Medium5.9Red Hat Linux Updated

Denial of Service via crafted XML input due to use-after-free

CVE-2026-6653 Published Jun 22, 2026Updated by vendor Jun 22, 2026

Affected products & platforms

Red Hat LinuxUnclassified

Summary

Denial of Service via crafted XML input due to use-after-free. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-416.

Recommended fix / mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Updating to a fixed version of libxml2 (2.11.0 or later upstream, or a future RHEL errata) will fully resolve this issue.

Official advisory · high-confidence parse· fetched 7 hours ago·verify at source

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.