CVE-2026-4438

CVE-2026-4438 concerns gethostbyaddr/gethostbyaddr_r built against an NSS DNS backend as configured in glibc (versions 2.34–2.43). The issue can cause an invalid DNS hostname to be returned to the caller, violating DNS specifications. Details originate from NVD/CVE records and the Sourceware bug ...