CVE-2026-2436
libsoup: libsoup: Denial of Service via use-after-free in SoupServer during TLS handshake
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · February 11, 2026
Updated · July 3, 2026
Description
A flaw was found in libsoup's SoupServer. A remote attacker could exploit a use-after-free vulnerability where the soup_server_disconnect() function frees connection objects prematurely, even if a TLS handshake is still pending. If the handshake completes after the connection object has been freed, a dangling pointer is accessed, leading to a server crash and a Denial of Service.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H
CWE-825 · Expired Pointer Dereference