Threats Tagged 'cve-2026-6368'

This security update for glibc addresses multiple vulnerabilities including invalid free, stack overflow, buffer overflows, out-of-bounds writes, assertion failures, and a race condition that could allow local privilege escalation. The update fixes issues in components such as wordexp, resolv_conf, fopen ccs extension, strfmon, tdelete, and character decoding routines. The vulnerabilities affect local and network contexts and can lead to process crashes or privilege escalation. The update is provided by SUSE and Red Hat for various glibc packages across architectures.

A buffer overflow vulnerability exists in GNU C Library (glibc) versions 2.38 to 2.44 when calling strfmon or strfmon_l with right-justified width padding. This can cause writes past the end of the caller-supplied output buffer. Exploitation requires specific application code paths and conditions. At the time of the advisory, no network-facing impact is known. Red Hat has issued a security update addressing this issue in their Hardened Images RPMs.

Multiple security vulnerabilities identified by CWE-1341 and CWE-120 were fixed in the glibc-2.44-1.1 package for openSUSE Tumbleweed and related Red Hat packages. These updates address flaws in the GNU C Library (glibc) to improve security. No known exploits have been reported in the wild. The severity of these issues is assessed as medium. Updated packages are available from SUSE and Red Hat, including language packs and hardened images RPMs.