AI and data stack advisories

Severe, 6 weeks1490Projects326

1490 severe, 6 weeks · 326 projects

Red HatCVE-2026-109832

Red Hat gnome-remote-desktop as shipped: denial of service

Red Hat

CVE-2026-109832 · Published Oct 13, 2026 · updated Nov 4, 2026

High7.5
No fix yet
Red Hat advisory

A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux. In the VNC TLS I/O handlers, retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) are handled with an unbounded busy loop instead of yielding to the event loop. A remote attacker who can reach an enabled VNC TLS listener can cause the event-loop thread to spin at high CPU with no forward progress, resulting in denial of service.

Affected versions

PackageAffectedFixed in
Red Hat Enterprise Linux 10
Product
all versionsNo fix yet
Red Hat Enterprise Linux 8
Product
all versionsNo fix yet
Red Hat Enterprise Linux 9
Product
all versionsNo fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-835

More Red Hat advisories

All Red Hat
Low 3.3Oct 13Red Hat device-mapper-persistent-data: denial of serviceCVE-2026-110036no fix yetMedium 5.5Oct 13Red Hat BlueZ. An out-of-bounds read vulnerability exists: out-of-bounds readCVE-2026-105460no fix yetMedium 4.7Oct 13Red Hat Enterprise Linux 10: integer overflowCVE-2026-109976no fix yetMedium 5.9Oct 13Red Hat gnome-remote-desktop as shipped: out-of-bounds writeCVE-2026-109833no fix yetLow 2.5Oct 13Red Hat m17n-lib: information disclosureCVE-2026-109854no fix yetHigh 7.7Oct 12Red Hat OpenShift Container Platform 5: server-side request forgeryCVE-2026-75888no fix yet