UBUNTU-CVE-2026-89092
The nscd service in the GNU C Library 2.3.4 onwards may crash due to a stack overflow when a malicious DNS server returns too large a response for a DNS query, resulting in degraded DNS resolution for the system. Exploitation of this bug needs a system that has nscd enabled and using an untrusted DNS server for name resolution, with the compromised DNS server being capable of processing records large enough to result in a stack overflow in an nscd thread stack. During experimentation, bind 9 was unable to handle large records, but that could change in future or with a different name server. In typical installations, nscd is executed in an isolated context as its own user without a shell, due to which any compromise of that service is isolated. There is a remote possibility of nscd cache corruption if an attacker manages to get the stack pointer into a desired point in the heap, potentially resulting in other caches in nscd being overwritten with corrupt data through the stack overflow, until the buggy code path eventually results in a crash. Finally, a crash in nscd may result in performance degradation when resolving names, but it does not result in a denial of service.
UBUNTU-CVE-2026-89092
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:UBUNTU-CVE-2026-89092
eglibc
Source reference: /affected/0/package/name
- Affected versions
- 2.17-93ubuntu4
Source reference:
/affected/0/versions2.18-0ubuntu1Source reference:
/affected/0/versions2.18-0ubuntu2Source reference:
/affected/0/versions2.18-0ubuntu4Source reference:
/affected/0/versions2.18-0ubuntu5Source reference:
/affected/0/versions2.18-0ubuntu6Source reference:
/affected/0/versions2.18-0ubuntu7Source reference:
/affected/0/versions2.19-0ubuntu2Source reference:
/affected/0/versions2.19-0ubuntu3Source reference:
/affected/0/versions2.19-0ubuntu4Source reference:
/affected/0/versions2.19-0ubuntu5Source reference:
/affected/0/versions2.19-0ubuntu6Source reference:
/affected/0/versions2.19-0ubuntu6.1Source reference:
/affected/0/versions2.19-0ubuntu6.3Source reference:
/affected/0/versions2.19-0ubuntu6.4Source reference:
/affected/0/versions2.19-0ubuntu6.5Source reference:
/affected/0/versions2.19-0ubuntu6.6Source reference:
/affected/0/versions2.19-0ubuntu6.7Source reference:
/affected/0/versions2.19-0ubuntu6.8Source reference:
/affected/0/versions2.19-0ubuntu6.9Source reference:
/affected/0/versions2.19-0ubuntu6.10Source reference:
/affected/0/versions2.19-0ubuntu6.11Source reference:
/affected/0/versions2.19-0ubuntu6.13Source reference:
/affected/0/versions2.19-0ubuntu6.14Source reference:
/affected/0/versions2.19-0ubuntu6.15Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm1Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm2Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm3Source reference:
/affected/0/versions2.19-0ubuntu6.15+esm4Source reference:
/affected/0/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/1/package/name
- Affected versions
- 2.21-0ubuntu4
Source reference:
/affected/1/versions2.21-0ubuntu5Source reference:
/affected/1/versions2.21-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu1Source reference:
/affected/1/versions2.23-0ubuntu2Source reference:
/affected/1/versions2.23-0ubuntu3Source reference:
/affected/1/versions2.23-0ubuntu4Source reference:
/affected/1/versions2.23-0ubuntu5Source reference:
/affected/1/versions2.23-0ubuntu6Source reference:
/affected/1/versions2.23-0ubuntu7Source reference:
/affected/1/versions2.23-0ubuntu9Source reference:
/affected/1/versions2.23-0ubuntu10Source reference:
/affected/1/versions2.23-0ubuntu11Source reference:
/affected/1/versions2.23-0ubuntu11.2Source reference:
/affected/1/versions2.23-0ubuntu11.3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm1Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm2Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm3Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm5Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm6Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm7Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm8Source reference:
/affected/1/versions2.23-0ubuntu11.3+esm9Source reference:
/affected/1/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/2/package/name
- Affected versions
- 2.26-0ubuntu2
Source reference:
/affected/2/versions2.26-0ubuntu2.1Source reference:
/affected/2/versions2.27-0ubuntu2Source reference:
/affected/2/versions2.27-0ubuntu3Source reference:
/affected/2/versions2.27-3ubuntu1Source reference:
/affected/2/versions2.27-3ubuntu1.2Source reference:
/affected/2/versions2.27-3ubuntu1.3Source reference:
/affected/2/versions2.27-3ubuntu1.4Source reference:
/affected/2/versions2.27-3ubuntu1.5Source reference:
/affected/2/versions2.27-3ubuntu1.6Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm1Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm2Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm3Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm4Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm5Source reference:
/affected/2/versions2.27-3ubuntu1.6+esm6Source reference:
/affected/2/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/3/package/name
- Affected versions
- 2.30-0ubuntu2
Source reference:
/affected/3/versions2.30-0ubuntu3Source reference:
/affected/3/versions2.31-0ubuntu5Source reference:
/affected/3/versions2.31-0ubuntu6Source reference:
/affected/3/versions2.31-0ubuntu7Source reference:
/affected/3/versions2.31-0ubuntu9Source reference:
/affected/3/versions2.31-0ubuntu9.1Source reference:
/affected/3/versions2.31-0ubuntu9.2Source reference:
/affected/3/versions2.31-0ubuntu9.3Source reference:
/affected/3/versions2.31-0ubuntu9.7Source reference:
/affected/3/versions2.31-0ubuntu9.9Source reference:
/affected/3/versions2.31-0ubuntu9.12Source reference:
/affected/3/versions2.31-0ubuntu9.14Source reference:
/affected/3/versions2.31-0ubuntu9.15Source reference:
/affected/3/versions2.31-0ubuntu9.16Source reference:
/affected/3/versions2.31-0ubuntu9.17Source reference:
/affected/3/versions2.31-0ubuntu9.18Source reference:
/affected/3/versions2.31-0ubuntu9.18+esm1Source reference:
/affected/3/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/4/package/name
- Affected versions
- 2.34-0ubuntu3
Source reference:
/affected/4/versions2.35-0ubuntu1Source reference:
/affected/4/versions2.35-0ubuntu3Source reference:
/affected/4/versions2.35-0ubuntu3.1Source reference:
/affected/4/versions2.35-0ubuntu3.3Source reference:
/affected/4/versions2.35-0ubuntu3.4Source reference:
/affected/4/versions2.35-0ubuntu3.5Source reference:
/affected/4/versions2.35-0ubuntu3.6Source reference:
/affected/4/versions2.35-0ubuntu3.7Source reference:
/affected/4/versions2.35-0ubuntu3.8Source reference:
/affected/4/versions2.35-0ubuntu3.9Source reference:
/affected/4/versions2.35-0ubuntu3.10Source reference:
/affected/4/versions2.35-0ubuntu3.11Source reference:
/affected/4/versions2.35-0ubuntu3.12Source reference:
/affected/4/versions2.35-0ubuntu3.13Source reference:
/affected/4/versions2.35-0ubuntu3.14Source reference:
/affected/4/versions2.35-0ubuntu3.15Source reference:
/affected/4/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/5/package/name
- Affected versions
- 2.38-1ubuntu6
Source reference:
/affected/5/versions2.38-3ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu1Source reference:
/affected/5/versions2.39-0ubuntu2Source reference:
/affected/5/versions2.39-0ubuntu6Source reference:
/affected/5/versions2.39-0ubuntu8Source reference:
/affected/5/versions2.39-0ubuntu8.1Source reference:
/affected/5/versions2.39-0ubuntu8.2Source reference:
/affected/5/versions2.39-0ubuntu8.3Source reference:
/affected/5/versions2.39-0ubuntu8.4Source reference:
/affected/5/versions2.39-0ubuntu8.5Source reference:
/affected/5/versions2.39-0ubuntu8.6Source reference:
/affected/5/versions2.39-0ubuntu8.7Source reference:
/affected/5/versions2.39-0ubuntu8.8Source reference:
/affected/5/versions2.39-0ubuntu8.9Source reference:
/affected/5/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
glibc
Source reference: /affected/6/package/name
- Affected versions
- 2.42-0ubuntu3
Source reference:
/affected/6/versions2.42-2ubuntu1Source reference:
/affected/6/versions2.42-2ubuntu2Source reference:
/affected/6/versions2.42-2ubuntu4Source reference:
/affected/6/versions2.42-2ubuntu5Source reference:
/affected/6/versions2.43-2ubuntu1Source reference:
/affected/6/versions2.43-2ubuntu2Source reference:
/affected/6/versions2.43-2ubuntu2.3Source reference:
/affected/6/versions2.43-2ubuntu2.4Source reference:
/affected/6/versions - Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "eglibc",
"purl": "pkg:deb/ubuntu/eglibc?arch=source&distro=esm-infra-legacy%2Ftrusty",
"ecosystem": "Ubuntu:Pro:14.04:LTS"
},
"versions": [
"2.17-93ubuntu4",
"2.18-0ubuntu1",
"2.18-0ubuntu2",
"2.18-0ubuntu4",
"2.18-0ubuntu5",
"2.18-0ubuntu6",
"2.18-0ubuntu7",
"2.19-0ubuntu2",
"2.19-0ubuntu3",
"2.19-0ubuntu4",
"2.19-0ubuntu5",
"2.19-0ubuntu6",
"2.19-0ubuntu6.1",
"2.19-0ubuntu6.3",
"2.19-0ubuntu6.4",
"2.19-0ubuntu6.5",
"2.19-0ubuntu6.6",
"2.19-0ubuntu6.7",
"2.19-0ubuntu6.8",
"2.19-0ubuntu6.9",
"2.19-0ubuntu6.10",
"2.19-0ubuntu6.11",
"2.19-0ubuntu6.13",
"2.19-0ubuntu6.14",
"2.19-0ubuntu6.15",
"2.19-0ubuntu6.15+esm1",
"2.19-0ubuntu6.15+esm2",
"2.19-0ubuntu6.15+esm3",
"2.19-0ubuntu6.15+esm4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "eglibc-source",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.19-0ubuntu6.15+esm4"
},
{
"binary_name": "nscd",
"binary_version": "2.19-0ubuntu6.15+esm4"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fxenial",
"ecosystem": "Ubuntu:Pro:16.04:LTS"
},
"versions": [
"2.21-0ubuntu4",
"2.21-0ubuntu5",
"2.21-0ubuntu6",
"2.23-0ubuntu1",
"2.23-0ubuntu2",
"2.23-0ubuntu3",
"2.23-0ubuntu4",
"2.23-0ubuntu5",
"2.23-0ubuntu6",
"2.23-0ubuntu7",
"2.23-0ubuntu9",
"2.23-0ubuntu10",
"2.23-0ubuntu11",
"2.23-0ubuntu11.2",
"2.23-0ubuntu11.3",
"2.23-0ubuntu11.3+esm1",
"2.23-0ubuntu11.3+esm2",
"2.23-0ubuntu11.3+esm3",
"2.23-0ubuntu11.3+esm5",
"2.23-0ubuntu11.3+esm6",
"2.23-0ubuntu11.3+esm7",
"2.23-0ubuntu11.3+esm8",
"2.23-0ubuntu11.3+esm9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "locales-all",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.23-0ubuntu11.3+esm9"
},
{
"binary_name": "nscd",
"binary_version": "2.23-0ubuntu11.3+esm9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Fbionic",
"ecosystem": "Ubuntu:Pro:18.04:LTS"
},
"versions": [
"2.26-0ubuntu2",
"2.26-0ubuntu2.1",
"2.27-0ubuntu2",
"2.27-0ubuntu3",
"2.27-3ubuntu1",
"2.27-3ubuntu1.2",
"2.27-3ubuntu1.3",
"2.27-3ubuntu1.4",
"2.27-3ubuntu1.5",
"2.27-3ubuntu1.6",
"2.27-3ubuntu1.6+esm1",
"2.27-3ubuntu1.6+esm2",
"2.27-3ubuntu1.6+esm3",
"2.27-3ubuntu1.6+esm4",
"2.27-3ubuntu1.6+esm5",
"2.27-3ubuntu1.6+esm6"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "locales-all",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "multiarch-support",
"binary_version": "2.27-3ubuntu1.6+esm6"
},
{
"binary_name": "nscd",
"binary_version": "2.27-3ubuntu1.6+esm6"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=esm-infra%2Ffocal",
"ecosystem": "Ubuntu:Pro:20.04:LTS"
},
"versions": [
"2.30-0ubuntu2",
"2.30-0ubuntu3",
"2.31-0ubuntu5",
"2.31-0ubuntu6",
"2.31-0ubuntu7",
"2.31-0ubuntu9",
"2.31-0ubuntu9.1",
"2.31-0ubuntu9.2",
"2.31-0ubuntu9.3",
"2.31-0ubuntu9.7",
"2.31-0ubuntu9.9",
"2.31-0ubuntu9.12",
"2.31-0ubuntu9.14",
"2.31-0ubuntu9.15",
"2.31-0ubuntu9.16",
"2.31-0ubuntu9.17",
"2.31-0ubuntu9.18",
"2.31-0ubuntu9.18+esm1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-armel",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-lse",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-pic",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "locales-all",
"binary_version": "2.31-0ubuntu9.18+esm1"
},
{
"binary_name": "nscd",
"binary_version": "2.31-0ubuntu9.18+esm1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.34-0ubuntu3",
"2.35-0ubuntu1",
"2.35-0ubuntu3",
"2.35-0ubuntu3.1",
"2.35-0ubuntu3.3",
"2.35-0ubuntu3.4",
"2.35-0ubuntu3.5",
"2.35-0ubuntu3.6",
"2.35-0ubuntu3.7",
"2.35-0ubuntu3.8",
"2.35-0ubuntu3.9",
"2.35-0ubuntu3.10",
"2.35-0ubuntu3.11",
"2.35-0ubuntu3.12",
"2.35-0ubuntu3.13",
"2.35-0ubuntu3.14",
"2.35-0ubuntu3.15"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-prof",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "locales-all",
"binary_version": "2.35-0ubuntu3.15"
},
{
"binary_name": "nscd",
"binary_version": "2.35-0ubuntu3.15"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"2.38-1ubuntu6",
"2.38-3ubuntu1",
"2.39-0ubuntu1",
"2.39-0ubuntu2",
"2.39-0ubuntu6",
"2.39-0ubuntu8",
"2.39-0ubuntu8.1",
"2.39-0ubuntu8.2",
"2.39-0ubuntu8.3",
"2.39-0ubuntu8.4",
"2.39-0ubuntu8.5",
"2.39-0ubuntu8.6",
"2.39-0ubuntu8.7",
"2.39-0ubuntu8.8",
"2.39-0ubuntu8.9"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-s390",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "locales-all",
"binary_version": "2.39-0ubuntu8.9"
},
{
"binary_name": "nscd",
"binary_version": "2.39-0ubuntu8.9"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "glibc",
"purl": "pkg:deb/ubuntu/glibc?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"2.42-0ubuntu3",
"2.42-2ubuntu1",
"2.42-2ubuntu2",
"2.42-2ubuntu4",
"2.42-2ubuntu5",
"2.43-2ubuntu1",
"2.43-2ubuntu2",
"2.43-2ubuntu2.3",
"2.43-2ubuntu2.4"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-89092.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "glibc-source",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-dev-bin",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-devtools",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc-gconv-modules-extra",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-amd64",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-dev-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-i386",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "libc6-x32",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "locales-all",
"binary_version": "2.43-2ubuntu2.4"
},
{
"binary_name": "nscd",
"binary_version": "2.43-2ubuntu2.4"
}
]
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #14641 · Revision 1
- Added to Heist Feed
- Publisher date