CVE-2026-85150 Null dereference in Red Hat Enterprise Linux 10

High 7.5 Published 3 Sep 2026 Updated 21 Sep 2026

Remote attackers can crash GStreamer RTSP servers or clients via crafted Digest authentication headers, causing denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2026-85150?

CVE-2026-85150 is a high-severity vulnerability in Red Hat Enterprise Linux 10, published on 3 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length calculation to underflow, leading to a crash of the process parsing the header. On an RTSP server this can be triggered by a remote, unauthenticated attacker sending a single malformed request when the server has authentication enabled; the same flaw can also be triggered against an RTSP client by a malicious or compromised RTSP server. Successful exploitation results in a denial of service (application crash) and has no confirmed impact on confidentiality or integrity.

Weakness: CWE-476

Which versions are affected by CVE-2026-85150?

Linux distribution packages (18)

`gstreamer1-plugins-base` AlmaLinux:10	All versions	`1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-devel` AlmaLinux:10	All versions	`1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-tools` AlmaLinux:10	All versions	`1.26.7-2.el10_2.2`
`gstreamer1-plugins-base` AlmaLinux:8	All versions	`1.16.1-7.el8_10`
`gstreamer1-plugins-base-devel` AlmaLinux:8	All versions	`1.16.1-7.el8_10`
`gstreamer1-plugins-base` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-debuginfo` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-debugsource` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-devel` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-tools` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base-tools-debuginfo` Red Hat:enterprise_linux:10.2	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base` Red Hat:enterprise_linux:8::appstream	All versions	`0:1.16.1-7.el8_10`
`gstreamer1-plugins-base-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:1.16.1-7.el8_10`
`gstreamer1-plugins-base-debugsource` Red Hat:enterprise_linux:8::appstream	All versions	`0:1.16.1-7.el8_10`
`gstreamer1-plugins-base-devel` Red Hat:enterprise_linux:8::appstream	All versions	`0:1.16.1-7.el8_10`
`gstreamer1-plugins-base-tools-debuginfo` Red Hat:enterprise_linux:8::appstream	All versions	`0:1.16.1-7.el8_10`
`gstreamer1-plugins-base` Rocky Linux:10	All versions	`0:1.26.7-2.el10_2.2`
`gstreamer1-plugins-base` Rocky Linux:8	All versions	`0:1.16.1-7.el8_10`

How do I fix CVE-2026-85150?

Apply the vendor's patch.

Is CVE-2026-85150 being exploited?

There is no known exploitation of CVE-2026-85150 in the wild and no public exploit code.

Sources

Also known as ALSA-2026:66460, ALSA-2026:67145, AZL-99891, DEBIAN-CVE-2026-85150, ECHO-5890-0d66-9e2e, GHSA-q4wf-cmpg-8rhf and 7 more.