UBUNTU-CVE-2026-86805
A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DT_RPATH for setuid/setgid (AT_SECURE) programs, glibc validates the lexically normalized search path against the trusted directories but then opens the raw, un-normalized path. On systems where the Linux fs.protected_hardlinks sysctl is disabled, a local attacker who hard-links such a program into an attacker-controlled directory and wins a race to replace an intermediate path component with a symbolic link can direct the loader outside the trusted directory, causing it to load an attacker-controlled shared object and execute arbitrary code with the elevated privileges of the program. Exploitation requires an installed setuid or setgid binary whose DT_RPATH uses $ORIGIN followed by ".." traversal that normalizes into a trusted directory, and the ability to hard-link that binary and win the race by swapping a path component for a symbolic link. Major Linux-based OS distributions ship with fs.protected_hardlinks enabled by default and mitigate the vulnerability.
UBUNTU-CVE-2026-86805
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-86805
eglibc
Source reference: /affected/0/package/name
- Affected versions
- 2.17-93ubuntu4
Source reference:
/affected/0/versions2.18-0ubuntu1Source reference:
/affected/0/versions2.18-0ubuntu2Source reference:
/affected/0/versions2.18-0ubuntu4Source reference:
/affected/0/versions2.18-0ubuntu5Source reference:
/affected/0/versions2.18-0ubuntu6Source reference:
/affected/0/versions2.18-0ubuntu7Source reference:
/affected/0/versions2.19-0ubuntu2Source reference:
/affected/0/versions2.19-0ubuntu3Source reference:
/affected/0/versions2.19-0ubuntu4Source reference:
/affected/0/versions2.19-0ubuntu5Source reference:
/affected/0/versions2.19-0ubuntu6Source reference:
/affected/0/versions2.19-0ubuntu6.1Source reference:
/affected/0/versions2.19-0ubuntu6.3Source reference:
/affected/0/versions2.19-0ubuntu6.4Source reference:
/affected/0/versions2.19-0ubuntu6.5Source reference:
/affected/0/versions2.19-0ubuntu6.6Source reference:
/affected/0/versions2.19-0ubuntu6.7Source reference:
/affected/0/versions2.19-0ubuntu6.8Source reference:
/affected/0/versions2.19-0ubuntu6.9Source reference:
/affected/0/versions2.19-0ubuntu6.10Source reference:
/affected/0/versions2.19-0ubuntu6.11Source reference:
/affected/0/versions2.19-0ubuntu6.13Source reference:
/affected/0/versions2.19-0ubuntu6.14Source reference:
/affected/0/versions2.19-0ubuntu6.15Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm1Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm2Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm3Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/1/package/name
- Affected versions
- 2.21-0ubuntu4
Source reference:
/affected/1/versions2.21-0ubuntu5Source reference:
/affected/1/versions2.21-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu1Source reference:
/affected/1/versions2.23-0ubuntu2Source reference:
/affected/1/versions2.23-0ubuntu3Source reference:
/affected/1/versions2.23-0ubuntu4Source reference:
/affected/1/versions2.23-0ubuntu5Source reference:
/affected/1/versions2.23-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu7Source reference:
/affected/1/versions2.23-0ubuntu9Source reference:
/affected/1/versions2.23-0ubuntu10Source reference:
/affected/1/versions2.23-0ubuntu11Source reference:
/affected/1/versions2.23-0ubuntu11.2Source reference:
/affected/1/versions2.23-0ubuntu11.3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm1Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm2Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm5Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm6Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm7Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm8Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm9Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/2/package/name
- Affected versions
- 2.26-0ubuntu2
Source reference:
/affected/2/versions2.26-0ubuntu2.1Source reference:
/affected/2/versions2.27-0ubuntu2Source reference:
/affected/2/versions2.27-0ubuntu3Source reference:
/affected/2/versions2.27-3ubuntu1Source reference:
/affected/2/versions2.27-3ubuntu1.2Source reference:
/affected/2/versions2.27-3ubuntu1.3Source reference:
/affected/2/versions2.27-3ubuntu1.4Source reference:
/affected/2/versions2.27-3ubuntu1.5Source reference:
/affected/2/versions2.27-3ubuntu1.6Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm1Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm2Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm3Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm4Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm5Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm6Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/3/package/name
- Affected versions
- 2.30-0ubuntu2
Source reference:
/affected/3/versions2.30-0ubuntu3Source reference:
/affected/3/versions2.31-0ubuntu5Source reference:
/affected/3/versions2.31-0ubuntu6Source reference:
/affected/3/versions2.31-0ubuntu7Source reference:
/affected/3/versions2.31-0ubuntu9Source reference:
/affected/3/versions2.31-0ubuntu9.1Source reference:
/affected/3/versions2.31-0ubuntu9.2Source reference:
/affected/3/versions2.31-0ubuntu9.3Source reference:
/affected/3/versions2.31-0ubuntu9.7Source reference:
/affected/3/versions2.31-0ubuntu9.9Source reference:
/affected/3/versions2.31-0ubuntu9.12Source reference:
/affected/3/versions2.31-0ubuntu9.14Source reference:
/affected/3/versions2.31-0ubuntu9.15Source reference:
/affected/3/versions2.31-0ubuntu9.16Source reference:
/affected/3/versions2.31-0ubuntu9.17Source reference:
/affected/3/versions2.31-0ubuntu9.18Source reference:
/affected/3/versions2.31-0ubuntu9.18+esm1Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/4/package/name
- Affected versions
- 2.34-0ubuntu3
Source reference:
/affected/4/versions2.35-0ubuntu1Source reference:
/affected/4/versions2.35-0ubuntu3Source reference:
/affected/4/versions2.35-0ubuntu3.1Source reference:
/affected/4/versions2.35-0ubuntu3.3Source reference:
/affected/4/versions2.35-0ubuntu3.4Source reference:
/affected/4/versions2.35-0ubuntu3.5Source reference:
/affected/4/versions2.35-0ubuntu3.6Source reference:
/affected/4/versions2.35-0ubuntu3.7Source reference:
/affected/4/versions2.35-0ubuntu3.8Source reference:
/affected/4/versions2.35-0ubuntu3.9Source reference:
/affected/4/versions2.35-0ubuntu3.10Source reference:
/affected/4/versions2.35-0ubuntu3.11Source reference:
/affected/4/versions2.35-0ubuntu3.12Source reference:
/affected/4/versions2.35-0ubuntu3.13Source reference:
/affected/4/versions2.35-0ubuntu3.14Source reference:
/affected/4/versions2.35-0ubuntu3.15Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/5/package/name
- Affected versions
- 2.38-1ubuntu6
Source reference:
/affected/5/versions2.38-3ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu2Source reference:
/affected/5/versions2.39-0ubuntu6Source reference:
/affected/5/versions2.39-0ubuntu8Source reference:
/affected/5/versions2.39-0ubuntu8.1Source reference:
/affected/5/versions2.39-0ubuntu8.2Source reference:
/affected/5/versions2.39-0ubuntu8.3Source reference:
/affected/5/versions2.39-0ubuntu8.4Source reference:
/affected/5/versions2.39-0ubuntu8.5Source reference:
/affected/5/versions2.39-0ubuntu8.6Source reference:
/affected/5/versions2.39-0ubuntu8.7Source reference:
/affected/5/versions2.39-0ubuntu8.8Source reference:
/affected/5/versions2.39-0ubuntu8.9Source reference:
/affected/5/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/6/package/name
- Affected versions
- 2.42-0ubuntu3
Source reference:
/affected/6/versions2.42-2ubuntu1Source reference:
/affected/6/versions2.42-2ubuntu2Source reference:
/affected/6/versions2.42-2ubuntu4Source reference:
/affected/6/versions2.42-2ubuntu5Source reference:
/affected/6/versions2.43-2ubuntu1Source reference:
/affected/6/versions2.43-2ubuntu2Source reference:
/affected/6/versions2.43-2ubuntu2.3Source reference:
/affected/6/versions2.43-2ubuntu2.4Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "eglibc",
"purl": "pkg:deb/ubuntu/eglibc?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"2.17-93ubuntu4",
"2.18-0ubuntu1",
"2.18-0ubuntu2",
"2.18-0ubuntu4",
"2.18-0ubuntu5",
"2.18-0ubuntu6",
"2.18-0ubuntu7",
"2.19-0ubuntu2",
"2.19-0ubuntu3",
"2.19-0ubuntu4",
"2.19-0ubuntu5",
"2.19-0ubuntu6",
"2.19-0ubuntu6.1",
"2.19-0ubuntu6.3",
"2.19-0ubuntu6.4",
"2.19-0ubuntu6.5",
"2.19-0ubuntu6.6",
"2.19-0ubuntu6.7",
"2.19-0ubuntu6.8",
"2.19-0ubuntu6.9",
"2.19-0ubuntu6.10",
"2.19-0ubuntu6.11",
"2.19-0ubuntu6.13",
"2.19-0ubuntu6.14",
"2.19-0ubuntu6.15",
"2.19-0ubuntu6.15+esm1",
"2.19-0ubuntu6.15+esm2",
"2.19-0ubuntu6.15+esm3",
"2.19-0ubuntu6.15+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "eglibc-source",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "nscd",
"binary_version": "2.19-0ubuntu6.15+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"2.21-0ubuntu4",
"2.21-0ubuntu5",
"2.21-0ubuntu6",
"2.23-0ubuntu1",
"2.23-0ubuntu2",
"2.23-0ubuntu3",
"2.23-0ubuntu4",
"2.23-0ubuntu5",
"2.23-0ubuntu6",
"2.23-0ubuntu7",
"2.23-0ubuntu9",
"2.23-0ubuntu10",
"2.23-0ubuntu11",
"2.23-0ubuntu11.2",
"2.23-0ubuntu11.3",
"2.23-0ubuntu11.3+esm1",
"2.23-0ubuntu11.3+esm2",
"2.23-0ubuntu11.3+esm3",
"2.23-0ubuntu11.3+esm5",
"2.23-0ubuntu11.3+esm6",
"2.23-0ubuntu11.3+esm7",
"2.23-0ubuntu11.3+esm8",
"2.23-0ubuntu11.3+esm9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales-all",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "nscd",
"binary_version": "2.23-0ubuntu11.3+esm9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.26-0ubuntu2",
"2.26-0ubuntu2.1",
"2.27-0ubuntu2",
"2.27-0ubuntu3",
"2.27-3ubuntu1",
"2.27-3ubuntu1.2",
"2.27-3ubuntu1.3",
"2.27-3ubuntu1.4",
"2.27-3ubuntu1.5",
"2.27-3ubuntu1.6",
"2.27-3ubuntu1.6+esm1",
"2.27-3ubuntu1.6+esm2",
"2.27-3ubuntu1.6+esm3",
"2.27-3ubuntu1.6+esm4",
"2.27-3ubuntu1.6+esm5",
"2.27-3ubuntu1.6+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales-all",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "nscd",
"binary_version": "2.27-3ubuntu1.6+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.30-0ubuntu2",
"2.30-0ubuntu3",
"2.31-0ubuntu5",
"2.31-0ubuntu6",
"2.31-0ubuntu7",
"2.31-0ubuntu9",
"2.31-0ubuntu9.1",
"2.31-0ubuntu9.2",
"2.31-0ubuntu9.3",
"2.31-0ubuntu9.7",
"2.31-0ubuntu9.9",
"2.31-0ubuntu9.12",
"2.31-0ubuntu9.14",
"2.31-0ubuntu9.15",
"2.31-0ubuntu9.16",
"2.31-0ubuntu9.17",
"2.31-0ubuntu9.18",
"2.31-0ubuntu9.18+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales-all",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "nscd",
"binary_version": "2.31-0ubuntu9.18+esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.34-0ubuntu3",
"2.35-0ubuntu1",
"2.35-0ubuntu3",
"2.35-0ubuntu3.1",
"2.35-0ubuntu3.3",
"2.35-0ubuntu3.4",
"2.35-0ubuntu3.5",
"2.35-0ubuntu3.6",
"2.35-0ubuntu3.7",
"2.35-0ubuntu3.8",
"2.35-0ubuntu3.9",
"2.35-0ubuntu3.10",
"2.35-0ubuntu3.11",
"2.35-0ubuntu3.12",
"2.35-0ubuntu3.13",
"2.35-0ubuntu3.14",
"2.35-0ubuntu3.15"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales-all",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "nscd",
"binary_version": "2.35-0ubuntu3.15"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.38-1ubuntu6",
"2.38-3ubuntu1",
"2.39-0ubuntu1",
"2.39-0ubuntu2",
"2.39-0ubuntu6",
"2.39-0ubuntu8",
"2.39-0ubuntu8.1",
"2.39-0ubuntu8.2",
"2.39-0ubuntu8.3",
"2.39-0ubuntu8.4",
"2.39-0ubuntu8.5",
"2.39-0ubuntu8.6",
"2.39-0ubuntu8.7",
"2.39-0ubuntu8.8",
"2.39-0ubuntu8.9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales-all",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "nscd",
"binary_version": "2.39-0ubuntu8.9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.42-0ubuntu3",
"2.42-2ubuntu1",
"2.42-2ubuntu2",
"2.42-2ubuntu4",
"2.42-2ubuntu5",
"2.43-2ubuntu1",
"2.43-2ubuntu2",
"2.43-2ubuntu2.3",
"2.43-2ubuntu2.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-86805.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-gconv-modules-extra",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales-all",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "nscd",
"binary_version": "2.43-2ubuntu2.4"
}
]
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #14640 · Revision 1
- Added to Heist Feed
- Publisher date