RHSA-2026:98622: Moderate: gnome-remote-desktop security update

Q: What service must be reachable for this issue to be relevant?

The affected component is GNOME Remote Desktop's RDP service. Systems not using GNOME Remote Desktop or not exposing its RDP sockets are not indicated as exposed by the advisory.

Q: Does exploitation require authentication?

No. The issue concerns unauthenticated RDP sockets that lack a handshake deadline, so an attacker can interact with the affected socket before completing authentication.

Q: What is the likely impact of the missing handshake deadline?

The advisory identifies a missing deadline during the RDP handshake, but it does not provide further impact details. Consult the referenced CVE information for the documented impact and CVSS score.

Q: Which Red Hat packages are included in the update?

The advisory lists redhat/gnome-remote-desktop, redhat/gnome-remote-desktop-debuginfo, and redhat/gnome-remote-desktop-debugsource.

Published Nov 11, 2026

Updated

GNOME Remote Desktop is a remote desktop and screen sharing service for the GNOME desktop environment.Security Fix(es): gnome-remote-desktop: gnome-remote-desktop: unauthenticated RDP sockets lack a handshake deadline (CVE-2026-96541) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

12 affected componentsFixes available

redhat/gnome-remote-desktop<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debuginfo<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debugsource<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debuginfo<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debugsource<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debuginfo<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop-debugsource<49.3-18.el10_3

49.3-18.el10_3

redhat/gnome-remote-desktop<49.3-18.el10_3.aa

49.3-18.el10_3.aa

redhat/gnome-remote-desktop-debuginfo<49.3-18.el10_3.aa

49.3-18.el10_3.aa

redhat/gnome-remote-desktop-debugsource<49.3-18.el10_3.aa

49.3-18.el10_3.aa

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade redhat/gnome-remote-desktop to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3
Upgrade
Upgrade redhat/gnome-remote-desktop-debuginfo to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3
Upgrade
Upgrade redhat/gnome-remote-desktop-debugsource to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3
Upgrade
Upgrade redhat/gnome-remote-desktop to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3.aa
Upgrade
Upgrade redhat/gnome-remote-desktop-debuginfo to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3.aa
Upgrade
Upgrade redhat/gnome-remote-desktop-debugsource to a version that resolves this vulnerability.
Fixed in 49.3-18.el10_3.aa

Event History

Nov 11, 2026

Advisory Published

via Red Hat·12:00 AM

Data Sourced

via Red Hat·12:00 AM

RemedyDescriptionAffected Software

Frequently Asked Questions

What service must be reachable for this issue to be relevant?

The affected component is GNOME Remote Desktop's RDP service. Systems not using GNOME Remote Desktop or not exposing its RDP sockets are not indicated as exposed by the advisory.

Does exploitation require authentication?

No. The issue concerns unauthenticated RDP sockets that lack a handshake deadline, so an attacker can interact with the affected socket before completing authentication.

What is the likely impact of the missing handshake deadline?

The advisory identifies a missing deadline during the RDP handshake, but it does not provide further impact details. Consult the referenced CVE information for the documented impact and CVSS score.

Which Red Hat packages are included in the update?

The advisory lists redhat/gnome-remote-desktop, redhat/gnome-remote-desktop-debuginfo, and redhat/gnome-remote-desktop-debugsource.

RHSA-2026:98622: Moderate: gnome-remote-desktop security update

Affected Software

Remediation

Event History

Frequently Asked Questions

What service must be reachable for this issue to be relevant?

Does exploitation require authentication?

What is the likely impact of the missing handshake deadline?

Which Red Hat packages are included in the update?

Company

Resources

Contact

Frequently Asked Questions

What service must be reachable for this issue to be relevant?

Does exploitation require authentication?

What is the likely impact of the missing handshake deadline?

Which Red Hat packages are included in the update?