CVE-2026-58016
High
Description
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Gnome Glib
PublishedJun 30, 2026
First seenJun 30, 2026
Weakness typeCWE-191CWE-191
How to fix
Update
- gnome glib2.88.1, 2.89.0 or later
- redhat cert-manager_operator1.18.2 or later
- redhat openshift_ai3.0.3, 3.2.3, 3.4.3 or later
- redhat update_infrastructure5.2 or later
Vendor advisories
- access.redhat.com/errata/RHSA-2026:42063
- access.redhat.com/errata/RHSA-2026:42089
- access.redhat.com/errata/RHSA-2026:42090
- access.redhat.com/errata/RHSA-2026:44481
- access.redhat.com/errata/RHSA-2026:46836
- access.redhat.com/errata/RHSA-2026:49512
- access.redhat.com/errata/RHSA-2026:51175
- access.redhat.com/errata/RHSA-2026:51176
- access.redhat.com/errata/RHSA-2026:51177
- access.redhat.com/errata/RHSA-2026:51181
- access.redhat.com/errata/RHSA-2026:51182
- access.redhat.com/errata/RHSA-2026:51183
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gnome glib | v < 2.88.1, v < 2.89.0 | 2.88.1, 2.89.0 |
| redhat enterprise_linux | 6.0, 7.0, 8.0, 9.0, 10.0 | — |
| redhat cert-manager_operator | 1.18.0 ≤ v < 1.18.2, 1.17.0, 1.20.0 | 1.18.2 |
| redhat codeready_linux_builder | 8.0, 9.0, 10.0 | — |
| redhat codeready_linux_builder_eus | 9.6, 10.0 | — |
| redhat discovery | 2.0 | — |
| redhat insights-proxy | 1.5.0 | — |
| redhat openshift_ai | 3.0 ≤ v < 3.0.3, 3.2 ≤ v < 3.2.3, 3.4 ≤ v < 3.4.3 | 3.0.3, 3.2.3, 3.4.3 |
| redhat update_infrastructure | 5.0 ≤ v < 5.2 | 5.2 |
| redhat enterprise_linux_aus | 8.4, 8.6 | — |
| redhat enterprise_linux_els | 7.0 | — |
| redhat enterprise_linux_eus | 8.4, 8.6, 9.6, 10.0 | — |
| redhat enterprise_linux_server_tus | 8.8 | — |
| redhat enterprise_linux_update_services_for_sap_solutions | 8.8, 9.2, 9.4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.