A critical stack-based buffer overflow in the libsoup HTTP library, affecting GNOME and other applications, poses a significant risk of denial-of-service and potential memory corruption.

The vulnerability is a stack-based buffer overflow (CWE-121) caused by improper signed integer usage during NTLM authentication password processing. This flaw allows an unauthenticated attacker to trigger incorrect memory allocation and unsafe copying when providing an excessively long password.

The primary impact of this vulnerability is a denial-of-service, as applications utilizing libsoup may crash unexpectedly when processing malicious input. With a CVSS score of 7.5, this high-severity flaw necessitates prompt attention because it could lead to service disruption for critical infrastructure or user-facing network applications that rely on libsoup for communication.

Immediate Action: Apply the vendor-provided security updates for Red Hat Enterprise Linux as specified in the corresponding RHSA errata (e.g., RHSA-2026:1948, RHSA-2026:2005, and related links). Ensure that all dependent applications are restarted after the library update to finalize the patch application.

Proactive Monitoring: Review system and application logs for abnormal process terminations or segmentation faults that may correlate with network communication attempts.

Compensating Controls: While no specific WAF rule can fully prevent the internal buffer overflow, implementing network-level ingress filtering to restrict untrusted NTLM authentication traffic can reduce the attack surface.

Public Exploit Available: No (exploit_available: false)

Organizations should prioritize the deployment of the identified patches across all affected Red Hat Enterprise Linux environments. Given the potential for service instability and the inherent risk of memory corruption vulnerabilities, testing and deploying these updates according to standard change management procedures is required to maintain system integrity and availability.