Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
Impact
A flaw in libmodulemd allows an attacker to cause a denial of service via crafted modulemd YAML with deeply nested xmd content, leading to stack exhaustion or excessive resource consumption. The vulnerability affects Red Hat Enterprise Linux 8, 9, and 10, among other products. An attacker must be able to supply crafted modulemd YAML to exploit the weakness.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.What to do
Until a fix is available, avoid parsing untrusted modulemd documents that may contain attacker-controlled xmd data. If such input must be accepted, reject unusually deep or large xmd structures before handing them to libmodulemd, and isolate parsing in a process with strict stack, CPU, and memory limits.
Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
Red Hat · redhat
Red Hat Enterprise Linux 10
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 10
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:10Red Hat · redhat
Red Hat Enterprise Linux 8
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 8
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:8Red Hat · redhat
Red Hat Enterprise Linux 9
0 ranges
Red Hat · redhat
Red Hat Enterprise Linux 9
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/o:redhat:enterprise_linux:9Red Hat · redhat
Red Hat Hardened Images
0 ranges
Red Hat · redhat
Red Hat Hardened Images
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:hummingbird:1Red Hat · redhat
Red Hat OpenShift Container Platform 4
0 ranges
Red Hat · redhat
Red Hat OpenShift Container Platform 4
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4Red Hat · redhat
Red Hat OpenShift Container Platform 4
0 ranges
Red Hat · redhat
Red Hat OpenShift Container Platform 4
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:4Red Hat · redhat
Red Hat OpenShift Container Platform 5
0 ranges
Red Hat · redhat
Red Hat OpenShift Container Platform 5
Compare with this publisher’s ranges. This does not inspect your installation.
Other versions: affected
Product identifiers (CPE)
cpe:/a:redhat:openshift:5Original source description
A flaw was found in libmodulemd. When parsing module metadata, the xmd field is converted into nested GVariant values through recursive YAML mapping and sequence helpers without a recursion-depth or node-count limit. An attacker who can supply crafted modulemd YAML with deeply nested xmd content can cause stack exhaustion or excessive resource consumption, resulting in a denial of service.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-92822View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 2
Assigning organization
Additional data publisher
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.