Bug 2524860 (CVE-2026-47888)

Summary:	CVE-2026-47888 Spring Framework: Spring Framework: Memory leak via malformed RSocket SETUP frame
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	high	Docs Contact:
Priority:	high
Version:	unspecified	CC:	abrianik, ant, cescoffi, fmongiar, ggrzybek, gmalinko, gsmet, gtanzill, janstey, jbuscemi, jmartisk, jnethert, jraez, manderse, olubyans, ozzy, parichar, pdelbell, pjindal, rguimara, rhel-process-autobot, rstepani, sbiarozk, sdawley, tasato, varjain, watson-tool-maintainers
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in Spring Framework, specifically within Spring RSocket applications. A remote attacker could exploit this vulnerability by sending a malformed SETUP frame to an affected application. This could lead to a memory leak, potentially causing a denial of service.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	2537019, 2537020, 2537021, 2537022, 2537023, 2537024, 2537025, 2537026
Bug Blocks:

Description OSIDB Bzimport 2026-08-27 06:23:02 UTC

A Spring RSocket application is exposed to a memory leak via a malformed SETUP frame.
Spring Framework 7.0.0 - 7.0.8
Spring Framework 6.2.0 - 6.2.19
Spring Framework 6.1.0 - 6.1.28
Spring Framework 6.0.0 - 6.0.30
Spring Framework 5.3.0 - 5.3.49
Spring Framework 5.2.0.RELEASE - 5.2.25.RELEASE