Integer overflow in GNU C Library (glibc) - CVE-2026-0861

Vulnerability identifier: #VU122299

CSH Severity: High

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-0861

CWE-ID: CWE-190

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow within the memalign functions, such as memalign(), posix_memalign(),  aligned_alloc(). A remote attacker can pass specially crafted data to the application, trigger integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GNU C Library (glibc)
SUSE Linux Enterprise Server 15 SP6
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP5
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Desktop 15
SUSE Linux Enterprise Micro
SUSE Linux Enterprise Micro for Rancher
SUSE Linux Micro Extras
SUSE Linux Micro
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
SUSE Linux Enterprise Live Patching
Development Tools Module
Basesystem Module
openSUSE Leap
Ubuntu
openEuler
Anolis OS
Fedora
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
Oracle Communications Unified Inventory Management
Red Hat build of Keycloak
Oracle Enterprise Operations Monitor
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
glibc-livepatches
glibc-livepatches-debuginfo
glibc-livepatches-debugsource
glibc (Ubuntu package)
glibc-locale-base-64bit
glibc-locale-base-32bit-debuginfo
glibc-32bit
glibc-devel-32bit-debuginfo
glibc-html
glibc-devel-static-32bit
glibc-profile-32bit
glibc-utils-32bit
glibc-utils-32bit-debuginfo
glibc-32bit-debuginfo
glibc-devel-64bit
glibc-64bit
glibc-devel-64bit-debuginfo
glibc-utils-64bit-debuginfo
glibc-utils-64bit
glibc-64bit-debuginfo
glibc-locale-base-64bit-debuginfo
glibc-profile-64bit
glibc-devel-static-64bit
glibc-devel-32bit
glibc-locale-base-debuginfo
glibc-profile
glibc-utils-src-debugsource
glibc-devel-debuginfo
glibc-extra-debuginfo
glibc-locale-base
glibc
glibc-locale
glibc-extra
nscd-debuginfo
glibc-devel-static
glibc-debugsource
glibc-debuginfo
glibc-utils-debuginfo
nscd
glibc-utils
glibc-devel
glibc-lang
glibc-i18ndata
glibc-info
glibc-locale-base-32bit
glibc-help
glibc-compat-2.17
glibc-debugutils
glibc-common
glibc-all-langpacks
glibc-locale-archive
glibc-locale-source
glibc-nss-devel
libnsl
nss_modules
glibc (Red Hat package)
glibc-gconv-extra
glibc-doc
nss_hesiod
glibc-benchtests
compat-libpthread-nonshared
glibc-langpack-en
glibc-langpack-zh
glibc-minimal-langpack
glibc-static
nss_db
libnsl1-32bit-debuginfo
libnsl1
libnsl1-debuginfo
libnsl1-64bit
libnsl1-64bit-debuginfo
libnsl1-32bit
glibc-gconv-modules-extra
glibc-gconv-modules-extra-debuginfo

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.43
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.3.1 Patch 2
glibc-livepatches - addressed in versions 0.3-150400.3.11.1, 0.3-150600.8.2.1, 0.3-150700.10.4.1
glibc-livepatches-debuginfo - addressed in versions 0.3-150400.3.11.1, 0.3-150600.8.2.1, 0.3-150700.10.4.1
glibc-livepatches-debugsource - addressed in versions 0.3-150400.3.11.1, 0.3-150600.8.2.1, 0.3-150700.10.4.1
glibc (Ubuntu package) - addressed in versions 2.23-0ubuntu11.3+esm9, 2.27-3ubuntu1.6+esm6, 2.31-0ubuntu9.18+esm1, 2.35-0ubuntu3.13, 2.39-0ubuntu8.7, 2.42-0ubuntu3.1
glibc-locale-base-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-html - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-profile-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-32bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-64bit-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-profile-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static-64bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-profile - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils-src-debugsource - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-extra-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-locale - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-extra - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
nscd-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel-static - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-debugsource - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-utils-debuginfo - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
nscd - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-utils - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-devel - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1, 2.40-160000.3.1
glibc-lang - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-i18ndata - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-info - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc-locale-base-32bit - addressed in versions 2.31-150300.98.1, 2.38-150600.14.40.1
glibc - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-help - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-compat-2.17 - update to 2.34-172
glibc-debuginfo - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-debugsource - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-debugutils - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-devel - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-common - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-all-langpacks - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-locale-archive - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-locale-source - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc-nss-devel - addressed in versions 2.34-172, 2.38-84, 2.38-86
libnsl - addressed in versions 2.34-172, 2.38-84, 2.38-86
nscd - addressed in versions 2.34-172, 2.38-84, 2.38-86
nss_modules - addressed in versions 2.34-172, 2.38-84, 2.38-86
glibc (Red Hat package) - addressed in versions 2.34-231.el9_7.10, 2.39-58.el10_1.7
glibc-gconv-extra - update to 2.38-17
glibc-doc - update to 2.38-17
nss_hesiod - update to 2.38-17
libnsl - update to 2.38-17
glibc-devel - update to 2.38-17
glibc-common - update to 2.38-17
glibc-benchtests - update to 2.38-17
glibc-all-langpacks - update to 2.38-17
glibc - update to 2.38-17
compat-libpthread-nonshared - update to 2.38-17
glibc-langpack-en - update to 2.38-17
glibc-langpack-zh - update to 2.38-17
glibc-locale-source - update to 2.38-17
glibc-minimal-langpack - update to 2.38-17
glibc-nss-devel - update to 2.38-17
glibc-static - update to 2.38-17
glibc-utils - update to 2.38-17
nss_db - update to 2.38-17
libnsl1-32bit-debuginfo - update to 2.38-150600.14.40.1
libnsl1 - update to 2.38-150600.14.40.1
libnsl1-debuginfo - update to 2.38-150600.14.40.1
libnsl1-64bit - update to 2.38-150600.14.40.1
libnsl1-64bit-debuginfo - update to 2.38-150600.14.40.1
libnsl1-32bit - update to 2.38-150600.14.40.1
glibc-gconv-modules-extra - update to 2.40-160000.3.1
glibc-gconv-modules-extra-debuginfo - update to 2.40-160000.3.1
glibc - update to 2.42-9.fc43
Red Hat build of Keycloak - update to 26.2.14

• https://sourceware.org/bugzilla/show_bug.cgi?id=33796
• https://sourceware.org/git/?p=glibc.git;a=blob_plain;f=advisories/GLIBC-SA-2026-0001
• http://www.openwall.com/lists/oss-security/2026/01/16/5

• Multiple vulnerabilities in GNU C Library (glibc)
• Fedora 43 update for glibc
• openEuler 22.03 LTS SP4 update for glibc
• openEuler 24.03 LTS SP3 update for glibc
• openEuler 24.03 LTS SP2 update for glibc
• openEuler 24.03 LTS SP1 update for glibc
• openEuler 24.03 LTS update for glibc
• Red Hat Enterprise Linux 10 update for glibc
• SUSE update for glibc
• SUSE update for glibc-livepatches
• SUSE update for glibc
• Ubuntu update for glibc
• Anolis OS update for glibc
• SUSE update for glibc-livepatches
• Red Hat Enterprise Linux 9 update for glibc
• Multiple vulnerabilities in Red Hat build of Keycloak 26.2
• SUSE update for glibc-livepatches
• SUSE update for glibc
• Multiple vulnerabilities in IBM Watson Speech Services Cartridge
• Multiple vulnerabilities in Oracle Communications Unified Inventory Management
• Multiple vulnerabilities in Oracle Communications Cloud Native Core Network Function Cloud Native Environment
• Integer overflow in Oracle Enterprise Operations Monitor