (fixed in 2.89.1-1.1.hum1); before 2.89.1-1.2.hum1 (fixed in 2.89.1-1.2.hum1); before 2.89.2-2.hum1 (fixed in 2.89.2-2.hum1)
Red Hat Red Hat Openshift Ai 3.0: before 1790276886 (fixed in 1790276886); before 1790276884 (fixed in 1790276884); before 1790277045 (fixed in 1790277045); before 1790276889 (fixed in 1790276889); before 1790276974 (fixed in 1790276974)
Red Hat Red Hat Openshift Ai 3.2: before 1790703497 (fixed in 1790703497); before 1790703506 (fixed in 1790703506); before 1790703590 (fixed in 1790703590); before 1790703568 (fixed in 1790703568); before 1790703586 (fixed in 1790703586); before 1790703494 (fixed in 1790703494)
Red Hat Red Hat Openshift Ai 3.4: before 1790703542 (fixed in 1790703542); before 1790703539 (fixed in 1790703539); before 1790703553 (fixed in 1790703553); before 1790703631 (fixed in 1790703631); before 1790703597 (fixed in 1790703597); before 1790703641 (fixed in 1790703641); …
Red Hat Red Hat Openshift Ai 3.5: before 1790703552 (fixed in 1790703552); before 1790703656 (fixed in 1790703656); before 1790703557 (fixed in 1790703557); before 1790703707 (fixed in 1790703707); before 1790703645 (fixed in 1790703645); before 1790703554 (fixed in 1790703554); …
Red Hat Red Hat Openshift Container Platform 4
and 1 more

Published 2026-07-20. Last modified 2026-10-06.