This vulnerability exists in glib-networking with the GnuTLS backend enabled on Red Hat Enterprise Linux 10. A remote attacker can present a certificate chain containing circular issuer relationships to an application performing certificate verification. The verification process enters an infinite loop due to the unreachable exit condition in the chain traversal, causing unbounded CPU usage and resulting in denial of service of the affected process or worker. The vulnerability does not affect confidentiality or integrity and requires user interaction to trigger.

The impact is a denial of service condition caused by excessive CPU resource consumption during certificate verification. There is no impact on confidentiality or integrity of data. The vulnerability can be triggered remotely but requires user interaction. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-10028 for current remediation guidance. Until an official fix is available, consider limiting exposure of affected applications to untrusted certificate chains or applying any recommended workarounds from Red Hat. Monitor the vendor advisory for updates.