Red Hat Red Hat Enterprise Linux 10 Exposes Use-After-Free to Unauthenticated Network Attackers, Enabling Remote Code Execution
Last refreshed2026-10-15
Status: UPDATED
| Advisory ID: CVE-2026-85197
Key Details
CVE
CVE-2026-85197
CVSS Score / Version
7.6 (High) / CVSS v3.1
Updated
2026-10-14
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H
CVSS Prose
attack vector is network; attack complexity is low; privileges required is none; user interaction is required; scope is unchanged; confidentiality impact is low; integrity impact is low; availability impact is high.
Affected products
Red Hat Enterprise Linux 10 and Red Hat Enterprise Linux 10.0 Extended Update Support
Classified as
CWE-416 (Use After Free)
Exploitation prediction (EPSS)
0.27% probability of exploitation in the next 30 days (18% percentile) -- FIRST.org's EPSS model.
Affected Products, Subsystems & Sectors
Vendor
Product
Affected Versions
Patch Status
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 10.0 Extended Update Support
Subsystems
OT Supporting Infrastructure
Sectors
Multiple
What to Know
A flaw was found in libsoup. A malicious HTTP/2 server or a Man-in-the-Middle (MITM) attacker can exploit a heap use-after-free vulnerability in the HTTP/2 client implementation. This occurs when a GNOME application uploads a file using HTTP/2, and the server sends a GOAWAY frame while the file body is being read asynchronously. This can lead to memory corruption, potentially resulting in information disclosure or arbitrary code execution. (NVD)
What to Do
Monitor Red Hat's web page for any future patch releases.