Heap-based buffer overflow in GNU C Library (glibc) - CVE-2026-5450

Vulnerability identifier: #VU153117

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-5450

CWE-ID: CWE-122

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to calling the scanf family of functions with a %mc (malloc'd character match) in the GNU C Library with a format width specifier with an explicit width greater than 1024 could result in a one byte heap buffer overflow. A remote attacker can pass specially crafted data to the application, trigger a heap-based buffer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

GNU C Library (glibc)
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for IBM z Systems
Anolis OS
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat CodeReady Linux Builder for x86_64 - Extended Update Support
Red Hat CodeReady Linux Builder for Power, little endian - Extended Update Support
Red Hat CodeReady Linux Builder for IBM z Systems - Extended Update Support
Red Hat CodeReady Linux Builder for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
glibc (Red Hat package)
compat-glibc (Red Hat package)
glibc-langpack-kk (Red Hat package)
glibc-langpack-fa (Red Hat package)
glibc-langpack-kab (Red Hat package)
glibc-langpack-ka (Red Hat package)
glibc-langpack-ja (Red Hat package)
glibc-langpack-iu (Red Hat package)
glibc-langpack-id (Red Hat package)
glibc-langpack-ia (Red Hat package)
glibc-langpack-hy (Red Hat package)
glibc-langpack-hu (Red Hat package)
glibc-langpack-hi (Red Hat package)
glibc-langpack-he (Red Hat package)
glibc-langpack-hak (Red Hat package)
glibc-langpack-ha (Red Hat package)
glibc-langpack-fo (Red Hat package)
glibc-langpack-fil (Red Hat package)
glibc-langpack-fi (Red Hat package)
glibc-langpack-ff (Red Hat package)
glibc-langpack-ne (Red Hat package)
glibc-langpack-mn (Red Hat package)
glibc-langpack-lg (Red Hat package)
glibc-langpack-nds (Red Hat package)
glibc-langpack-nb (Red Hat package)
glibc-langpack-nan (Red Hat package)
glibc-langpack-my (Red Hat package)
glibc-langpack-mt (Red Hat package)
glibc-langpack-ms (Red Hat package)
glibc-langpack-mr (Red Hat package)
glibc-langpack-mni (Red Hat package)
glibc-langpack-kok (Red Hat package)
glibc-langpack-ml (Red Hat package)
glibc-langpack-lij (Red Hat package)
glibc-langpack-li (Red Hat package)
glibc-langpack-lb (Red Hat package)
glibc-langpack-ky (Red Hat package)
glibc-langpack-kw (Red Hat package)
glibc-langpack-ku (Red Hat package)
glibc-langpack-ks (Red Hat package)
glibc-langpack-ast (Red Hat package)
glibc-langpack-brx (Red Hat package)
glibc-langpack-br (Red Hat package)
glibc-langpack-bo (Red Hat package)
glibc-langpack-bg (Red Hat package)
glibc-langpack-ber (Red Hat package)
glibc-langpack-bem (Red Hat package)
glibc-langpack-be (Red Hat package)
glibc-langpack-az (Red Hat package)
glibc-langpack-ayc (Red Hat package)
glibc-langpack-bs (Red Hat package)
glibc-langpack-as (Red Hat package)
glibc-headers (Red Hat package)
glibc-debugsource (Red Hat package)
glibc-debuginfo (Red Hat package)
glibc-common-debuginfo (Red Hat package)
glibc-benchtests-debuginfo (Red Hat package)
glibc-all-langpacks-debuginfo (Red Hat package)
glibc-langpack-doi (Red Hat package)
glibc-langpack-et (Red Hat package)
glibc-langpack-es (Red Hat package)
glibc-langpack-eo (Red Hat package)
glibc-langpack-en (Red Hat package)
glibc-langpack-el (Red Hat package)
glibc-langpack-dz (Red Hat package)
glibc-langpack-dv (Red Hat package)
glibc-langpack-dsb (Red Hat package)
glibc-langpack-eu (Red Hat package)
glibc-langpack-de (Red Hat package)
glibc-langpack-da (Red Hat package)
glibc-langpack-cy (Red Hat package)
glibc-langpack-cv (Red Hat package)
glibc-langpack-csb (Red Hat package)
glibc-langpack-cs (Red Hat package)
glibc-langpack-crh (Red Hat package)
glibc-langpack-byn (Red Hat package)
compat-libpthread-nonshared (Red Hat package)
glibc-langpack-tn (Red Hat package)
glibc-langpack-ps (Red Hat package)
glibc-langpack-oc (Red Hat package)
glibc-langpack-mk (Red Hat package)
glibc-langpack-ht (Red Hat package)
glibc-langpack-ar (Red Hat package)
glibc-gconv-extra-debuginfo (Red Hat package)
glibc-gconv-extra (Red Hat package)
glibc-all-langpacks (Red Hat package)
glibc-langpack-zh (Red Hat package)
nss_db-debuginfo (Red Hat package)
nss_db (Red Hat package)
nscd (Red Hat package)
libnsl-debuginfo (Red Hat package)
libnsl (Red Hat package)
glibc-utils-debuginfo (Red Hat package)
glibc-minimal-langpack (Red Hat package)
glibc-locale-source (Red Hat package)
glibc-langpack-st (Red Hat package)
nss_hesiod (Red Hat package)
glibc-benchtests (Red Hat package)
glibc-static (Red Hat package)
glibc-nss-devel (Red Hat package)
glibc-langpack-yi (Red Hat package)
glibc-langpack-nl (Red Hat package)
glibc-common (Red Hat package)
glibc-langpack-ts (Red Hat package)
glibc-langpack-sv (Red Hat package)
glibc-langpack-niu (Red Hat package)
glibc-langpack-sd (Red Hat package)
glibc-langpack-ln (Red Hat package)
glibc-langpack-hif (Red Hat package)
glibc-langpack-bhb (Red Hat package)
glibc-langpack-aa (Red Hat package)
nss_hesiod-debuginfo (Red Hat package)
nscd-debuginfo (Red Hat package)
glibc-utils (Red Hat package)
glibc-langpack-ru (Red Hat package)
glibc-langpack-sk (Red Hat package)
glibc-langpack-sid (Red Hat package)
glibc-langpack-si (Red Hat package)
glibc-langpack-sc (Red Hat package)
glibc-langpack-sat (Red Hat package)
glibc-langpack-sah (Red Hat package)
glibc-langpack-sa (Red Hat package)
glibc-langpack-rw (Red Hat package)
glibc-langpack-xh (Red Hat package)
glibc-langpack-ro (Red Hat package)
glibc-langpack-raj (Red Hat package)
glibc-langpack-quz (Red Hat package)
glibc-langpack-pa (Red Hat package)
glibc-langpack-os (Red Hat package)
glibc-langpack-or (Red Hat package)
glibc-langpack-om (Red Hat package)
glibc-langpack-nhn (Red Hat package)
glibc-langpack-sm (Red Hat package)
glibc-langpack-zu (Red Hat package)
glibc-langpack-wo (Red Hat package)
glibc-langpack-wal (Red Hat package)
glibc-langpack-wae (Red Hat package)
glibc-langpack-tr (Red Hat package)
glibc-langpack-tpi (Red Hat package)
glibc-langpack-to (Red Hat package)
glibc-langpack-tl (Red Hat package)
glibc-langpack-tk (Red Hat package)
glibc-langpack-ti (Red Hat package)
glibc-langpack-the (Red Hat package)
glibc-langpack-sl (Red Hat package)
glibc-langpack-ss (Red Hat package)
glibc-langpack-sr (Red Hat package)
glibc-langpack-sq (Red Hat package)
glibc-langpack-so (Red Hat package)
glibc-langpack-tig (Red Hat package)
glibc-langpack-yi
glibc-langpack-xh
glibc-langpack-wo
glibc-langpack-wal
glibc-langpack-wae
glibc-langpack-wa
glibc-langpack-vi
glibc-langpack-ve
glibc-langpack-uz
glibc-langpack-ur
glibc-langpack-unm
glibc-langpack-uk
glibc-langpack-ug
glibc-langpack-tt
glibc-langpack-ts
glibc-langpack-yo
glibc-langpack-yue
glibc-langpack-yuw
glibc-langpack-zh
glibc-langpack-zu
glibc-locale-source
glibc-minimal-langpack
glibc-nss-devel
glibc-static
glibc-utils
libnsl
nscd
nss_db
nss_hesiod
glibc-doc
glibc
glibc-langpack-fil
glibc-langpack-ha
glibc-langpack-gv
glibc-langpack-gu
glibc-langpack-gl
glibc-langpack-gez
glibc-langpack-gd
glibc-langpack-ga
glibc-langpack-fy
glibc-langpack-fur
glibc-langpack-fr
glibc-langpack-fo
glibc-langpack-hak
glibc-langpack-fi
glibc-langpack-ff
glibc-langpack-fa
glibc-langpack-eu
glibc-langpack-et
glibc-langpack-es
glibc-langpack-eo
glibc-langpack-en
glibc-langpack-el
glibc-langpack-dz
glibc-langpack-id
glibc-langpack-km
glibc-langpack-kl
glibc-langpack-kk
glibc-langpack-kab
glibc-langpack-ka
glibc-langpack-ja
glibc-langpack-iu
glibc-langpack-it
glibc-langpack-is
glibc-langpack-ik
glibc-langpack-ig
glibc-langpack-dv
glibc-langpack-ia
glibc-langpack-hy
glibc-langpack-hu
glibc-langpack-ht
glibc-langpack-hsb
glibc-langpack-hr
glibc-langpack-hne
glibc-langpack-hif
glibc-langpack-hi
glibc-langpack-he
glibc-langpack-ak
glibc-langpack-ber
glibc-langpack-bem
glibc-langpack-be
glibc-langpack-az
glibc-langpack-ayc
glibc-langpack-ast
glibc-langpack-as
glibc-langpack-ar
glibc-langpack-anp
glibc-langpack-an
glibc-langpack-am
glibc-langpack-bg
glibc-langpack-agr
glibc-langpack-af
glibc-langpack-aa
glibc-headers
glibc-gconv-extra
glibc-devel
glibc-common
glibc-benchtests
glibc-all-langpacks
compat-libpthread-nonshared
glibc-langpack-ce
glibc-langpack-dsb
glibc-langpack-doi
glibc-langpack-de
glibc-langpack-da
glibc-langpack-cy
glibc-langpack-cv
glibc-langpack-csb
glibc-langpack-cs
glibc-langpack-crh
glibc-langpack-cmn
glibc-langpack-chr
glibc-langpack-tpi
glibc-langpack-ca
glibc-langpack-byn
glibc-langpack-bs
glibc-langpack-brx
glibc-langpack-br
glibc-langpack-bo
glibc-langpack-bn
glibc-langpack-bi
glibc-langpack-bho
glibc-langpack-bhb
glibc-langpack-sa
glibc-langpack-sk
glibc-langpack-sid
glibc-langpack-si
glibc-langpack-shs
glibc-langpack-shn
glibc-langpack-sgs
glibc-langpack-se
glibc-langpack-sd
glibc-langpack-sc
glibc-langpack-sat
glibc-langpack-sah
glibc-langpack-sl
glibc-langpack-rw
glibc-langpack-ru
glibc-langpack-ro
glibc-langpack-raj
glibc-langpack-quz
glibc-langpack-pt
glibc-langpack-ps
glibc-langpack-pl
glibc-langpack-pap
glibc-langpack-pa
glibc-langpack-tcy
glibc-langpack-tr
glibc-langpack-to
glibc-langpack-tn
glibc-langpack-tl
glibc-langpack-tk
glibc-langpack-tig
glibc-langpack-ti
glibc-langpack-the
glibc-langpack-th
glibc-langpack-tg
glibc-langpack-te
glibc-langpack-ko
glibc-langpack-ta
glibc-langpack-szl
glibc-langpack-sw
glibc-langpack-sv
glibc-langpack-st
glibc-langpack-ss
glibc-langpack-sr
glibc-langpack-sq
glibc-langpack-so
glibc-langpack-sm
glibc-langpack-ln
glibc-langpack-miq
glibc-langpack-mi
glibc-langpack-mhr
glibc-langpack-mg
glibc-langpack-mfe
glibc-langpack-mai
glibc-langpack-mag
glibc-langpack-lzh
glibc-langpack-lv
glibc-langpack-lt
glibc-langpack-lo
glibc-langpack-or
glibc-langpack-lij
glibc-langpack-li
glibc-langpack-lg
glibc-langpack-lb
glibc-langpack-ky
glibc-langpack-kw
glibc-langpack-ku
glibc-langpack-ks
glibc-langpack-kok
glibc-langpack-kn
glibc-langpack-mk
glibc-langpack-os
glibc-langpack-om
glibc-langpack-oc
glibc-langpack-nso
glibc-langpack-nr
glibc-langpack-nn
glibc-langpack-nl
glibc-langpack-niu
glibc-langpack-nhn
glibc-langpack-ne
glibc-langpack-nb
glibc-langpack-mjw
glibc-langpack-ml
glibc-langpack-mn
glibc-langpack-mni
glibc-langpack-mr
glibc-langpack-ms
glibc-langpack-mt
glibc-langpack-my
glibc-langpack-nan
glibc-langpack-nds
Red Hat OpenShift Container Platform

Install updates from vendor's website.

GNU C Library (glibc) - update to 2.44
glibc (Red Hat package) - addressed in versions 2.12-1.212.el6_10.4, 2.17-326.el7_9.6, 2.28-189.13.el8_6, 2.28-251.el8_10.38, 2.34-60.el9_2.20, 2.39-46.el10_0.5
compat-glibc (Red Hat package) - update to 2.12-4.el7_9.1
glibc-langpack-kk (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-fa (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-kab (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ka (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ja (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-iu (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-id (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ia (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-hy (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-hu (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-hi (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-he (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-hak (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ha (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-fo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-fil (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-fi (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ff (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ne (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-mn (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-lg (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-nds (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-nb (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-nan (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-my (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-mt (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ms (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-mr (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-mni (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-kok (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ml (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-lij (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-li (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-lb (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ky (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-kw (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ku (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ks (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ast (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-brx (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-br (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-bo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-bg (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ber (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-bem (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-be (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-az (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ayc (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-bs (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-as (Red Hat package) - update to 2.28-251.el8_10.38
glibc-headers (Red Hat package) - update to 2.28-251.el8_10.38
glibc-debugsource (Red Hat package) - update to 2.28-251.el8_10.38
glibc-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-common-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-benchtests-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-all-langpacks-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-doi (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-et (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-es (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-eo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-en (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-el (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-dz (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-dv (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-dsb (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-eu (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-de (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-da (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-cy (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-cv (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-csb (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-cs (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-crh (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-byn (Red Hat package) - update to 2.28-251.el8_10.38
compat-libpthread-nonshared (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tn (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ps (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-oc (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-mk (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ht (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ar (Red Hat package) - update to 2.28-251.el8_10.38
glibc-gconv-extra-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-gconv-extra (Red Hat package) - update to 2.28-251.el8_10.38
glibc-all-langpacks (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-zh (Red Hat package) - update to 2.28-251.el8_10.38
nss_db-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
nss_db (Red Hat package) - update to 2.28-251.el8_10.38
nscd (Red Hat package) - update to 2.28-251.el8_10.38
libnsl-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
libnsl (Red Hat package) - update to 2.28-251.el8_10.38
glibc-utils-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-minimal-langpack (Red Hat package) - update to 2.28-251.el8_10.38
glibc-locale-source (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-st (Red Hat package) - update to 2.28-251.el8_10.38
nss_hesiod (Red Hat package) - update to 2.28-251.el8_10.38
glibc-benchtests (Red Hat package) - update to 2.28-251.el8_10.38
glibc-static (Red Hat package) - update to 2.28-251.el8_10.38
glibc-nss-devel (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-yi (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-nl (Red Hat package) - update to 2.28-251.el8_10.38
glibc-common (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ts (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sv (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-niu (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sd (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ln (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-hif (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-bhb (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-aa (Red Hat package) - update to 2.28-251.el8_10.38
nss_hesiod-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
nscd-debuginfo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-utils (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ru (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sk (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sid (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-si (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sc (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sat (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sah (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sa (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-rw (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-xh (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ro (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-raj (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-quz (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-pa (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-os (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-or (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-om (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-nhn (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sm (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-zu (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-wo (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-wal (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-wae (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tr (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tpi (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-to (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tl (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tk (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ti (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-the (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sl (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-ss (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sr (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-sq (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-so (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-tig (Red Hat package) - update to 2.28-251.el8_10.38
glibc-langpack-yi - update to 2.28-251.0.2
glibc-langpack-xh - update to 2.28-251.0.2
glibc-langpack-wo - update to 2.28-251.0.2
glibc-langpack-wal - update to 2.28-251.0.2
glibc-langpack-wae - update to 2.28-251.0.2
glibc-langpack-wa - update to 2.28-251.0.2
glibc-langpack-vi - update to 2.28-251.0.2
glibc-langpack-ve - update to 2.28-251.0.2
glibc-langpack-uz - update to 2.28-251.0.2
glibc-langpack-ur - update to 2.28-251.0.2
glibc-langpack-unm - update to 2.28-251.0.2
glibc-langpack-uk - update to 2.28-251.0.2
glibc-langpack-ug - update to 2.28-251.0.2
glibc-langpack-tt - update to 2.28-251.0.2
glibc-langpack-ts - update to 2.28-251.0.2
glibc-langpack-yo - update to 2.28-251.0.2
glibc-langpack-yue - update to 2.28-251.0.2
glibc-langpack-yuw - update to 2.28-251.0.2
glibc-langpack-zh - update to 2.28-251.0.2
glibc-langpack-zu - update to 2.28-251.0.2
glibc-locale-source - update to 2.28-251.0.2
glibc-minimal-langpack - update to 2.28-251.0.2
glibc-nss-devel - update to 2.28-251.0.2
glibc-static - update to 2.28-251.0.2
glibc-utils - update to 2.28-251.0.2
libnsl - update to 2.28-251.0.2
nscd - update to 2.28-251.0.2
nss_db - update to 2.28-251.0.2
nss_hesiod - update to 2.28-251.0.2
glibc-doc - update to 2.28-251.0.2
glibc - update to 2.28-251.0.2
glibc-langpack-fil - update to 2.28-251.0.2
glibc-langpack-ha - update to 2.28-251.0.2
glibc-langpack-gv - update to 2.28-251.0.2
glibc-langpack-gu - update to 2.28-251.0.2
glibc-langpack-gl - update to 2.28-251.0.2
glibc-langpack-gez - update to 2.28-251.0.2
glibc-langpack-gd - update to 2.28-251.0.2
glibc-langpack-ga - update to 2.28-251.0.2
glibc-langpack-fy - update to 2.28-251.0.2
glibc-langpack-fur - update to 2.28-251.0.2
glibc-langpack-fr - update to 2.28-251.0.2
glibc-langpack-fo - update to 2.28-251.0.2
glibc-langpack-hak - update to 2.28-251.0.2
glibc-langpack-fi - update to 2.28-251.0.2
glibc-langpack-ff - update to 2.28-251.0.2
glibc-langpack-fa - update to 2.28-251.0.2
glibc-langpack-eu - update to 2.28-251.0.2
glibc-langpack-et - update to 2.28-251.0.2
glibc-langpack-es - update to 2.28-251.0.2
glibc-langpack-eo - update to 2.28-251.0.2
glibc-langpack-en - update to 2.28-251.0.2
glibc-langpack-el - update to 2.28-251.0.2
glibc-langpack-dz - update to 2.28-251.0.2
glibc-langpack-id - update to 2.28-251.0.2
glibc-langpack-km - update to 2.28-251.0.2
glibc-langpack-kl - update to 2.28-251.0.2
glibc-langpack-kk - update to 2.28-251.0.2
glibc-langpack-kab - update to 2.28-251.0.2
glibc-langpack-ka - update to 2.28-251.0.2
glibc-langpack-ja - update to 2.28-251.0.2
glibc-langpack-iu - update to 2.28-251.0.2
glibc-langpack-it - update to 2.28-251.0.2
glibc-langpack-is - update to 2.28-251.0.2
glibc-langpack-ik - update to 2.28-251.0.2
glibc-langpack-ig - update to 2.28-251.0.2
glibc-langpack-dv - update to 2.28-251.0.2
glibc-langpack-ia - update to 2.28-251.0.2
glibc-langpack-hy - update to 2.28-251.0.2
glibc-langpack-hu - update to 2.28-251.0.2
glibc-langpack-ht - update to 2.28-251.0.2
glibc-langpack-hsb - update to 2.28-251.0.2
glibc-langpack-hr - update to 2.28-251.0.2
glibc-langpack-hne - update to 2.28-251.0.2
glibc-langpack-hif - update to 2.28-251.0.2
glibc-langpack-hi - update to 2.28-251.0.2
glibc-langpack-he - update to 2.28-251.0.2
glibc-langpack-ak - update to 2.28-251.0.2
glibc-langpack-ber - update to 2.28-251.0.2
glibc-langpack-bem - update to 2.28-251.0.2
glibc-langpack-be - update to 2.28-251.0.2
glibc-langpack-az - update to 2.28-251.0.2
glibc-langpack-ayc - update to 2.28-251.0.2
glibc-langpack-ast - update to 2.28-251.0.2
glibc-langpack-as - update to 2.28-251.0.2
glibc-langpack-ar - update to 2.28-251.0.2
glibc-langpack-anp - update to 2.28-251.0.2
glibc-langpack-an - update to 2.28-251.0.2
glibc-langpack-am - update to 2.28-251.0.2
glibc-langpack-bg - update to 2.28-251.0.2
glibc-langpack-agr - update to 2.28-251.0.2
glibc-langpack-af - update to 2.28-251.0.2
glibc-langpack-aa - update to 2.28-251.0.2
glibc-headers - update to 2.28-251.0.2
glibc-gconv-extra - update to 2.28-251.0.2
glibc-devel - update to 2.28-251.0.2
glibc-common - update to 2.28-251.0.2
glibc-benchtests - update to 2.28-251.0.2
glibc-all-langpacks - update to 2.28-251.0.2
compat-libpthread-nonshared - update to 2.28-251.0.2
glibc-langpack-ce - update to 2.28-251.0.2
glibc-langpack-dsb - update to 2.28-251.0.2
glibc-langpack-doi - update to 2.28-251.0.2
glibc-langpack-de - update to 2.28-251.0.2
glibc-langpack-da - update to 2.28-251.0.2
glibc-langpack-cy - update to 2.28-251.0.2
glibc-langpack-cv - update to 2.28-251.0.2
glibc-langpack-csb - update to 2.28-251.0.2
glibc-langpack-cs - update to 2.28-251.0.2
glibc-langpack-crh - update to 2.28-251.0.2
glibc-langpack-cmn - update to 2.28-251.0.2
glibc-langpack-chr - update to 2.28-251.0.2
glibc-langpack-tpi - update to 2.28-251.0.2
glibc-langpack-ca - update to 2.28-251.0.2
glibc-langpack-byn - update to 2.28-251.0.2
glibc-langpack-bs - update to 2.28-251.0.2
glibc-langpack-brx - update to 2.28-251.0.2
glibc-langpack-br - update to 2.28-251.0.2
glibc-langpack-bo - update to 2.28-251.0.2
glibc-langpack-bn - update to 2.28-251.0.2
glibc-langpack-bi - update to 2.28-251.0.2
glibc-langpack-bho - update to 2.28-251.0.2
glibc-langpack-bhb - update to 2.28-251.0.2
glibc-langpack-sa - update to 2.28-251.0.2
glibc-langpack-sk - update to 2.28-251.0.2
glibc-langpack-sid - update to 2.28-251.0.2
glibc-langpack-si - update to 2.28-251.0.2
glibc-langpack-shs - update to 2.28-251.0.2
glibc-langpack-shn - update to 2.28-251.0.2
glibc-langpack-sgs - update to 2.28-251.0.2
glibc-langpack-se - update to 2.28-251.0.2
glibc-langpack-sd - update to 2.28-251.0.2
glibc-langpack-sc - update to 2.28-251.0.2
glibc-langpack-sat - update to 2.28-251.0.2
glibc-langpack-sah - update to 2.28-251.0.2
glibc-langpack-sl - update to 2.28-251.0.2
glibc-langpack-rw - update to 2.28-251.0.2
glibc-langpack-ru - update to 2.28-251.0.2
glibc-langpack-ro - update to 2.28-251.0.2
glibc-langpack-raj - update to 2.28-251.0.2
glibc-langpack-quz - update to 2.28-251.0.2
glibc-langpack-pt - update to 2.28-251.0.2
glibc-langpack-ps - update to 2.28-251.0.2
glibc-langpack-pl - update to 2.28-251.0.2
glibc-langpack-pap - update to 2.28-251.0.2
glibc-langpack-pa - update to 2.28-251.0.2
glibc-langpack-tcy - update to 2.28-251.0.2
glibc-langpack-tr - update to 2.28-251.0.2
glibc-langpack-to - update to 2.28-251.0.2
glibc-langpack-tn - update to 2.28-251.0.2
glibc-langpack-tl - update to 2.28-251.0.2
glibc-langpack-tk - update to 2.28-251.0.2
glibc-langpack-tig - update to 2.28-251.0.2
glibc-langpack-ti - update to 2.28-251.0.2
glibc-langpack-the - update to 2.28-251.0.2
glibc-langpack-th - update to 2.28-251.0.2
glibc-langpack-tg - update to 2.28-251.0.2
glibc-langpack-te - update to 2.28-251.0.2
glibc-langpack-ko - update to 2.28-251.0.2
glibc-langpack-ta - update to 2.28-251.0.2
glibc-langpack-szl - update to 2.28-251.0.2
glibc-langpack-sw - update to 2.28-251.0.2
glibc-langpack-sv - update to 2.28-251.0.2
glibc-langpack-st - update to 2.28-251.0.2
glibc-langpack-ss - update to 2.28-251.0.2
glibc-langpack-sr - update to 2.28-251.0.2
glibc-langpack-sq - update to 2.28-251.0.2
glibc-langpack-so - update to 2.28-251.0.2
glibc-langpack-sm - update to 2.28-251.0.2
glibc-langpack-ln - update to 2.28-251.0.2
glibc-langpack-miq - update to 2.28-251.0.2
glibc-langpack-mi - update to 2.28-251.0.2
glibc-langpack-mhr - update to 2.28-251.0.2
glibc-langpack-mg - update to 2.28-251.0.2
glibc-langpack-mfe - update to 2.28-251.0.2
glibc-langpack-mai - update to 2.28-251.0.2
glibc-langpack-mag - update to 2.28-251.0.2
glibc-langpack-lzh - update to 2.28-251.0.2
glibc-langpack-lv - update to 2.28-251.0.2
glibc-langpack-lt - update to 2.28-251.0.2
glibc-langpack-lo - update to 2.28-251.0.2
glibc-langpack-or - update to 2.28-251.0.2
glibc-langpack-lij - update to 2.28-251.0.2
glibc-langpack-li - update to 2.28-251.0.2
glibc-langpack-lg - update to 2.28-251.0.2
glibc-langpack-lb - update to 2.28-251.0.2
glibc-langpack-ky - update to 2.28-251.0.2
glibc-langpack-kw - update to 2.28-251.0.2
glibc-langpack-ku - update to 2.28-251.0.2
glibc-langpack-ks - update to 2.28-251.0.2
glibc-langpack-kok - update to 2.28-251.0.2
glibc-langpack-kn - update to 2.28-251.0.2
glibc-langpack-mk - update to 2.28-251.0.2
glibc-langpack-os - update to 2.28-251.0.2
glibc-langpack-om - update to 2.28-251.0.2
glibc-langpack-oc - update to 2.28-251.0.2
glibc-langpack-nso - update to 2.28-251.0.2
glibc-langpack-nr - update to 2.28-251.0.2
glibc-langpack-nn - update to 2.28-251.0.2
glibc-langpack-nl - update to 2.28-251.0.2
glibc-langpack-niu - update to 2.28-251.0.2
glibc-langpack-nhn - update to 2.28-251.0.2
glibc-langpack-ne - update to 2.28-251.0.2
glibc-langpack-nb - update to 2.28-251.0.2
glibc-langpack-mjw - update to 2.28-251.0.2
glibc-langpack-ml - update to 2.28-251.0.2
glibc-langpack-mn - update to 2.28-251.0.2
glibc-langpack-mni - update to 2.28-251.0.2
glibc-langpack-mr - update to 2.28-251.0.2
glibc-langpack-ms - update to 2.28-251.0.2
glibc-langpack-mt - update to 2.28-251.0.2
glibc-langpack-my - update to 2.28-251.0.2
glibc-langpack-nan - update to 2.28-251.0.2
glibc-langpack-nds - update to 2.28-251.0.2
Red Hat OpenShift Container Platform - addressed in versions 4.13.69, 4.14.70, 4.15.67, 4.19.39

• https://inbox.sourceware.org/libc-announce/b11f0003-6ec1-4bd6-b9de-9e38a4efeca3@redhat.com/T/#u
• https://sourceware.org/bugzilla/show_bug.cgi?id=CVE-2026-5450
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

• Heap-based buffer overflow in GNU C Library
• Anolis OS update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 10 update for glibc
• Red Hat Enterprise Linux 8 update for glibc
• Red Hat Enterprise Linux 9 update for glibc
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for glibc
• Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION update for glibc
• Red Hat Enterprise Linux 7 Extended Lifecycle Support update for compat-glibc
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.19
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.13
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.14