{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-10536.json"}],"title":"libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service","tracking":{"current_release_date":"2026-08-31T11:30:23+00:00","generator":{"date":"2026-08-31T11:30:23+00:00","engine":{"name":"Red Hat SDEngine","version":"5.3.16"}},"id":"CVE-2026-10536","initial_release_date":"2026-07-03T06:11:15.378000+00:00","revision_history":[{"date":"2026-07-03T06:11:15.378000+00:00","number":"1","summary":"Initial version"},{"date":"2026-08-31T10:17:07+00:00","number":"2","summary":"Current version"},{"date":"2026-08-31T11:30:23+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Confidential Compute Attestation","product":{"name":"Confidential Compute Attestation","product_id":"confidential_compute_attestation","product_identification_helper":{"cpe":"cpe:/a:redhat:confidential_compute_attestation:1"}}}],"category":"product_family","name":"Confidential Compute Attestation"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 10","product":{"name":"Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:10"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 10"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 6","product":{"name":"Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:6"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 6"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 7","product":{"name":"Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:7"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 7"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 8","product":{"name":"Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:8"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 8"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux 9","product":{"name":"Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9","product_identification_helper":{"cpe":"cpe:/o:redhat:enterprise_linux:9"}}}],"category":"product_family","name":"Red Hat Enterprise Linux 9"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux AI (RHEL AI) 3","product":{"name":"Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3","product_identification_helper":{"cpe":"cpe:/a:redhat:enterprise_linux_ai:3"}}}],"category":"product_family","name":"Red Hat Enterprise Linux AI (RHEL AI) 3"},{"branches":[{"category":"product_name","name":"Red Hat Hardened Images","product":{"name":"Red Hat Hardened Images","product_id":"red_hat_hardened_images","product_identification_helper":{"cpe":"cpe:/a:redhat:hummingbird:1"}}},{"category":"product_name","name":"Red Hat Hardened Images","product":{"name":"Red Hat Hardened Images","product_id":"Red Hat Hardened Images","product_identification_helper":{"cpe":"cpe:/a:redhat:hummingbird:1"}}}],"category":"product_family","name":"Red Hat Hardened Images"},{"branches":[{"category":"product_name","name":"Red Hat JBoss Core Services","product":{"name":"Red Hat JBoss Core Services","product_id":"red_hat_jboss_core_services","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_core_services:1"}}},{"category":"product_name","name":"Red Hat JBoss Core Services 2.4.62.SP5","product":{"name":"Red Hat JBoss Core Services 2.4.62.SP5","product_id":"Red Hat JBoss Core Services 2.4.62.SP5","product_identification_helper":{"cpe":"cpe:/a:redhat:jboss_core_services:1"}}}],"category":"product_family","name":"Red Hat JBoss Core Services"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift Container Platform 4","product":{"name":"Red Hat OpenShift Container Platform 4","product_id":"red_hat_openshift_container_platform_4","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift:4"}}}],"category":"product_family","name":"Red Hat OpenShift Container Platform 4"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift Dev Spaces","product":{"name":"Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_devspaces:3"}}}],"category":"product_family","name":"Red Hat OpenShift Dev Spaces"},{"branches":[{"category":"product_name","name":"Red Hat Trusted Profile Analyzer","product":{"name":"Red Hat Trusted Profile Analyzer","product_id":"red_hat_trusted_profile_analyzer","product_identification_helper":{"cpe":"cpe:/a:redhat:trusted_profile_analyzer:2"}}}],"category":"product_family","name":"Red Hat Trusted Profile Analyzer"},{"category":"product_version","name":"build-of-trustee/trustee-rhel9","product":{"name":"build-of-trustee/trustee-rhel9","product_id":"build-of-trustee/trustee-rhel9","product_identification_helper":{"purl":"pkg:oci/trustee-rhel9?repository_url=registry.redhat.io/build-of-trustee/trustee-rhel9"}}},{"category":"product_version","name":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","product":{"name":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","product_id":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","product_identification_helper":{"purl":"pkg:oci/osc-podvm-payload-rhel9?repository_url=registry.redhat.io/openshift-sandboxed-containers/osc-podvm-payload-rhel9"}}},{"category":"product_version","name":"libcurl-minimal","product":{"name":"libcurl-minimal","product_id":"libcurl-minimal","product_identification_helper":{"purl":"pkg:rpm/redhat/libcurl-minimal"}}},{"category":"product_version","name":"libcurl-devel","product":{"name":"libcurl-devel","product_id":"libcurl-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/libcurl-devel"}}},{"category":"product_version","name":"curl","product":{"name":"curl","product_id":"curl","product_identification_helper":{"purl":"pkg:rpm/redhat/curl"}}},{"category":"product_version","name":"libcurl","product":{"name":"libcurl","product_id":"libcurl","product_identification_helper":{"purl":"pkg:rpm/redhat/libcurl"}}},{"category":"product_version","name":"curl.src","product":{"name":"curl.src","product_id":"curl.src","product_identification_helper":{"purl":"pkg:rpm/redhat/curl?arch=src"}}},{"category":"product_version","name":"igvm.src","product":{"name":"igvm.src","product_id":"igvm.src","product_identification_helper":{"purl":"pkg:rpm/redhat/igvm?arch=src"}}},{"category":"product_version","name":"rust-std-static-wasm32-wasip1","product":{"name":"rust-std-static-wasm32-wasip1","product_id":"rust-std-static-wasm32-wasip1","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static-wasm32-wasip1"}}},{"category":"product_version","name":"rustfmt","product":{"name":"rustfmt","product_id":"rustfmt","product_identification_helper":{"purl":"pkg:rpm/redhat/rustfmt"}}},{"category":"product_version","name":"rust-lldb","product":{"name":"rust-lldb","product_id":"rust-lldb","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-lldb"}}},{"category":"product_version","name":"rust-debugger-common","product":{"name":"rust-debugger-common","product_id":"rust-debugger-common","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-debugger-common"}}},{"category":"product_version","name":"rust-analyzer","product":{"name":"rust-analyzer","product_id":"rust-analyzer","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-analyzer"}}},{"category":"product_version","name":"clippy","product":{"name":"clippy","product_id":"clippy","product_identification_helper":{"purl":"pkg:rpm/redhat/clippy"}}},{"category":"product_version","name":"rust-doc","product":{"name":"rust-doc","product_id":"rust-doc","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-doc"}}},{"category":"product_version","name":"rust-gdb","product":{"name":"rust-gdb","product_id":"rust-gdb","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-gdb"}}},{"category":"product_version","name":"rust-src","product":{"name":"rust-src","product_id":"rust-src","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-src"}}},{"category":"product_version","name":"rust-std-static-x86_64-unknown-none","product":{"name":"rust-std-static-x86_64-unknown-none","product_id":"rust-std-static-x86_64-unknown-none","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static-x86_64-unknown-none"}}},{"category":"product_version","name":"rust-std-static","product":{"name":"rust-std-static","product_id":"rust-std-static","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static"}}},{"category":"product_version","name":"rust-std-static-aarch64-unknown-none-softfloat","product":{"name":"rust-std-static-aarch64-unknown-none-softfloat","product_id":"rust-std-static-aarch64-unknown-none-softfloat","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static-aarch64-unknown-none-softfloat"}}},{"category":"product_version","name":"rust-toolset","product":{"name":"rust-toolset","product_id":"rust-toolset","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-toolset"}}},{"category":"product_version","name":"cargo","product":{"name":"cargo","product_id":"cargo","product_identification_helper":{"purl":"pkg:rpm/redhat/cargo"}}},{"category":"product_version","name":"rust-toolset-srpm-macros","product":{"name":"rust-toolset-srpm-macros","product_id":"rust-toolset-srpm-macros","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-toolset-srpm-macros"}}},{"category":"product_version","name":"rust-std-static-wasm32-unknown-unknown","product":{"name":"rust-std-static-wasm32-unknown-unknown","product_id":"rust-std-static-wasm32-unknown-unknown","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static-wasm32-unknown-unknown"}}},{"category":"product_version","name":"rust.src","product":{"name":"rust.src","product_id":"rust.src","product_identification_helper":{"purl":"pkg:rpm/redhat/rust?arch=src"}}},{"category":"product_version","name":"s390utils-core","product":{"name":"s390utils-core","product_id":"s390utils-core","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-core"}}},{"category":"product_version","name":"s390utils-base","product":{"name":"s390utils-base","product_id":"s390utils-base","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-base"}}},{"category":"product_version","name":"s390utils-cpuplugd","product":{"name":"s390utils-cpuplugd","product_id":"s390utils-cpuplugd","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-cpuplugd"}}},{"category":"product_version","name":"s390utils-se-data","product":{"name":"s390utils-se-data","product_id":"s390utils-se-data","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-se-data"}}},{"category":"product_version","name":"s390utils-iucvterm","product":{"name":"s390utils-iucvterm","product_id":"s390utils-iucvterm","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-iucvterm"}}},{"category":"product_version","name":"s390utils-devel","product":{"name":"s390utils-devel","product_id":"s390utils-devel","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-devel"}}},{"category":"product_version","name":"s390utils-mon_statd","product":{"name":"s390utils-mon_statd","product_id":"s390utils-mon_statd","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-mon_statd"}}},{"category":"product_version","name":"s390utils-cpacfstatsd","product":{"name":"s390utils-cpacfstatsd","product_id":"s390utils-cpacfstatsd","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-cpacfstatsd"}}},{"category":"product_version","name":"s390utils.src","product":{"name":"s390utils.src","product_id":"s390utils.src","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils?arch=src"}}},{"category":"product_version","name":"s390utils-chreipl-fcp-mpath","product":{"name":"s390utils-chreipl-fcp-mpath","product_id":"s390utils-chreipl-fcp-mpath","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-chreipl-fcp-mpath"}}},{"category":"product_version","name":"s390utils-zdsfs","product":{"name":"s390utils-zdsfs","product_id":"s390utils-zdsfs","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-zdsfs"}}},{"category":"product_version","name":"s390utils-hmcdrvfs","product":{"name":"s390utils-hmcdrvfs","product_id":"s390utils-hmcdrvfs","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-hmcdrvfs"}}},{"category":"product_version","name":"s390utils-cmsfs-fuse","product":{"name":"s390utils-cmsfs-fuse","product_id":"s390utils-cmsfs-fuse","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-cmsfs-fuse"}}},{"category":"product_version","name":"s390utils-osasnmpd","product":{"name":"s390utils-osasnmpd","product_id":"s390utils-osasnmpd","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-osasnmpd"}}},{"category":"product_version","name":"s390utils-ziomon","product":{"name":"s390utils-ziomon","product_id":"s390utils-ziomon","product_identification_helper":{"purl":"pkg:rpm/redhat/s390utils-ziomon"}}},{"category":"product_version","name":"snphost.src","product":{"name":"snphost.src","product_id":"snphost.src","product_identification_helper":{"purl":"pkg:rpm/redhat/snphost?arch=src"}}},{"category":"product_version","name":"trustee-kbs","product":{"name":"trustee-kbs","product_id":"trustee-kbs","product_identification_helper":{"purl":"pkg:rpm/redhat/trustee-kbs"}}},{"category":"product_version","name":"trustee-guest-components.src","product":{"name":"trustee-guest-components.src","product_id":"trustee-guest-components.src","product_identification_helper":{"purl":"pkg:rpm/redhat/trustee-guest-components?arch=src"}}},{"category":"product_version","name":"curl-minimal","product":{"name":"curl-minimal","product_id":"curl-minimal","product_identification_helper":{"purl":"pkg:rpm/redhat/curl-minimal"}}},{"category":"product_version","name":"rust-std-static-wasm32-wasi","product":{"name":"rust-std-static-wasm32-wasi","product_id":"rust-std-static-wasm32-wasi","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-std-static-wasm32-wasi"}}},{"category":"product_version","name":"rust","product":{"name":"rust","product_id":"rust","product_identification_helper":{"purl":"pkg:rpm/redhat/rust"}}},{"category":"product_version","name":"rust-analysis","product":{"name":"rust-analysis","product_id":"rust-analysis","product_identification_helper":{"purl":"pkg:rpm/redhat/rust-analysis"}}},{"category":"product_version","name":"libcurl.so","product":{"name":"libcurl.so","product_id":"libcurl.so","product_identification_helper":{"purl":"pkg:generic/libcurl.so"}}},{"category":"product_version","name":"openshift/ose-rhel-coreos-8","product":{"name":"openshift/ose-rhel-coreos-8","product_id":"openshift/ose-rhel-coreos-8","product_identification_helper":{"purl":"pkg:oci/ose-rhel-coreos-8?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-8"}}},{"category":"product_version","name":"openshift/ose-rhel-coreos-9","product":{"name":"openshift/ose-rhel-coreos-9","product_id":"openshift/ose-rhel-coreos-9","product_identification_helper":{"purl":"pkg:oci/ose-rhel-coreos-9?repository_url=registry.redhat.io/openshift/ose-rhel-coreos-9"}}},{"category":"product_version","name":"devspaces/code-rhel9","product":{"name":"devspaces/code-rhel9","product_id":"devspaces/code-rhel9","product_identification_helper":{"purl":"pkg:oci/code-rhel9?repository_url=registry.redhat.io/devspaces/code-rhel9"}}},{"category":"product_version","name":"rhtpa/rhtpa-trustification-service-rhel9","product":{"name":"rhtpa/rhtpa-trustification-service-rhel9","product_id":"rhtpa/rhtpa-trustification-service-rhel9","product_identification_helper":{"purl":"pkg:oci/rhtpa-trustification-service-rhel9?repository_url=registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9"}}},{"branches":[{"category":"product_version","name":"curl-main@aarch64","product":{"name":"curl-main@aarch64","product_id":"curl-main@aarch64","product_identification_helper":{"purl":"pkg:rpm/redhat/curl@8.21.0-0.1.1.hum1?arch=aarch64&distro=hummingbird-20251124&repository_id=public-hummingbird-aarch64-rpms"}}}],"category":"architecture","name":"aarch64"},{"branches":[{"category":"product_version","name":"curl-main@src","product":{"name":"curl-main@src","product_id":"curl-main@src","product_identification_helper":{"purl":"pkg:rpm/redhat/curl@8.21.0-0.1.1.hum1?arch=src&distro=hummingbird-20251124&repository_id=public-hummingbird-source-rpms"}}}],"category":"architecture","name":"src"},{"branches":[{"category":"product_version","name":"curl-main@x86_64","product":{"name":"curl-main@x86_64","product_id":"curl-main@x86_64","product_identification_helper":{"purl":"pkg:rpm/redhat/curl@8.21.0-0.1.1.hum1?arch=x86_64&distro=hummingbird-20251124&repository_id=public-hummingbird-x86_64-rpms"}}}],"category":"architecture","name":"x86_64"}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"curl-main@aarch64 as a component of Red Hat Hardened Images","product_id":"Red Hat Hardened Images:curl-main@aarch64"},"product_reference":"curl-main@aarch64","relates_to_product_reference":"Red Hat Hardened Images"},{"category":"default_component_of","full_product_name":{"name":"curl-main@src as a component of Red Hat Hardened Images","product_id":"Red Hat Hardened Images:curl-main@src"},"product_reference":"curl-main@src","relates_to_product_reference":"Red Hat Hardened Images"},{"category":"default_component_of","full_product_name":{"name":"curl-main@x86_64 as a component of Red Hat Hardened Images","product_id":"Red Hat Hardened Images:curl-main@x86_64"},"product_reference":"curl-main@x86_64","relates_to_product_reference":"Red Hat Hardened Images"},{"category":"default_component_of","full_product_name":{"name":"build-of-trustee/trustee-rhel9 as a component of Confidential Compute Attestation","product_id":"confidential_compute_attestation:build-of-trustee/trustee-rhel9"},"product_reference":"build-of-trustee/trustee-rhel9","relates_to_product_reference":"confidential_compute_attestation"},{"category":"default_component_of","full_product_name":{"name":"openshift-sandboxed-containers/osc-podvm-payload-rhel9 as a component of Confidential Compute Attestation","product_id":"confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9"},"product_reference":"openshift-sandboxed-containers/osc-podvm-payload-rhel9","relates_to_product_reference":"confidential_compute_attestation"},{"category":"default_component_of","full_product_name":{"name":"cargo as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:cargo"},"product_reference":"cargo","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"clippy as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:clippy"},"product_reference":"clippy","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"curl as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:curl"},"product_reference":"curl","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"curl.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:curl.src"},"product_reference":"curl.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"igvm.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:igvm.src"},"product_reference":"igvm.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"libcurl as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:libcurl"},"product_reference":"libcurl","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"libcurl-devel as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:libcurl-devel"},"product_reference":"libcurl-devel","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"libcurl-minimal as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:libcurl-minimal"},"product_reference":"libcurl-minimal","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-analyzer as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-analyzer"},"product_reference":"rust-analyzer","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-debugger-common as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-debugger-common"},"product_reference":"rust-debugger-common","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-doc as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-doc"},"product_reference":"rust-doc","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-gdb as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-gdb"},"product_reference":"rust-gdb","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-lldb as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-lldb"},"product_reference":"rust-lldb","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-src"},"product_reference":"rust-src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-std-static"},"product_reference":"rust-std-static","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-aarch64-unknown-none-softfloat as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat"},"product_reference":"rust-std-static-aarch64-unknown-none-softfloat","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown"},"product_reference":"rust-std-static-wasm32-unknown-unknown","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-wasm32-wasip1 as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1"},"product_reference":"rust-std-static-wasm32-wasip1","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-x86_64-unknown-none as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none"},"product_reference":"rust-std-static-x86_64-unknown-none","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-toolset as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-toolset"},"product_reference":"rust-toolset","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust-toolset-srpm-macros as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust-toolset-srpm-macros"},"product_reference":"rust-toolset-srpm-macros","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rust.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rust.src"},"product_reference":"rust.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"rustfmt as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:rustfmt"},"product_reference":"rustfmt","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-base as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-base"},"product_reference":"s390utils-base","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-chreipl-fcp-mpath as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath"},"product_reference":"s390utils-chreipl-fcp-mpath","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-cmsfs-fuse as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-cmsfs-fuse"},"product_reference":"s390utils-cmsfs-fuse","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-core as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-core"},"product_reference":"s390utils-core","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-cpacfstatsd as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-cpacfstatsd"},"product_reference":"s390utils-cpacfstatsd","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-cpuplugd as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-cpuplugd"},"product_reference":"s390utils-cpuplugd","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-devel as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-devel"},"product_reference":"s390utils-devel","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-hmcdrvfs as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-hmcdrvfs"},"product_reference":"s390utils-hmcdrvfs","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-iucvterm as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-iucvterm"},"product_reference":"s390utils-iucvterm","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-mon_statd as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-mon_statd"},"product_reference":"s390utils-mon_statd","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-osasnmpd as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-osasnmpd"},"product_reference":"s390utils-osasnmpd","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-se-data as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-se-data"},"product_reference":"s390utils-se-data","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-zdsfs as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-zdsfs"},"product_reference":"s390utils-zdsfs","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils-ziomon as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils-ziomon"},"product_reference":"s390utils-ziomon","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"s390utils.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:s390utils.src"},"product_reference":"s390utils.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"snphost.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:snphost.src"},"product_reference":"snphost.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"trustee-guest-components.src as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:trustee-guest-components.src"},"product_reference":"trustee-guest-components.src","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"trustee-kbs as a component of Red Hat Enterprise Linux 10","product_id":"red_hat_enterprise_linux_10:trustee-kbs"},"product_reference":"trustee-kbs","relates_to_product_reference":"red_hat_enterprise_linux_10"},{"category":"default_component_of","full_product_name":{"name":"curl as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:curl"},"product_reference":"curl","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"curl.src as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:curl.src"},"product_reference":"curl.src","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"libcurl as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:libcurl"},"product_reference":"libcurl","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"libcurl-devel as a component of Red Hat Enterprise Linux 6","product_id":"red_hat_enterprise_linux_6:libcurl-devel"},"product_reference":"libcurl-devel","relates_to_product_reference":"red_hat_enterprise_linux_6"},{"category":"default_component_of","full_product_name":{"name":"curl as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:curl"},"product_reference":"curl","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"curl.src as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:curl.src"},"product_reference":"curl.src","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"libcurl as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:libcurl"},"product_reference":"libcurl","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"libcurl-devel as a component of Red Hat Enterprise Linux 7","product_id":"red_hat_enterprise_linux_7:libcurl-devel"},"product_reference":"libcurl-devel","relates_to_product_reference":"red_hat_enterprise_linux_7"},{"category":"default_component_of","full_product_name":{"name":"curl as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:curl"},"product_reference":"curl","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"curl.src as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:curl.src"},"product_reference":"curl.src","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libcurl as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libcurl"},"product_reference":"libcurl","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libcurl-devel as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libcurl-devel"},"product_reference":"libcurl-devel","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"libcurl-minimal as a component of Red Hat Enterprise Linux 8","product_id":"red_hat_enterprise_linux_8:libcurl-minimal"},"product_reference":"libcurl-minimal","relates_to_product_reference":"red_hat_enterprise_linux_8"},{"category":"default_component_of","full_product_name":{"name":"cargo as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:cargo"},"product_reference":"cargo","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"clippy as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:clippy"},"product_reference":"clippy","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"curl as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:curl"},"product_reference":"curl","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"curl-minimal as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:curl-minimal"},"product_reference":"curl-minimal","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"curl.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:curl.src"},"product_reference":"curl.src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"libcurl as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libcurl"},"product_reference":"libcurl","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"libcurl-devel as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libcurl-devel"},"product_reference":"libcurl-devel","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"libcurl-minimal as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:libcurl-minimal"},"product_reference":"libcurl-minimal","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust"},"product_reference":"rust","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-analysis as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-analysis"},"product_reference":"rust-analysis","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-analyzer as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-analyzer"},"product_reference":"rust-analyzer","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-debugger-common as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-debugger-common"},"product_reference":"rust-debugger-common","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-doc as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-doc"},"product_reference":"rust-doc","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-gdb as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-gdb"},"product_reference":"rust-gdb","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-lldb as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-lldb"},"product_reference":"rust-lldb","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-src"},"product_reference":"rust-src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-std-static"},"product_reference":"rust-std-static","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-wasm32-unknown-unknown as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown"},"product_reference":"rust-std-static-wasm32-unknown-unknown","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-std-static-wasm32-wasi as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi"},"product_reference":"rust-std-static-wasm32-wasi","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust-toolset as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust-toolset"},"product_reference":"rust-toolset","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rust.src"},"product_reference":"rust.src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rustfmt as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:rustfmt"},"product_reference":"rustfmt","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"snphost.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:snphost.src"},"product_reference":"snphost.src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"trustee-guest-components.src as a component of Red Hat Enterprise Linux 9","product_id":"red_hat_enterprise_linux_9:trustee-guest-components.src"},"product_reference":"trustee-guest-components.src","relates_to_product_reference":"red_hat_enterprise_linux_9"},{"category":"default_component_of","full_product_name":{"name":"rust.src as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src"},"product_reference":"rust.src","relates_to_product_reference":"red_hat_enterprise_linux_ai_(rhel_ai)_3"},{"category":"default_component_of","full_product_name":{"name":"rust.src as a component of Red Hat Hardened Images","product_id":"red_hat_hardened_images:rust.src"},"product_reference":"rust.src","relates_to_product_reference":"red_hat_hardened_images"},{"category":"default_component_of","full_product_name":{"name":"libcurl.so as a component of Red Hat JBoss Core Services","product_id":"red_hat_jboss_core_services:libcurl.so"},"product_reference":"libcurl.so","relates_to_product_reference":"red_hat_jboss_core_services"},{"category":"default_component_of","full_product_name":{"name":"openshift/ose-rhel-coreos-8 as a component of Red Hat OpenShift Container Platform 4","product_id":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8"},"product_reference":"openshift/ose-rhel-coreos-8","relates_to_product_reference":"red_hat_openshift_container_platform_4"},{"category":"default_component_of","full_product_name":{"name":"openshift/ose-rhel-coreos-9 as a component of Red Hat OpenShift Container Platform 4","product_id":"red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9"},"product_reference":"openshift/ose-rhel-coreos-9","relates_to_product_reference":"red_hat_openshift_container_platform_4"},{"category":"default_component_of","full_product_name":{"name":"devspaces/code-rhel9 as a component of Red Hat OpenShift Dev Spaces","product_id":"red_hat_openshift_dev_spaces:devspaces/code-rhel9"},"product_reference":"devspaces/code-rhel9","relates_to_product_reference":"red_hat_openshift_dev_spaces"},{"category":"default_component_of","full_product_name":{"name":"rhtpa/rhtpa-trustification-service-rhel9 as a component of Red Hat Trusted Profile Analyzer","product_id":"red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"},"product_reference":"rhtpa/rhtpa-trustification-service-rhel9","relates_to_product_reference":"red_hat_trusted_profile_analyzer"}]},"vulnerabilities":[{"cve":"CVE-2026-10536","cwe":{"id":"CWE-825","name":"Expired Pointer Dereference"},"discovery_date":"2026-07-03T07:01:35.911244+00:00","flags":[{"label":"vulnerable_code_not_present","product_ids":["confidential_compute_attestation:build-of-trustee/trustee-rhel9","confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9","red_hat_enterprise_linux_10:s390utils-base","red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath","red_hat_enterprise_linux_10:s390utils-cmsfs-fuse","red_hat_enterprise_linux_10:s390utils-core","red_hat_enterprise_linux_10:s390utils-cpacfstatsd","red_hat_enterprise_linux_10:s390utils-cpuplugd","red_hat_enterprise_linux_10:s390utils-devel","red_hat_enterprise_linux_10:s390utils-hmcdrvfs","red_hat_enterprise_linux_10:s390utils-iucvterm","red_hat_enterprise_linux_10:s390utils-mon_statd","red_hat_enterprise_linux_10:s390utils-osasnmpd","red_hat_enterprise_linux_10:s390utils-se-data","red_hat_enterprise_linux_10:s390utils-zdsfs","red_hat_enterprise_linux_10:s390utils-ziomon","red_hat_enterprise_linux_10:s390utils.src","red_hat_enterprise_linux_10:trustee-guest-components.src","red_hat_enterprise_linux_6:curl","red_hat_enterprise_linux_6:curl.src","red_hat_enterprise_linux_6:libcurl","red_hat_enterprise_linux_6:libcurl-devel","red_hat_enterprise_linux_7:curl","red_hat_enterprise_linux_7:curl.src","red_hat_enterprise_linux_7:libcurl","red_hat_enterprise_linux_7:libcurl-devel","red_hat_enterprise_linux_8:curl","red_hat_enterprise_linux_8:curl.src","red_hat_enterprise_linux_8:libcurl","red_hat_enterprise_linux_8:libcurl-devel","red_hat_enterprise_linux_8:libcurl-minimal","red_hat_enterprise_linux_9:cargo","red_hat_enterprise_linux_9:clippy","red_hat_enterprise_linux_9:curl","red_hat_enterprise_linux_9:curl-minimal","red_hat_enterprise_linux_9:curl.src","red_hat_enterprise_linux_9:libcurl","red_hat_enterprise_linux_9:libcurl-devel","red_hat_enterprise_linux_9:libcurl-minimal","red_hat_enterprise_linux_9:rust","red_hat_enterprise_linux_9:rust-analysis","red_hat_enterprise_linux_9:rust-analyzer","red_hat_enterprise_linux_9:rust-debugger-common","red_hat_enterprise_linux_9:rust-doc","red_hat_enterprise_linux_9:rust-gdb","red_hat_enterprise_linux_9:rust-lldb","red_hat_enterprise_linux_9:rust-src","red_hat_enterprise_linux_9:rust-std-static","red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi","red_hat_enterprise_linux_9:rust-toolset","red_hat_enterprise_linux_9:rust.src","red_hat_enterprise_linux_9:rustfmt","red_hat_enterprise_linux_9:snphost.src","red_hat_enterprise_linux_9:trustee-guest-components.src","red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src","red_hat_hardened_images:rust.src","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","red_hat_openshift_dev_spaces:devspaces/code-rhel9","red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"]},{"label":"component_not_present","product_ids":["red_hat_enterprise_linux_10:cargo","red_hat_enterprise_linux_10:clippy","red_hat_enterprise_linux_10:rust-analyzer","red_hat_enterprise_linux_10:rust-debugger-common","red_hat_enterprise_linux_10:rust-doc","red_hat_enterprise_linux_10:rust-gdb","red_hat_enterprise_linux_10:rust-lldb","red_hat_enterprise_linux_10:rust-src","red_hat_enterprise_linux_10:rust-std-static","red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat","red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1","red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none","red_hat_enterprise_linux_10:rust-toolset","red_hat_enterprise_linux_10:rust-toolset-srpm-macros","red_hat_enterprise_linux_10:rust.src","red_hat_enterprise_linux_10:rustfmt","red_hat_enterprise_linux_10:trustee-kbs"]}],"ids":[{"system_name":"Red Hat Bugzilla ID","text":"2496766"}],"notes":[{"category":"description","text":"A flaw was found in libcurl. This use-after-free vulnerability occurs when an application configures an HTTP/2 stream-dependency tree and then performs a sequence of operations involving `curl_easy_reset()` and `curl_easy_cleanup()`. During the final cleanup, libcurl attempts to access memory that has already been released. This can lead to application crashes, resulting in a Denial of Service (DoS).","title":"Vulnerability description"},{"category":"summary","text":"libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service","title":"Vulnerability summary"},{"category":"other","text":"This Moderate impact use-after-free flaw in libcurl can lead to application crashes and Denial of Service. It occurs when an application specifically configures an HTTP/2 stream-dependency tree and then performs a precise sequence of `curl_easy_reset()` and `curl_easy_cleanup()` operations, attempting to access already freed memory. This vulnerability requires a specific application programming pattern, limiting its exploitability in typical Red Hat deployments.","title":"Statement"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"fixed":["Red Hat Hardened Images:curl-main@aarch64","Red Hat Hardened Images:curl-main@src","Red Hat Hardened Images:curl-main@x86_64","Red Hat JBoss Core Services 2.4.62.SP5"],"known_affected":["red_hat_enterprise_linux_10:curl","red_hat_enterprise_linux_10:curl.src","red_hat_enterprise_linux_10:igvm.src","red_hat_enterprise_linux_10:libcurl","red_hat_enterprise_linux_10:libcurl-devel","red_hat_enterprise_linux_10:libcurl-minimal","red_hat_enterprise_linux_10:snphost.src","red_hat_jboss_core_services:libcurl.so"],"known_not_affected":["confidential_compute_attestation:build-of-trustee/trustee-rhel9","confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9","red_hat_enterprise_linux_10:cargo","red_hat_enterprise_linux_10:clippy","red_hat_enterprise_linux_10:rust-analyzer","red_hat_enterprise_linux_10:rust-debugger-common","red_hat_enterprise_linux_10:rust-doc","red_hat_enterprise_linux_10:rust-gdb","red_hat_enterprise_linux_10:rust-lldb","red_hat_enterprise_linux_10:rust-src","red_hat_enterprise_linux_10:rust-std-static","red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat","red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1","red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none","red_hat_enterprise_linux_10:rust-toolset","red_hat_enterprise_linux_10:rust-toolset-srpm-macros","red_hat_enterprise_linux_10:rust.src","red_hat_enterprise_linux_10:rustfmt","red_hat_enterprise_linux_10:s390utils-base","red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath","red_hat_enterprise_linux_10:s390utils-cmsfs-fuse","red_hat_enterprise_linux_10:s390utils-core","red_hat_enterprise_linux_10:s390utils-cpacfstatsd","red_hat_enterprise_linux_10:s390utils-cpuplugd","red_hat_enterprise_linux_10:s390utils-devel","red_hat_enterprise_linux_10:s390utils-hmcdrvfs","red_hat_enterprise_linux_10:s390utils-iucvterm","red_hat_enterprise_linux_10:s390utils-mon_statd","red_hat_enterprise_linux_10:s390utils-osasnmpd","red_hat_enterprise_linux_10:s390utils-se-data","red_hat_enterprise_linux_10:s390utils-zdsfs","red_hat_enterprise_linux_10:s390utils-ziomon","red_hat_enterprise_linux_10:s390utils.src","red_hat_enterprise_linux_10:trustee-guest-components.src","red_hat_enterprise_linux_10:trustee-kbs","red_hat_enterprise_linux_6:curl","red_hat_enterprise_linux_6:curl.src","red_hat_enterprise_linux_6:libcurl","red_hat_enterprise_linux_6:libcurl-devel","red_hat_enterprise_linux_7:curl","red_hat_enterprise_linux_7:curl.src","red_hat_enterprise_linux_7:libcurl","red_hat_enterprise_linux_7:libcurl-devel","red_hat_enterprise_linux_8:curl","red_hat_enterprise_linux_8:curl.src","red_hat_enterprise_linux_8:libcurl","red_hat_enterprise_linux_8:libcurl-devel","red_hat_enterprise_linux_8:libcurl-minimal","red_hat_enterprise_linux_9:cargo","red_hat_enterprise_linux_9:clippy","red_hat_enterprise_linux_9:curl","red_hat_enterprise_linux_9:curl-minimal","red_hat_enterprise_linux_9:curl.src","red_hat_enterprise_linux_9:libcurl","red_hat_enterprise_linux_9:libcurl-devel","red_hat_enterprise_linux_9:libcurl-minimal","red_hat_enterprise_linux_9:rust","red_hat_enterprise_linux_9:rust-analysis","red_hat_enterprise_linux_9:rust-analyzer","red_hat_enterprise_linux_9:rust-debugger-common","red_hat_enterprise_linux_9:rust-doc","red_hat_enterprise_linux_9:rust-gdb","red_hat_enterprise_linux_9:rust-lldb","red_hat_enterprise_linux_9:rust-src","red_hat_enterprise_linux_9:rust-std-static","red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi","red_hat_enterprise_linux_9:rust-toolset","red_hat_enterprise_linux_9:rust.src","red_hat_enterprise_linux_9:rustfmt","red_hat_enterprise_linux_9:snphost.src","red_hat_enterprise_linux_9:trustee-guest-components.src","red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src","red_hat_hardened_images:rust.src","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","red_hat_openshift_dev_spaces:devspaces/code-rhel9","red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-10536"},{"category":"external","summary":"RHBZ#2496766","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2496766"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-10536","url":"https://www.cve.org/CVERecord?id=CVE-2026-10536"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-10536","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-10536"},{"category":"external","summary":"https://curl.se/docs/CVE-2026-10536.html","url":"https://curl.se/docs/CVE-2026-10536.html"},{"category":"external","summary":"https://curl.se/docs/CVE-2026-10536.json","url":"https://curl.se/docs/CVE-2026-10536.json"},{"category":"external","summary":"https://hackerone.com/reports/3751697","url":"https://hackerone.com/reports/3751697"}],"release_date":"2026-07-03T06:11:15.378000+00:00","remediations":[{"category":"vendor_fix","date":"2026-07-17T13:46:49+00:00","details":"For details on how to apply this update, which includes the changes described in this advisory, refer to:\nhttps://images.redhat.com/","product_ids":["Red Hat Hardened Images:curl-main@aarch64","Red Hat Hardened Images:curl-main@src","Red Hat Hardened Images:curl-main@x86_64"],"url":"https://access.redhat.com/errata/RHSA-2026:41240"},{"category":"vendor_fix","date":"2026-08-19T13:28:18+00:00","details":"Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258","product_ids":["Red Hat JBoss Core Services 2.4.62.SP5"],"url":"https://access.redhat.com/errata/RHSA-2026:56869"},{"category":"workaround","details":"To mitigate this issue, avoid configuring HTTP/2 stream dependencies within applications utilizing libcurl. This functionality is considered deprecated and its use is required to trigger the vulnerability.","product_ids":["Red Hat Hardened Images:curl-main@aarch64","Red Hat Hardened Images:curl-main@src","Red Hat Hardened Images:curl-main@x86_64","Red Hat JBoss Core Services 2.4.62.SP5","red_hat_enterprise_linux_10:curl","red_hat_enterprise_linux_10:curl.src","red_hat_enterprise_linux_10:igvm.src","red_hat_enterprise_linux_10:libcurl","red_hat_enterprise_linux_10:libcurl-devel","red_hat_enterprise_linux_10:libcurl-minimal","red_hat_enterprise_linux_10:snphost.src","red_hat_jboss_core_services:libcurl.so"]},{"category":"no_fix_planned","details":"Will not fix","product_ids":["red_hat_jboss_core_services:libcurl.so"]},{"category":"none_available","details":"Affected","product_ids":["red_hat_enterprise_linux_10:curl","red_hat_enterprise_linux_10:curl.src","red_hat_enterprise_linux_10:igvm.src","red_hat_enterprise_linux_10:libcurl","red_hat_enterprise_linux_10:libcurl-devel","red_hat_enterprise_linux_10:libcurl-minimal","red_hat_enterprise_linux_10:snphost.src"]}],"scores":[{"cvss_v3":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":4.7,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["Red Hat Hardened Images:curl-main@aarch64","Red Hat Hardened Images:curl-main@src","Red Hat Hardened Images:curl-main@x86_64","Red Hat JBoss Core Services 2.4.62.SP5","confidential_compute_attestation:build-of-trustee/trustee-rhel9","confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9","red_hat_enterprise_linux_10:cargo","red_hat_enterprise_linux_10:clippy","red_hat_enterprise_linux_10:curl","red_hat_enterprise_linux_10:curl.src","red_hat_enterprise_linux_10:igvm.src","red_hat_enterprise_linux_10:libcurl","red_hat_enterprise_linux_10:libcurl-devel","red_hat_enterprise_linux_10:libcurl-minimal","red_hat_enterprise_linux_10:rust-analyzer","red_hat_enterprise_linux_10:rust-debugger-common","red_hat_enterprise_linux_10:rust-doc","red_hat_enterprise_linux_10:rust-gdb","red_hat_enterprise_linux_10:rust-lldb","red_hat_enterprise_linux_10:rust-src","red_hat_enterprise_linux_10:rust-std-static","red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat","red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1","red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none","red_hat_enterprise_linux_10:rust-toolset","red_hat_enterprise_linux_10:rust-toolset-srpm-macros","red_hat_enterprise_linux_10:rust.src","red_hat_enterprise_linux_10:rustfmt","red_hat_enterprise_linux_10:s390utils-base","red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath","red_hat_enterprise_linux_10:s390utils-cmsfs-fuse","red_hat_enterprise_linux_10:s390utils-core","red_hat_enterprise_linux_10:s390utils-cpacfstatsd","red_hat_enterprise_linux_10:s390utils-cpuplugd","red_hat_enterprise_linux_10:s390utils-devel","red_hat_enterprise_linux_10:s390utils-hmcdrvfs","red_hat_enterprise_linux_10:s390utils-iucvterm","red_hat_enterprise_linux_10:s390utils-mon_statd","red_hat_enterprise_linux_10:s390utils-osasnmpd","red_hat_enterprise_linux_10:s390utils-se-data","red_hat_enterprise_linux_10:s390utils-zdsfs","red_hat_enterprise_linux_10:s390utils-ziomon","red_hat_enterprise_linux_10:s390utils.src","red_hat_enterprise_linux_10:snphost.src","red_hat_enterprise_linux_10:trustee-guest-components.src","red_hat_enterprise_linux_10:trustee-kbs","red_hat_enterprise_linux_6:curl","red_hat_enterprise_linux_6:curl.src","red_hat_enterprise_linux_6:libcurl","red_hat_enterprise_linux_6:libcurl-devel","red_hat_enterprise_linux_7:curl","red_hat_enterprise_linux_7:curl.src","red_hat_enterprise_linux_7:libcurl","red_hat_enterprise_linux_7:libcurl-devel","red_hat_enterprise_linux_8:curl","red_hat_enterprise_linux_8:curl.src","red_hat_enterprise_linux_8:libcurl","red_hat_enterprise_linux_8:libcurl-devel","red_hat_enterprise_linux_8:libcurl-minimal","red_hat_enterprise_linux_9:cargo","red_hat_enterprise_linux_9:clippy","red_hat_enterprise_linux_9:curl","red_hat_enterprise_linux_9:curl-minimal","red_hat_enterprise_linux_9:curl.src","red_hat_enterprise_linux_9:libcurl","red_hat_enterprise_linux_9:libcurl-devel","red_hat_enterprise_linux_9:libcurl-minimal","red_hat_enterprise_linux_9:rust","red_hat_enterprise_linux_9:rust-analysis","red_hat_enterprise_linux_9:rust-analyzer","red_hat_enterprise_linux_9:rust-debugger-common","red_hat_enterprise_linux_9:rust-doc","red_hat_enterprise_linux_9:rust-gdb","red_hat_enterprise_linux_9:rust-lldb","red_hat_enterprise_linux_9:rust-src","red_hat_enterprise_linux_9:rust-std-static","red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi","red_hat_enterprise_linux_9:rust-toolset","red_hat_enterprise_linux_9:rust.src","red_hat_enterprise_linux_9:rustfmt","red_hat_enterprise_linux_9:snphost.src","red_hat_enterprise_linux_9:trustee-guest-components.src","red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src","red_hat_hardened_images:rust.src","red_hat_jboss_core_services:libcurl.so","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","red_hat_openshift_dev_spaces:devspaces/code-rhel9","red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["Red Hat Hardened Images:curl-main@aarch64","Red Hat Hardened Images:curl-main@src","Red Hat Hardened Images:curl-main@x86_64","Red Hat JBoss Core Services 2.4.62.SP5","confidential_compute_attestation:build-of-trustee/trustee-rhel9","confidential_compute_attestation:openshift-sandboxed-containers/osc-podvm-payload-rhel9","red_hat_enterprise_linux_10:cargo","red_hat_enterprise_linux_10:clippy","red_hat_enterprise_linux_10:curl","red_hat_enterprise_linux_10:curl.src","red_hat_enterprise_linux_10:igvm.src","red_hat_enterprise_linux_10:libcurl","red_hat_enterprise_linux_10:libcurl-devel","red_hat_enterprise_linux_10:libcurl-minimal","red_hat_enterprise_linux_10:rust-analyzer","red_hat_enterprise_linux_10:rust-debugger-common","red_hat_enterprise_linux_10:rust-doc","red_hat_enterprise_linux_10:rust-gdb","red_hat_enterprise_linux_10:rust-lldb","red_hat_enterprise_linux_10:rust-src","red_hat_enterprise_linux_10:rust-std-static","red_hat_enterprise_linux_10:rust-std-static-aarch64-unknown-none-softfloat","red_hat_enterprise_linux_10:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_10:rust-std-static-wasm32-wasip1","red_hat_enterprise_linux_10:rust-std-static-x86_64-unknown-none","red_hat_enterprise_linux_10:rust-toolset","red_hat_enterprise_linux_10:rust-toolset-srpm-macros","red_hat_enterprise_linux_10:rust.src","red_hat_enterprise_linux_10:rustfmt","red_hat_enterprise_linux_10:s390utils-base","red_hat_enterprise_linux_10:s390utils-chreipl-fcp-mpath","red_hat_enterprise_linux_10:s390utils-cmsfs-fuse","red_hat_enterprise_linux_10:s390utils-core","red_hat_enterprise_linux_10:s390utils-cpacfstatsd","red_hat_enterprise_linux_10:s390utils-cpuplugd","red_hat_enterprise_linux_10:s390utils-devel","red_hat_enterprise_linux_10:s390utils-hmcdrvfs","red_hat_enterprise_linux_10:s390utils-iucvterm","red_hat_enterprise_linux_10:s390utils-mon_statd","red_hat_enterprise_linux_10:s390utils-osasnmpd","red_hat_enterprise_linux_10:s390utils-se-data","red_hat_enterprise_linux_10:s390utils-zdsfs","red_hat_enterprise_linux_10:s390utils-ziomon","red_hat_enterprise_linux_10:s390utils.src","red_hat_enterprise_linux_10:snphost.src","red_hat_enterprise_linux_10:trustee-guest-components.src","red_hat_enterprise_linux_10:trustee-kbs","red_hat_enterprise_linux_6:curl","red_hat_enterprise_linux_6:curl.src","red_hat_enterprise_linux_6:libcurl","red_hat_enterprise_linux_6:libcurl-devel","red_hat_enterprise_linux_7:curl","red_hat_enterprise_linux_7:curl.src","red_hat_enterprise_linux_7:libcurl","red_hat_enterprise_linux_7:libcurl-devel","red_hat_enterprise_linux_8:curl","red_hat_enterprise_linux_8:curl.src","red_hat_enterprise_linux_8:libcurl","red_hat_enterprise_linux_8:libcurl-devel","red_hat_enterprise_linux_8:libcurl-minimal","red_hat_enterprise_linux_9:cargo","red_hat_enterprise_linux_9:clippy","red_hat_enterprise_linux_9:curl","red_hat_enterprise_linux_9:curl-minimal","red_hat_enterprise_linux_9:curl.src","red_hat_enterprise_linux_9:libcurl","red_hat_enterprise_linux_9:libcurl-devel","red_hat_enterprise_linux_9:libcurl-minimal","red_hat_enterprise_linux_9:rust","red_hat_enterprise_linux_9:rust-analysis","red_hat_enterprise_linux_9:rust-analyzer","red_hat_enterprise_linux_9:rust-debugger-common","red_hat_enterprise_linux_9:rust-doc","red_hat_enterprise_linux_9:rust-gdb","red_hat_enterprise_linux_9:rust-lldb","red_hat_enterprise_linux_9:rust-src","red_hat_enterprise_linux_9:rust-std-static","red_hat_enterprise_linux_9:rust-std-static-wasm32-unknown-unknown","red_hat_enterprise_linux_9:rust-std-static-wasm32-wasi","red_hat_enterprise_linux_9:rust-toolset","red_hat_enterprise_linux_9:rust.src","red_hat_enterprise_linux_9:rustfmt","red_hat_enterprise_linux_9:snphost.src","red_hat_enterprise_linux_9:trustee-guest-components.src","red_hat_enterprise_linux_ai_(rhel_ai)_3:rust.src","red_hat_hardened_images:rust.src","red_hat_jboss_core_services:libcurl.so","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-8","red_hat_openshift_container_platform_4:openshift/ose-rhel-coreos-9","red_hat_openshift_dev_spaces:devspaces/code-rhel9","red_hat_trusted_profile_analyzer:rhtpa/rhtpa-trustification-service-rhel9"]}],"title":"libcurl: libcurl: Use-after-free vulnerability leading to Denial of Service"}]}