SUSE-SU-2026:4656-1
Security update for glibc
Published Oct 14, 2026 · updated Oct 14, 2026
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). - CVE-2026-97399: one byte out-of-bounds read via function on Power8 can lead to a program crash (bsc#1283147).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Oct 14, 2026 · OSV.dev
Detected
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). - CVE-2026-97399: one by
Oct 14, 2026 · OSV.dev
Fix available
glibc fixed in 2.38-150600.14.61.1; glibc fixed in 2.38-150600.14.61.1; glibc fixed in 2.38-150600.14.61.1; glibc fixed in 2.38-150600.14.61.1
Oct 14, 2026 · OSV.dev
Fix available
glibc fixed in 2.38-150600.14.61.1
Oct 14, 2026 · OSV.dev
Updated
This update for glibc fixes the following issues: - CVE-2026-8674: reachable assert in allows an attacker in a local network to trigger a process crash (bsc#1281297). - CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). - CVE-2026-89092: nscd stack overflow leads to degraded DNS resolution (bsc#1282449). - CVE-2026-97399: one by
Affected
- SUSE:Linux Enterprise Module for Basesys glibc0 → 2.38-150600.14.61.1
- SUSE:Linux Enterprise Module for Develop glibc0 → 2.38-150600.14.61.1
- SUSE:Linux Enterprise Server 15 SP6-LTSS glibc0 → 2.38-150600.14.61.1
- SUSE:Linux Enterprise Server for SAP App glibc0 → 2.38-150600.14.61.1