CVE-2026-15588 Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
An unauthenticated attacker can cause a denial of service in applications using GLib's GDBus by sending excessively long data streams, leading to resource exhaustion.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-15588?
CVE-2026-15588 is a medium-severity denial of service vulnerability in Cert Manager support for Red Hat OpenShift release 1.17, published on 20 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
Weakness: CWE-770
Which versions are affected by CVE-2026-15588?
Linux distribution packages (30)
glib2 Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.1.hum1 |
glib2 Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.2.hum1 |
glib2 Red Hat:hummingbird:1 | All versions | 0:2.89.2-2.hum1 |
glib2-devel Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.1.hum1 |
glib2-devel Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.2.hum1 |
glib2-devel Red Hat:hummingbird:1 | All versions | 0:2.89.2-2.hum1 |
glib2-doc Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.1.hum1 |
glib2-doc Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.2.hum1 |
glib2-doc Red Hat:hummingbird:1 | All versions | 0:2.89.2-2.hum1 |
glib2-static Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.1.hum1 |
glib2-static Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.2.hum1 |
glib2-static Red Hat:hummingbird:1 | All versions | 0:2.89.2-2.hum1 |
glib2-tests Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.1.hum1 |
glib2-tests Red Hat:hummingbird:1 | All versions | 0:2.89.1-1.2.hum1 |
glib2-tests Red Hat:hummingbird:1 | All versions | 0:2.89.2-2.hum1 |
glib2 SUSE:Linux Enterprise Micro 5.3 | All versions | 2.70.5-150400.3.40.1 |
glib2 SUSE:Linux Enterprise Micro 5.4 | All versions | 2.70.5-150400.3.40.1 |
glib2 SUSE:Linux Enterprise Micro 5.5 | All versions | 2.70.5-150400.3.40.1 |
glib2 SUSE:Linux Enterprise Module for Basesystem 15 SP7 | All versions | 2.78.6-150600.4.41.1 |
glib2 SUSE:Linux Enterprise Server 16.0 | All versions | 2.84.4-160000.5.1 |
glib2-doc SUSE:Linux Enterprise Server 16.0 | All versions | 2.84.4-160000.5.1 |
glib2 SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | All versions | 2.48.2-12.64.1 |
glib2 SUSE:Linux Enterprise Server for SAP applications 16.0 | All versions | 2.84.4-160000.5.1 |
glib2-doc SUSE:Linux Enterprise Server for SAP applications 16.0 | All versions | 2.84.4-160000.5.1 |
glib2 SUSE:Linux Micro 6.0 | All versions | 2.76.2-14.1 |
glib2 SUSE:Linux Micro 6.1 | All versions | 2.78.6-slfo.1.1_8.1 |
glib2 SUSE:Linux Micro 6.2 | All versions | 2.84.4-160000.5.1 |
glib2 openSUSE:Leap 16.0 | All versions | 2.84.4-160000.5.1 |
glib2-doc openSUSE:Leap 16.0 | All versions | 2.84.4-160000.5.1 |
glib2 openSUSE:Tumbleweed | All versions | 2.88.3-1.1 |
How do I fix CVE-2026-15588?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-15588 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-15588 exists.
Sources
Also known as AZL-92994, BELL-CVE-2026-15588, CLSA-2026-1787154316, CLSA-2026-1788000309, CLSA-2026-1792167748, CLSA-2026-1792168154 and 21 more.