CVE-2026-107170: NULL Pointer Dereference in Red Hat Red Hat Enterprise Linux 10
Description
A NULL pointer dereference vulnerability exists in the m17n-lib component of Red Hat Enterprise Linux 10. Under certain error conditions like resource exhaustion or database corruption, an application opening an input method may dereference an uninitialized internal driver pointer, causing the application to crash and resulting in a denial of service. The vulnerability has a low severity score and does not impact confidentiality or integrity.
CVSS v3.1
Score 2.9low
Affected software
Red Hat
Red Hat Enterprise Linux 10
Red Hat
Red Hat Enterprise Linux 6
Red Hat
Red Hat Enterprise Linux 7
Red Hat
Red Hat Enterprise Linux 8
Red Hat
Red Hat Enterprise Linux 9
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-107170 is a denial of service vulnerability in Red Hat Enterprise Linux 10's m17n-lib library. The flaw arises from a partial failure during library initialization that leaves an internal driver pointer uninitialized. When an application attempts to open an input method under specific error conditions such as system resource exhaustion or database corruption, it dereferences this null pointer without validation, causing the application to crash.
Potential Impact
The vulnerability causes a denial of service by crashing applications that attempt to open an input method under certain error conditions. There is no impact on confidentiality or integrity. The CVSS 3.1 base score is 2.9 (low severity), reflecting local attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to availability.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat vendor advisory at https://access.redhat.com/security/cve/CVE-2026-107170 for current remediation guidance.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-10-07T11:29:09.081Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-107170","vendor":"Red Hat"}]
Threat ID: 6ac643412cdf04f6564d0abc
Added to database: 10/07/2026, 13:04:01 UTC
Last enriched: 10/07/2026, 13:18:28 UTC
Last updated: 10/07/2026, 13:19:12 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.