Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…

CVE-2026-0989: Uncontrolled Recursion in Red Hat Red Hat Enterprise Linux 10

0
Low
VulnerabilityCVE-2026-0989cvecve-2026-0989
Published: Thu Jan 15 2026 (01/15/2026, 14:20:23 UTC)
Source: CVE Database V5
Vendor/Project: Red Hat
Product: Red Hat Enterprise Linux 10

Description

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

Technical Details

Data Version
5.2
Assigner Short Name
redhat
Date Reserved
2026-01-15T12:38:51.419Z
Cvss Version
3.1
State
PUBLISHED

Threat ID: 6968faa94c611209ad238972

Added to database: 1/15/2026, 2:33:13 PM

Last updated: 1/15/2026, 2:33:19 PM

Views: 1

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Actions

Please log in to the Console to use AI analysis features.

Need more coverage?

Upgrade to Pro Console in Console -> Billing for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats