2429771 – (CVE-2026-0861) CVE-2026-0861 glibc: Integer overflow in memalign leads to heap corruption

Bug 2429771 (CVE-2026-0861) - CVE-2026-0861 glibc: Integer overflow in memalign leads to heap corruption

Summary: CVE-2026-0861 glibc: Integer overflow in memalign leads to heap corruption

Keywords:
Status:	NEW
Alias:	CVE-2026-0861
Product:	Security Response
Classification:	Other
Component:	vulnerability
Sub Component:
Version:	unspecified
Hardware:	All
OS:	Linux
Priority:	low
Severity:	low
Target Milestone:	---
Assignee:	Product Security DevOps Team
QA Contact:
Docs Contact:
URL:
Whiteboard:
Depends On:	2430079 2430074 2430075 2430076 2430077 2430078
Blocks:
TreeView+	depends on / blocked

Reported:	2026-01-14 22:01 UTC by OSIDB Bzimport
Modified:	2026-02-23 01:12 UTC (History)
CC List:	5 users (show)
Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments	(Terms of Use)

Links
System	ID	Priority	Status	Summary	Last Updated
Red Hat Product Errata	RHBA-2026:2945	None	None	None	2026-02-18 13:48:34 UTC
Red Hat Product Errata	RHBA-2026:2957	None	None	None	2026-02-18 19:41:59 UTC
Red Hat Product Errata	RHBA-2026:2958	None	None	None	2026-02-18 16:23:43 UTC
Red Hat Product Errata	RHBA-2026:2959	None	None	None	2026-02-18 16:21:30 UTC
Red Hat Product Errata	RHBA-2026:2960	None	None	None	2026-02-18 16:45:31 UTC
Red Hat Product Errata	RHBA-2026:3030	None	None	None	2026-02-23 01:12:51 UTC
Red Hat Product Errata	RHSA-2026:1334	None	None	None	2026-01-27 08:47:48 UTC
Red Hat Product Errata	RHSA-2026:2786	None	None	None	2026-02-17 10:02:01 UTC

Description OSIDB Bzimport 2026-01-14 22:01:35 UTC

Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc, valloc, pvalloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption.

Comment 2 errata-xmlrpc 2026-01-27 08:47:46 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2026:1334 https://access.redhat.com/errata/RHSA-2026:1334

Comment 3 Lyly Brown 2026-02-07 07:58:21 UTC Comment hidden (spam)

This comment was flagged as spam, view the edit history to see the original text if required.

Comment 4 errata-xmlrpc 2026-02-17 10:01:59 UTC

This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2026:2786 https://access.redhat.com/errata/RHSA-2026:2786

Note You need to log in before you can comment on or make changes to this bug.