A critical Denial of Service vulnerability in GnuTLS affects multiple versions of Red Hat Enterprise Linux, allowing unauthenticated attackers to crash services remotely.

This flaw involves a NULL pointer dereference triggered by an invalid Pre-Shared Key (PSK) binder value within a TLS ClientHello message. An unauthenticated attacker can exploit this during the handshake process to crash the affected service.

The vulnerability carries a CVSS score of 7.5, reflecting its high impact on service availability. Successful exploitation results in a remote Denial of Service, which can disrupt critical business operations, halt authenticated traffic, and impact service level agreements. Given the ease of exploitation, this poses a significant risk to network infrastructure availability.

Immediate Action: Update the GnuTLS package on all affected Red Hat systems to version 3.8.12-1.1.hum1 or later as specified in RHSA-2026:7477.

Proactive Monitoring: Monitor system logs for repeated TLS handshake failures or service crashes that correlate with anomalous network traffic patterns.

Compensating Controls: Deploy network-level traffic inspection or Intrusion Prevention Systems (IPS) capable of identifying and blocking malformed TLS handshake packets to reduce the exposure to this exploit.

Public Exploit Available: No (exploit_available: false)

Organizations running Red Hat Enterprise Linux environments should prioritize the deployment of the vendor-provided security patches. Because this vulnerability is automatable and requires no authentication to trigger, it represents a clear risk to service uptime. System administrators must apply the update to the GnuTLS library immediately to prevent potential service disruption by remote actors.