This vulnerability involves a use-after-free condition in the libsoup SoupServer implementation on Red Hat Enterprise Linux 10. Specifically, the soup_server_disconnect() function frees connection objects before the TLS handshake completes, which can lead to a dangling pointer dereference if the handshake finishes afterward. This results in a server crash and denial of service. The vulnerability is remotely exploitable without authentication but requires high attack complexity. It does not impact confidentiality but has limited integrity impact and high availability impact. No vendor advisory details on patch availability are provided in the input data.

Successful exploitation causes a denial of service by crashing the server due to a use-after-free condition. There is no direct impact on confidentiality or significant integrity loss. The attack requires remote network access and has high complexity, with no privileges or user interaction needed. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-2436 for current remediation guidance. Since no patch or workaround information is provided in the advisory content, users should monitor the vendor site for updates. No vendor-stated mitigations or 'no action required' notes are present in the provided data.