PT-2026-2957 · Gnu+4 · Gnu C Library+4

Igor Morgenstern · Published 2026-01-14 · Updated 2026-05-24 · CVE-2026-0861

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.30 through 2.42

Description Providing an excessively large alignment value to the memalign family of functions – including memalign, posix memalign, aligned alloc, valloc, and pvalloc – within the GNU C Library can lead to an integer overflow. This overflow may result in heap corruption.

Recommendations Update to a version beyond 2.42.

Fix

DoS

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALSA-2026:1334

ALSA-2026:2786

AZL-74547

AZL-74636

BDU:2026-00915

CVE-2026-0861

ECHO-9177-1522-4A81

MGASA-2026-0022

OESA-2026-1198

OESA-2026-1199

OESA-2026-1200

OESA-2026-1201

OESA-2026-1202

OPENSUSE-SU-2026:10662-1

OPENSUSE-SU-2026:20133-1

RHSA-2026:1334

RHSA-2026:2786

RHSA-2026:7316

SUSE-SU-2026:0347-1

SUSE-SU-2026:0371-1

SUSE-SU-2026:0499-1

SUSE-SU-2026:0827-1

SUSE-SU-2026:0896-1

SUSE-SU-2026:20178-1

SUSE-SU-2026:20198-1

SUSE-SU-2026:20527-1

SUSE-SU-2026:20536-1

SUSE-SU-2026:20544-1

SUSE-SU-2026:20608-1

USN-8005-1

Affected Products

Gnu C Library

Linuxmint

Red Os

Rocky Linux

Ubuntu

References · 107

• https://osv.dev/vulnerability/OESA-2026-1202 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-00915 · Security Note
• https://osv.dev/vulnerability/OESA-2026-1198 · Vendor Advisory
• https://osv.dev/vulnerability/ALSA-2026:2786 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20536-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20608-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1200 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2026-0861 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:20133-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0861 · Security Note
• https://osv.dev/vulnerability/MGASA-2026-0022 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0896-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0827-1 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-1201 · Vendor Advisory
• https://errata.rockylinux.org/RLSA-2026:2786 · Vendor Advisory