CVE-2026-109832: Loop with Unreachable Exit Condition ('Infinite Loop') in Red Hat Red Hat Enterprise Linux 10

The vulnerability exists in the handling of retryable GnuTLS results (GNUTLS_E_AGAIN and GNUTLS_E_INTERRUPTED) within the VNC TLS I/O handlers of gnome-remote-desktop in Red Hat Enterprise Linux 10. Instead of yielding control back to the event loop, the code enters an unbounded busy loop, causing the event-loop thread to spin at high CPU usage without making forward progress. A remote attacker able to reach the VNC TLS listener can exploit this to cause a denial of service by exhausting CPU resources.

A remote attacker with network access to an enabled VNC TLS listener can cause a denial of service by triggering a high CPU usage condition that prevents the event loop from progressing. This results in service disruption but does not impact confidentiality or integrity.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-109832 for current remediation guidance. Until a fix is applied, consider disabling the VNC TLS listener if it is not required to reduce exposure.