Summary
Vitaly Simonovich discovered that the GNU C Library did not properly
initialize the input when WRDE_REUSE is used. An attacker could possibly
use this issue to cause applications to crash, leading to a denial of
service. (CVE-2025-15281)
Anastasia Belova discovered that the GNU C Library incorrectly handled
the regcomp function when memory allocation failures occured. An attacker
could possibly use this issue to cause applications to crash, leading to
a denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
(CVE-2025-8058)
Igor Morgenstern discovered that the GNU C Library incorrectly handled
the memalign function when doing memory allocation. An attacker could
possibly use this issue to cause applications to crash, leading to a
denial of service, or possibly execute arbitrary code. This issue only
affected Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS and Ubuntu
25.10. (CVE-2026-0861)
Igor Morgenstern discovered that the GNU C Library incorrectly handled
certain DNS backend when queries for a zero-valued network. An attacker
could possibly use this issue to cause a denial of service or obtain
sensitive information. (CVE-2026-0915)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | glibc | 2.35-0ubuntu3.13 |
| Ubuntu · 24.04 LTS 24.04:LTS | glibc | 2.39-0ubuntu8.7 |
| Ubuntu · 25.10 | glibc | 2.42-0ubuntu3.1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | glibc | 2.23-0ubuntu11.3+esm9 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | glibc | 2.27-3ubuntu1.6+esm6 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | glibc | 2.31-0ubuntu9.18+esm1 |