Vulnerability · Published Sep 22, 2026 · Assigned by glibc
CVE-2026-95818AT_SECURE program buffer overflow via $ORIGIN processing
Low 3.6
In plain English
A low-severity stack buffer overflow in glibc from The GNU C Library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 1% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)3.6Low
Exploit odds (30 days)0.1%top 99.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs. When such a program's DT_RPATH or DT_RUNPATH begins with $ORIGIN and is followed by NUL or '/' the loader both reads past the end of the path buffer and writes past the end of a stack-allocated internal buffer. The corrupted loader stack can lead to a loader crash (denial of service) and limited disclosure of process memory.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:9 | glibc | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-all-langpacks | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-devel | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-doc | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-gconv-extra | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-headers | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-aa | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-af | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-agr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ak | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-am | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-an | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-anp | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ast | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ayc | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-az | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bem | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ber | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bg | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bho | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-br | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-brx | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-bs | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-byn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ca | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ce | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-chr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ckb | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-cmn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-crh | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-cs | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-cv | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-cy | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-da | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-de | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-doi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-dsb | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-el | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-eo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-es | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-et | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-eu | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fa | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fil | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fur | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-fy | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ga | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-gd | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-gez | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-gl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-gu | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-gv | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ha | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-hak | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-he | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-hne | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ht | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-hu | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-hy | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ia | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-id | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ig | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ik | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-is | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-it | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ja | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ka | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-kab | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-kl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-km | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-kn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ko | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-kok | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ks | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ku | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-kw | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ky | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-lb | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-li | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ln | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-lo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-lt | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-lv | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-lzh | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mag | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mfe | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mg | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mhr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mjw | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mk | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mni | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ms | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-mt | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-my | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nan | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nds | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ne | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nhn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-niu | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-nso | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-oc | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-om | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-or | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-os | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-pa | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-pap | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-pl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ps | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-quz | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-rw | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sa | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sah | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sat | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sc | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sd | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-se | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sgs | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-shn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sid | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sk | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sm | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-st | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-sv | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-szl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tg | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-th | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-the | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ti | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tig | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tk | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tn | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-to | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tpi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tr | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-tt | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ug | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-uk | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-unm | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ur | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-uz | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-ve | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-vi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-wa | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-wae | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-wal | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-wo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-xh | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-yi | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-yo | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-yue | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-yuw | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-zh | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-langpack-zu | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-locale-source | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-minimal-langpack | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-static | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | glibc-utils | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | libnsl | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux:9 | nscd | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| Debian:12 | glibc | no fix listed | DEBIAN-CVE-2026-95818 |
| Debian:13 | glibc | no fix listed | DEBIAN-CVE-2026-95818 |
| Debian:14 | glibc | 2.43-7 | DEBIAN-CVE-2026-95818 |
| Rocky Linux:9 | glibc | 0:2.34-284.el9_8.4 | RLSA-2026:95618 |
| Ubuntu:22.04:LTS | glibc | no fix listed | UBUNTU-CVE-2026-95818 |
| Ubuntu:24.04:LTS | glibc | no fix listed | UBUNTU-CVE-2026-95818 |
| Ubuntu:26.04:LTS | glibc | no fix listed | UBUNTU-CVE-2026-95818 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The GNU C Library | glibc | 2.14 – before 2.45 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N