Vulnerabilities of functions memalign(), posix_memalign(), aligned_alloc(), valloc(), and pvalloc() in the GNU C Library, which allow attackers to execute arbitrary code, cause system failures, or disclose sensitive information.

🗓️ 28 Jan 2026 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

Integer overflow in memalign and related functions in the GNU library enables arbitrary code execution and data disclosure.

Reporter	Title	Published	Views	Family All 147
IBM Security Bulletins	Security Bulletin: Vulnerabilities in GNU C affects IBM Netezza Appliance	23 Apr 202610:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	6 Apr 202610:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	14 Apr 202615:27	–	ibm
ATTACKERKB	CVE-2026-0861	14 Jan 202621:01	–	attackerkb
Tenable Nessus	AlmaLinux 10 : glibc (ALSA-2026:1334)	29 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : glibc (ALSA-2026:2786)	19 Feb 202600:00	–	nessus
Tenable Nessus	Debian dla-4621 : glibc-doc - security update	8 Jun 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-1236)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-1272)	10 Mar 202600:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP12 : glibc (EulerOS-SA-2026-1360)	16 Mar 202600:00	–	nessus

Vulners

Node

red_hat red_hat_openshift_container_platformMatch4

OR

red_hat red_hat_ceph_storageMatch8

OR

gnu glibcRange2.30–2.42

OR

red_hat discoveryMatch2

OR

red_hat red_hat_update_infrastructureMatch5

OR

red_hat red_hat_insights_proxyMatch1.5

OR

red_hat cost_managementMatch4

OR

red_hat red_hat_enterprise_linuxMatch9

OR

fedora fedoraMatch42

OR

red_hat red_hat_enterprise_linuxMatch10

OR

fedora fedoraMatch43

OR

canonical ubuntuMatch25.10

Source	Link
sourceware	www.sourceware.org/bugzilla/show_bug.cgi
access	www.access.redhat.com/security/cve/cve-2026-0861
vuldb	www.vuldb.com/
altsp	www.altsp.su/obnovleniya-bezopasnosti/
abf	www.abf.rosa.ru/advisories/ROSA-SA-2026-3251
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
ubuntu	www.ubuntu.com/security/CVE-2026-0861
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-0861
repo	www.repo.red-soft.ru/redos/8.0/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

03 Jun 2026 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 27.2

CVSS 38.4

EPSS0.00352

memalign vulnerability arbitrary code execution data disclosure integer overflow gnu library memory alignment aligned allocation pvalloc vulnerability