Skip to content
OpenAdvisories
High RHSA-2026:2786 3 CVEs

Red Hat Security Advisory: glibc security update

Published Feb 18, 2026 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · RHEL 9 enterprise_linux:9::baseos glibc 0:2.34-231.el9_7.10
Red Hat · RHEL 9 enterprise_linux:9::crb glibc-static 0:2.34-231.el9_7.10

Vulnerabilities 3

  • High 8.4
    CVE-2026-0861

    Integer overflow in memalign leads to heap corruption

    Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attack…

    The GNU C Library glibc glibc glibc Debian Ubuntu Azure Linux Wolfi
  • High 7.5
    CVE-2025-15281

    wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory

    Calling wordexp with WRDE_REUSE in conjunction with WRDE_APPEND in the GNU C Library version 2.0 to version 2.42 may cause the interface to return uninitialized memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi
  • High 7.5
    CVE-2026-0915 Public exploit

    getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler

    Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS r…

    The GNU C Library glibc glibc eglibc Debian Ubuntu Azure Linux Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2429771
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2430201
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2431196
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_2786.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-15281
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-15281
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-15281
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33814
  • report
    https://access.redhat.com/security/cve/CVE-2026-0861
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-0861
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-0861
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33796
  • report
    https://access.redhat.com/security/cve/CVE-2026-0915
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-0915
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-0915
  • article
    https://sourceware.org/bugzilla/show_bug.cgi?id=33802