An integer underflow vulnerability exists in the libsoup library used by Red Hat Enterprise Linux 10. This occurs during processing of content with a zero-length resource, leading to a buffer overread condition. The vulnerability could be exploited remotely without privileges or user interaction, potentially allowing information disclosure or denial of service at the application level. The CVSS 3.1 base score is 6.5 (medium severity), with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality and availability.

Successful exploitation may allow an attacker to read beyond buffer boundaries, potentially exposing sensitive information or causing an application to crash, resulting in denial of service. There is no indication of integrity impact. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-2369 for current remediation guidance. No explicit patch or workaround information is provided in the available advisory content. Users should monitor the vendor advisory for updates and apply official fixes once available.