Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed D-Bus introspection XML, specifically with a `node` element nested within other elements like `method`, `signal`, `property` or `arg`. This issue can cause an unsigned integer overflow and lead to an out-of-bounds read, resulting in a denial of service.
Evidence and details
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-58016
GLib
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 10
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 10.0 Extended Update Support
Source reference: /containers/cna/affected/2/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 7 Extended Lifecycle Support
Source reference: /containers/cna/affected/3/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8
Source reference: /containers/cna/affected/4/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8
Source reference: /containers/cna/affected/5/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
Source reference: /containers/cna/affected/6/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On
Source reference: /containers/cna/affected/7/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
Source reference: /containers/cna/affected/8/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On
Source reference: /containers/cna/affected/9/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.8 Telecommunications Update Service
Source reference: /containers/cna/affected/10/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
Source reference: /containers/cna/affected/11/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/12/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/13/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions
Source reference: /containers/cna/affected/14/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions
Source reference: /containers/cna/affected/15/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9.6 Extended Update Support
Source reference: /containers/cna/affected/16/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.17
Source reference: /containers/cna/affected/17/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.17
Source reference: /containers/cna/affected/18/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.17
Source reference: /containers/cna/affected/19/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.17
Source reference: /containers/cna/affected/20/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.17
Source reference: /containers/cna/affected/21/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.18
Source reference: /containers/cna/affected/22/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.18
Source reference: /containers/cna/affected/23/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.18
Source reference: /containers/cna/affected/24/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.18
Source reference: /containers/cna/affected/25/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.18
Source reference: /containers/cna/affected/26/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/27/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/28/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/29/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/30/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/31/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/32/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/33/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Cert Manager support for Red Hat OpenShift release 1.20
Source reference: /containers/cna/affected/34/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Discovery 2
Source reference: /containers/cna/affected/35/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Discovery 2
Source reference: /containers/cna/affected/36/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Insights proxy 1.5
Source reference: /containers/cna/affected/37/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.0
Source reference: /containers/cna/affected/38/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.0
Source reference: /containers/cna/affected/39/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.0
Source reference: /containers/cna/affected/40/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.0
Source reference: /containers/cna/affected/41/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.0
Source reference: /containers/cna/affected/42/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/43/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/44/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/45/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/46/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/47/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.2
Source reference: /containers/cna/affected/48/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat OpenShift AI 3.4
Source reference: /containers/cna/affected/49/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/50/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/51/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/52/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/53/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/54/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/55/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/56/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Update Infrastructure 5
Source reference: /containers/cna/affected/57/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 10
Source reference: /containers/cna/affected/58/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 6
Source reference: /containers/cna/affected/59/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Enterprise Linux 9
Source reference: /containers/cna/affected/60/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Red Hat Hardened Images
Source reference: /containers/cna/affected/61/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
- Related CVEs
- CVE-2026-58016
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics