Catalogo CVE

CVE-2026-19542

GNU C Library vulnerabilities

[Catalogo CVE]

Gravità
Medium · CVSS 6.6CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:L/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published
Source
[NVD] · [CVE record]
EPSS
0.23% · Oct 22, 2026

Calling tdelete on a sufficiently deep tree in the GNU C Library version 2.1 to 2.44 may write one pointer past the end of an alloca-allocated array on the stack, which may crash the application. The tdelete implementation keeps an explicit stack of parent nodes for rebalancing, which is grown as needed while descending the tree. Two rebalancing branches push an additional entry without checking the capacity, and write past the array when the stack is exactly full. Triggering this requires a node at a depth of exactly 40 (or 40 plus a multiple of 20), which implies a tree with at least a million nodes, so an attacker must drive a large number of insertions and deletions through an application that uses tsearch and tdelete. The written value is a pointer into a tree node and is not directly attacker controlled. No affected application in common distributions has been identified.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianglibcsid2.43-7fixed
Debianglibcforky2.43-7fixed
Debianglibctrixie2.41-12+deb13u4vulnerable
Debianglibcbookworm2.36-9+deb12u14vulnerable
Debianglibcbookworm-security2.36-9+deb12u7vulnerable
Ubuntuglibcnoble2.39-0ubuntu8.9fixed
Ubuntuglibc-docnoble2.39-0ubuntu8.9fixed
Ubuntuglibc-sourcenoble2.39-0ubuntu8.9fixed
Ubuntulibc-binnoble2.39-0ubuntu8.9fixed
Ubuntulibc-dev-binnoble2.39-0ubuntu8.9fixed
Ubuntulibc-devtoolsnoble2.39-0ubuntu8.9fixed
Ubuntulibc6noble2.39-0ubuntu8.9fixed
Ubuntulibc6-amd64noble2.39-0ubuntu8.9fixed
Ubuntulibc6-devnoble2.39-0ubuntu8.9fixed
Ubuntulibc6-dev-amd64noble2.39-0ubuntu8.9fixed
Ubuntulibc6-dev-i386noble2.39-0ubuntu8.9fixed
Ubuntulibc6-dev-s390noble2.39-0ubuntu8.9fixed
Ubuntulibc6-dev-x32noble2.39-0ubuntu8.9fixed
Ubuntulibc6-i386noble2.39-0ubuntu8.9fixed
Ubuntulibc6-s390noble2.39-0ubuntu8.9fixed
Ubuntulibc6-x32noble2.39-0ubuntu8.9fixed
Ubuntulocalesnoble2.39-0ubuntu8.9fixed
Ubuntulocales-allnoble2.39-0ubuntu8.9fixed
Ubuntunscdnoble2.39-0ubuntu8.9fixed
Ubuntueglibcpro2.17-93ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu1vulnerable
Ubuntueglibcpro2.18-0ubuntu2vulnerable
Ubuntueglibcpro2.18-0ubuntu4vulnerable
Ubuntueglibcpro2.18-0ubuntu5vulnerable
Ubuntueglibcpro2.18-0ubuntu6vulnerable
Ubuntueglibcpro2.18-0ubuntu7vulnerable
Ubuntueglibcpro2.19-0ubuntu2vulnerable
Ubuntueglibcpro2.19-0ubuntu3vulnerable
Ubuntueglibcpro2.19-0ubuntu4vulnerable
Ubuntueglibcpro2.19-0ubuntu5vulnerable
Ubuntueglibcpro2.19-0ubuntu6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.4vulnerable
Ubuntueglibcpro2.19-0ubuntu6.5vulnerable
Ubuntueglibcpro2.19-0ubuntu6.6vulnerable
Ubuntueglibcpro2.19-0ubuntu6.7vulnerable
Ubuntueglibcpro2.19-0ubuntu6.8vulnerable
Ubuntueglibcpro2.19-0ubuntu6.9vulnerable
Ubuntueglibcpro2.19-0ubuntu6.10vulnerable
Ubuntueglibcpro2.19-0ubuntu6.11vulnerable
Ubuntueglibcpro2.19-0ubuntu6.13vulnerable
Ubuntueglibcpro2.19-0ubuntu6.14vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm1vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm2vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm3vulnerable
Ubuntueglibcpro2.19-0ubuntu6.15+esm4vulnerable
Ubuntuglibcpro2.30-0ubuntu2vulnerable
Ubuntuglibcpro2.30-0ubuntu3vulnerable
Ubuntuglibcpro2.31-0ubuntu5vulnerable
Ubuntuglibcpro2.31-0ubuntu6vulnerable
Ubuntuglibcpro2.31-0ubuntu7vulnerable
Ubuntuglibcpro2.31-0ubuntu9vulnerable
Ubuntuglibcpro2.31-0ubuntu9.1vulnerable
Ubuntuglibcpro2.31-0ubuntu9.2vulnerable
Ubuntuglibcpro2.31-0ubuntu9.3vulnerable
Ubuntuglibcpro2.31-0ubuntu9.7vulnerable
Ubuntuglibcpro2.31-0ubuntu9.9vulnerable
Ubuntuglibcpro2.31-0ubuntu9.12vulnerable
Ubuntuglibcpro2.31-0ubuntu9.14vulnerable
Ubuntuglibcpro2.31-0ubuntu9.15vulnerable
Ubuntuglibcpro2.31-0ubuntu9.16vulnerable
Ubuntuglibcpro2.31-0ubuntu9.17vulnerable
Ubuntuglibcpro2.31-0ubuntu9.18vulnerable
Ubuntuglibcpro2.31-0ubuntu9.18+esm1vulnerable
Ubuntuglibc22.042.34-0ubuntu3vulnerable
Ubuntuglibc22.042.35-0ubuntu1vulnerable
Ubuntuglibc22.042.35-0ubuntu3vulnerable
Ubuntuglibc22.042.35-0ubuntu3.1vulnerable
Ubuntuglibc22.042.35-0ubuntu3.3vulnerable
Ubuntuglibc22.042.35-0ubuntu3.4vulnerable
Ubuntuglibc22.042.35-0ubuntu3.5vulnerable
Ubuntuglibc22.042.35-0ubuntu3.6vulnerable
Ubuntuglibc22.042.35-0ubuntu3.7vulnerable
Ubuntuglibc22.042.35-0ubuntu3.8vulnerable
Ubuntuglibc22.042.35-0ubuntu3.9vulnerable
Ubuntuglibc22.042.35-0ubuntu3.10vulnerable
Ubuntuglibc22.042.35-0ubuntu3.11vulnerable
Ubuntuglibc22.042.35-0ubuntu3.12vulnerable
Ubuntuglibc22.042.35-0ubuntu3.13vulnerable
Ubuntuglibc22.042.35-0ubuntu3.14vulnerable
Ubuntuglibc22.042.35-0ubuntu3.15fixed
Ubuntuglibc24.042.38-1ubuntu6vulnerable
Ubuntuglibc24.042.38-3ubuntu1vulnerable
Ubuntuglibc24.042.39-0ubuntu1vulnerable
Ubuntuglibc24.042.39-0ubuntu2vulnerable
Ubuntuglibc24.042.39-0ubuntu6vulnerable
Ubuntuglibc24.042.39-0ubuntu8vulnerable
Ubuntuglibc24.042.39-0ubuntu8.1vulnerable
Ubuntuglibc24.042.39-0ubuntu8.2vulnerable
Ubuntuglibc24.042.39-0ubuntu8.3vulnerable
Ubuntuglibc24.042.39-0ubuntu8.4vulnerable
Ubuntuglibc24.042.39-0ubuntu8.5vulnerable
Ubuntuglibc24.042.39-0ubuntu8.6vulnerable
Ubuntuglibc24.042.39-0ubuntu8.7vulnerable
Ubuntuglibc24.042.39-0ubuntu8.8vulnerable
Ubuntuglibc24.042.39-0ubuntu8.9fixed
Ubuntuglibc26.042.42-0ubuntu3vulnerable
Ubuntuglibc26.042.42-2ubuntu1vulnerable
Ubuntuglibc26.042.42-2ubuntu2vulnerable
Ubuntuglibc26.042.42-2ubuntu4vulnerable
Ubuntuglibc26.042.42-2ubuntu5vulnerable
Ubuntuglibc26.042.43-2ubuntu1vulnerable
Ubuntuglibc26.042.43-2ubuntu2vulnerable
Ubuntuglibc26.042.43-2ubuntu2.3vulnerable
Ubuntuglibc26.042.43-2ubuntu2.4fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianglibcsourcesid2.43-4not yet assignedNot reportedNot reported
Debianglibcsourceforky2.43-4not yet assignedNot reportedNot reported
Debianglibcsourcetrixie(unfixed)not yet assignedNot reportedNot reported
Debianglibcsourcebookworm(unfixed)not yet assignedNot reportedNot reported
Ubuntuglibcdebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntuglibc-docdebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntuglibc-sourcedebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc-bindebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc-dev-bindebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc-devtoolsdebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-amd64debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-devdebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-dev-amd64debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-dev-i386debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-dev-s390debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-dev-x32debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-i386debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-s390debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulibc6-x32debnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulocalesdebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntulocales-alldebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntunscddebnoble2.39-0ubuntu8.9Not reportedNot reportedNot reported
Ubuntuglibcdeb22.042.35-0ubuntu3.15Not reportedUBUNTU-CVE-2026-19542Not reported
Ubuntuglibcdeb24.042.39-0ubuntu8.9Not reportedUBUNTU-CVE-2026-19542Not reported
Ubuntuglibcdeb26.042.43-2ubuntu2.4Not reportedUBUNTU-CVE-2026-19542Not reported

Notes

[trixie] glibc: Minor issue [bookworm] glibc: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [glibc-doc]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [glibc-source]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-dbg]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-dev]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-dev-i386]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-dev-x32]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-i386]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc6-x32]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc-bin]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc-dev-bin]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc-devtools]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [libc-l10n]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [locales]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · all · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · all · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [locales-all]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

  • [nscd]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (4)
    • 2.36-9+deb12u14 · amd64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u14 · arm64 · bookworm

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · amd64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

    • 2.36-9+deb12u7 · arm64 · bookworm-security

      Interessata

      usn · glibc · debian · bookworm; usn · glibc · debian · 12

[Debian 13 (Trixie)]

  • [glibc-doc]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.41-12+deb13u3 · all · trixie

      Interessata

      usn · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Interessata

      usn · glibc · debian · 13

  • [glibc-source]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.41-12+deb13u3 · all · trixie

      Interessata

      usn · glibc · debian · 13

    • 2.41-12+deb13u3 · all · trixie

      Interessata

      usn · glibc · debian · 13

  • [libc6]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Interessata

      usn · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Interessata

      usn · glibc · debian · 13

  • [libc6-dbg]Interessata

    Pacchetto sorgente: [glibc]

    Dettagli (2)
    • 2.41-12+deb13u3 · amd64 · trixie

      Interessata

      usn · glibc · debian · 13

    • 2.41-12+deb13u3 · arm64 · trixie

      Interessata

      usn · glibc · debian · 13

Altri risultati

Osservato:

Riferimenti