CVE-2026-15588
Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering
CVE-2026-15588 is fixed in 18 products on 1 platform, first by RHSA-2026:65767, released July 12, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
7.3
Moderate
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0058
47th percentile
A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data lines read from a client. An unauthenticated local or remote attacker can exploit this lack of input validation by sending excessively long streams of data, causing the application to consume massive amounts of system memory and CPU, potentially leading to a crash or system hang.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| gir1.2-girepository-3.0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | gir1.2-girepository-3.0 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| gir1.2-girepository-3.0 · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | gir1.2-girepository-3.0 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| gir1.2-glib-2.0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | gir1.2-glib-2.0 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| gir1.2-glib-2.0 · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | gir1.2-glib-2.0 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| girepository-tools · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | girepository-tools 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| glib2 · RHEL 10 | 2.80.4-4.el10_0.17 | RHSA-2026:65767 | Jul 12, 2026 |
| glib2 · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2 · RHEL 9 | 0:2.68.4-19.el9_8.9 | RHSA-2026:55440 | Aug 19, 2026 |
| glib2 · almalinux 10 | 2.80.4-12.el10_2.21 | ALSA-2026:57015 | Aug 19, 2026 |
| glib2 · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2 · almalinux 9 | 2.68.4-19.el9_8.9 | ALSA-2026:55440 | Aug 17, 2026 |
| glib2 · ol 10 | 0:2.80.4-12.el10_2.21 | ELSA-2026-57015 | Aug 19, 2026 |
| glib2 · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2 · ol 9 | 0:2.68.4-19.el9_8.9 | ELSA-2026-55440 | Aug 17, 2026 |
| glib2 · opensuse-leap 16.0 | 2.84.4-160000.5.1 | OPENSUSE-SU-2026:21977-1 | Sep 30, 2026 |
| glib2 · rocky 10 | 0:2.80.4-12.el10_2.21 | RLSA-2026:57015 | Aug 20, 2026 |
| glib2 · rocky 8 | 0:2.56.4-177.el8_10 | RLSA-2026:61766 | Sep 1, 2026 |
| glib2 · rocky 9 | 0:2.68.4-19.el9_8.9 | RLSA-2026:55440 | Aug 17, 2026 |
| glib2 · sles 15.7 | 2.78.6-150600.4.41.1 | SUSE-SU-2026:4367-1 | Sep 28, 2026 |
| glib2 · sles 16.0 | 2.84.4-160000.5.1 | SUSE-SU-2026:23980-1 | Sep 30, 2026 |
| glib2-devel · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2-devel · RHEL 9 | 0:2.68.4-19.el9_8.9 | RHSA-2026:55440 | Aug 19, 2026 |
| glib2-devel · almalinux 10 | 2.80.4-12.el10_2.21 | ALSA-2026:57015 | Aug 19, 2026 |
| glib2-devel · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2-devel · almalinux 9 | 2.68.4-19.el9_8.9 | ALSA-2026:55440 | Aug 17, 2026 |
| glib2-devel · ol 10 | 0:2.80.4-12.el10_2.21 | ELSA-2026-57015 | Aug 19, 2026 |
| glib2-devel · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2-devel · ol 9 | 0:2.68.4-19.el9_8.9 | ELSA-2026-55440 | Aug 17, 2026 |
| glib2-doc · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2-doc · RHEL 9 | 0:2.68.4-19.el9_8.9 | RHSA-2026:55440 | Aug 19, 2026 |
| glib2-doc · almalinux 10 | 2.80.4-12.el10_2.21 | ALSA-2026:57015 | Aug 19, 2026 |
| glib2-doc · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2-doc · almalinux 9 | 2.68.4-19.el9_8.9 | ALSA-2026:55440 | Aug 17, 2026 |
| glib2-doc · ol 10 | 0:2.80.4-12.el10_2.21 | ELSA-2026-57015 | Aug 19, 2026 |
| glib2-doc · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2-doc · ol 9 | 0:2.68.4-19.el9_8.9 | ELSA-2026-55440 | Aug 17, 2026 |
| glib2-doc · opensuse-leap 16.0 | 2.84.4-160000.5.1 | OPENSUSE-SU-2026:21977-1 | Sep 30, 2026 |
| glib2-doc · sles 16.0 | 2.84.4-160000.5.1 | SUSE-SU-2026:23980-1 | Sep 30, 2026 |
| glib2-fam · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2-fam · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2-fam · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2-static · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2-static · RHEL 9 | 0:2.68.4-19.el9_8.9 | RHSA-2026:55440 | Aug 19, 2026 |
| glib2-static · almalinux 10 | 2.80.4-12.el10_2.21 | ALSA-2026:57015 | Aug 19, 2026 |
| glib2-static · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2-static · almalinux 9 | 2.68.4-19.el9_8.9 | ALSA-2026:55440 | Aug 17, 2026 |
| glib2-static · ol 10 | 0:2.80.4-12.el10_2.21 | ELSA-2026-57015 | Aug 19, 2026 |
| glib2-static · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2-static · ol 9 | 0:2.68.4-19.el9_8.9 | ELSA-2026-55440 | Aug 17, 2026 |
| glib2-tests · RHEL 8 | 0:2.56.4-177.el8_10 | RHSA-2026:61766 | Sep 13, 2026 |
| glib2-tests · RHEL 9 | 0:2.68.4-19.el9_8.9 | RHSA-2026:55440 | Aug 19, 2026 |
| glib2-tests · almalinux 10 | 2.80.4-12.el10_2.21 | ALSA-2026:57015 | Aug 19, 2026 |
| glib2-tests · almalinux 8 | 2.56.4-177.el8_10 | ALSA-2026:61766 | Aug 31, 2026 |
| glib2-tests · almalinux 9 | 2.68.4-19.el9_8.9 | ALSA-2026:55440 | Aug 17, 2026 |
| glib2-tests · ol 10 | 0:2.80.4-12.el10_2.21 | ELSA-2026-57015 | Aug 19, 2026 |
| glib2-tests · ol 8 | 0:2.56.4-177.el8_10 | ELSA-2026-61766-0 | Sep 1, 2026 |
| glib2-tests · ol 9 | 0:2.68.4-19.el9_8.9 | ELSA-2026-55440 | Aug 17, 2026 |
| glib2.0 · Debian 13.5 (trixie) | 2.84.4-3~deb13u4 | DEBIAN-CVE-2026-15588 | Aug 11, 2026 |
| glib2.0 · Debian 14 | 2.88.3-1 | DEBIAN-CVE-2026-15588 | Aug 11, 2026 |
| libgio-2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libgio-2.0-dev-bin 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libgirepository-2.0-0 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libgirepository-2.0-0 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libgirepository-2.0-0 · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libgirepository-2.0-0 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libglib2.0-0 · Ubuntu 18.04.6 LTS (bionic) | 2.56.4-0ubuntu0.18.04.9+esm6 | libglib2.0-0 2.56.4-0ubuntu0.18.04.9+esm6 | Jul 20, 2026 |
| libglib2.0-0 · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.9+esm2 | libglib2.0-0 2.64.6-1~ubuntu20.04.9+esm2 | Jul 20, 2026 |
| libglib2.0-0 · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.10 | libglib2.0-0 2.72.4-0ubuntu2.10 | Jul 20, 2026 |
| libglib2.0-0t64 · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libglib2.0-0t64 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libglib2.0-0t64 · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libglib2.0-0t64 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libglib2.0-bin · Ubuntu 18.04.6 LTS (bionic) | 2.56.4-0ubuntu0.18.04.9+esm6 | libglib2.0-bin 2.56.4-0ubuntu0.18.04.9+esm6 | Jul 20, 2026 |
| libglib2.0-bin · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.9+esm2 | libglib2.0-bin 2.64.6-1~ubuntu20.04.9+esm2 | Jul 20, 2026 |
| libglib2.0-bin · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.10 | libglib2.0-bin 2.72.4-0ubuntu2.10 | Jul 20, 2026 |
| libglib2.0-bin · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libglib2.0-bin 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libglib2.0-bin · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libglib2.0-bin 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libglib2.0-data · Ubuntu 18.04.6 LTS (bionic) | 2.56.4-0ubuntu0.18.04.9+esm6 | libglib2.0-data 2.56.4-0ubuntu0.18.04.9+esm6 | Jul 20, 2026 |
| libglib2.0-data · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.9+esm2 | libglib2.0-data 2.64.6-1~ubuntu20.04.9+esm2 | Jul 20, 2026 |
| libglib2.0-data · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.10 | libglib2.0-data 2.72.4-0ubuntu2.10 | Jul 20, 2026 |
| libglib2.0-data · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libglib2.0-data 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libglib2.0-data · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libglib2.0-data 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libglib2.0-dev-bin · Ubuntu 18.04.6 LTS (bionic) | 2.56.4-0ubuntu0.18.04.9+esm6 | libglib2.0-dev-bin 2.56.4-0ubuntu0.18.04.9+esm6 | Jul 20, 2026 |
| libglib2.0-dev-bin · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.9+esm2 | libglib2.0-dev-bin 2.64.6-1~ubuntu20.04.9+esm2 | Jul 20, 2026 |
| libglib2.0-dev-bin · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.10 | libglib2.0-dev-bin 2.72.4-0ubuntu2.10 | Jul 20, 2026 |
| libglib2.0-dev-bin · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libglib2.0-dev-bin 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libglib2.0-dev-bin · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libglib2.0-dev-bin 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
| libglib2.0-tests · Ubuntu 18.04.6 LTS (bionic) | 2.56.4-0ubuntu0.18.04.9+esm6 | libglib2.0-tests 2.56.4-0ubuntu0.18.04.9+esm6 | Jul 20, 2026 |
| libglib2.0-tests · Ubuntu 20.04 LTS (focal) | 2.64.6-1~ubuntu20.04.9+esm2 | libglib2.0-tests 2.64.6-1~ubuntu20.04.9+esm2 | Jul 20, 2026 |
| libglib2.0-tests · Ubuntu 22.04.1 LTS (jammy) | 2.72.4-0ubuntu2.10 | libglib2.0-tests 2.72.4-0ubuntu2.10 | Jul 20, 2026 |
| libglib2.0-tests · Ubuntu 24.04.5 LTS (noble) | 2.80.0-6ubuntu3.9 | libglib2.0-tests 2.80.0-6ubuntu3.9 | Jul 20, 2026 |
| libglib2.0-tests · Ubuntu 26.04.1 LTS (resolute) | 2.88.0-1ubuntu0.1 | libglib2.0-tests 2.88.0-1ubuntu0.1 | Jul 20, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.