Threat Intel

v0.1

← CVEs

CVE-2026-0861

HIGH 8.4
Published
2026-01-14
Last Modified
2026-02-03
Affected Apps
38
Affected Devices
161
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Passing too large an alignment to the memalign suite of functions (memalign, posix_memalign, aligned_alloc) in the GNU C Library version 2.30 to 2.42 may result in an integer overflow, which could consequently result in a heap corruption. Note that the attacker must have control over both, the size as well as the alignment arguments of the memalign function to be able to exploit this. The size parameter must be close enough to PTRDIFF_MAX so as to overflow size_t along with the large alignment argument. This limits the malicious inputs for the alignment for memalign to the range [1<<62+ 1, 1<<63] and exactly 1<<63 for posix_memalign and aligned_alloc. Typically the alignment argument passed to such functions is a known constrained quantity (e.g. page size, block size, struct sizes) and is not attacker controlled, because of which this may not be easily exploitable in practice. An application bug could potentially result in the input alignment being too large, e.g. due to a different buffer overflow or integer overflow in the application or its dependent libraries, but that is again an uncommon usage pattern given typical sources of alignments.
Affected Applications in Environment 38
glibc v2.28-251.0.3.el8_10.27
3 devices
glibc v2.28-251.el8_10.5
2 devices
glibc v2.34-168.el9_6.23
21 devices
glibc v2.34-168.el9_6.24
1 device
glibc v2.28-251.0.2.el8_10.13
1 device
glibc v2.17-326.el7_9
1 device
glibc v2.34-231.el9_7.10
2 devices
glibc v2.34-231.el9_7.2
5 devices
glibc v2.34-231.el9_7.10
1 device
glibc v2.28-251.0.3.el8_10.25
2 devices
glibc v2.34-168.0.1.el9_6.23
1 device
glibc v2.39-58.el10_1.7
1 device
glibc v2.28-251.el8_10.16
1 device
glibc v2.28-251.el8_10.27
2 devices
gnupg v2.2.27-3ubuntu2.5
27 devices
gnupg v2.2.19-3ubuntu2.5
11 devices
gnupg v1.4.20-1ubuntu3.3
3 devices
gnupg v2.4.4-2ubuntu17.4
58 devices
gnupg v2.2.40-1.1+deb12u2
12 devices
gnupg v2.2.4-1ubuntu1.6
1 device
gnupg v2.2.40-1.1+deb12u1
2 devices
gnupg v1.4.16-1ubuntu2.6
1 device
gnupg v1.4.20-1ubuntu3.3+esm3
1 device
gnupg v2.4.4-2ubuntu23.2
1 device
gnutls v3.6.16-8.el8_10.3
1 device
gnutls v3.8.3-6.el9
20 devices
gnutls v3.8.3-9.el9
5 devices
gnutls v3.6.16-8.el8_10.4
4 devices
gnutls v3.3.29-9.el7_6
1 device
gnutls v3.8.3-10.el9_7
2 devices
gnutls v3.8.3-6.el9_6.2
2 devices
gnutls v3.8.3-10.el9_7
1 device
gnutls v3.8.3-6.el9_6.2
1 device
gnutls v3.6.16-6.el8_7
2 devices
gnutls v3.6.16-8.el8_9.3
1 device
gnutls v3.6.16-8.el8_10.3
1 device
gnutls v3.8.10-3.el10_1
1 device
gnutls v3.6.16-8.el8_10.4
2 devices
Affected Devices 161
DPNCHA-194733 Linux administrator-SYS-4029GP-TRT2 Linux aggietower Linux ah-ots Linux atc.db.usu.edu Linux auto-score Linux awep1 Linux bacha25 Linux bennett-HP-Z2-SFF-G4-Workstation Linux blakeutil Linux capahab Linux cceredcapdb Linux cceredcapweb Linux chela03 Linux chela04 Linux chela05 Linux cleanaddressdev.banner.usu.edu Linux devjobsub.banner.usu.edu Linux dispatch Linux dist Linux dpapsb-161390.aggies.usu.edu Linux dpapsb-191594.mypc.usu.edu Linux educweb Linux el103-02.ece.usu.edu Linux el103-03.ece.usu.edu Linux el103-04.ece.usu.edu Linux el103-05.ece.usu.edu Linux el103-07.ece.usu.edu Linux el103-08.ece.usu.edu Linux el103-09.ece.usu.edu Linux el103-10.ece.usu.edu Linux el103-14.ece.usu.edu Linux el103-15.ece.usu.edu Linux el103-16.ece.usu.edu Linux el103-17.ece.usu.edu Linux el103-18.ece.usu.edu Linux el103-19.ece.usu.edu Linux el103-20.ece.usu.edu Linux el120-01.ece.usu.edu Linux el120-02.ece.usu.edu Linux el120-03.ece.usu.edu Linux el120-04.ece.usu.edu Linux el120-05.ece.usu.edu Linux el120-06.ece.usu.edu Linux el120-08.ece.usu.edu Linux el120-09.ece.usu.edu Linux el120-10.ece.usu.edu Linux el120-11.ece.usu.edu Linux el120-12.ece.usu.edu Linux el120-14.ece.usu.edu Linux elend Linux emby Linux eprocdev.banner.usu.edu Linux ezidadmin Linux facreadyprod.pplant.usu.edu Linux facreadytestrhel.pplant.usu.edu Linux facshibsp2.pplant.usu.edu Linux flexnet Linux flo-rida Linux gravekeeper Linux guru.cluster Linux hackedpasswords Linux hotcheeto Linux infosec-grafana Linux intune-mcc1 Linux intune-mcc3 Linux iperf Linux itfinance Linux itls-wp Linux joek-HP-Z2-SFF-G9-Workstation-Desktop-PC Linux kena-utility Linux kmlab Linux ldap-lb01 Linux ldap-lb02 Linux librenms Linux librenmsdb Linux log Linux lumbermill Linux mail Linux minemeld Linux mirror3 Linux miscdata Linux monitor01 Linux monitor02 Linux my1 Linux my2 Linux mysql02 Linux netbox Linux omekanew Linux oms.db.usu.edu Linux owenclarke-OptiPlex-7090 Linux paymentworksdev.banner.usu.edu Linux portscan01 Linux privatebin Linux rcbd Linux rcdb-dev Linux redcapweb Linux refraction Linux second-thrifted-tractor Linux sentry Linux server1mathusuedu Linux server2math Linux solar Linux spencer-funk-HP-Z2-SFF-G5-Workstation Linux starfleetpad Linux storm Linux strat Linux sys-serv-l-301-data Linux thinkstation Linux thnotes Linux tsutil.it.usu.edu Linux vinmathusuedu Linux vrtour Linux web-lb-stage.usu.edu Linux web-lb01-redirect.usu.edu Linux web-lb01.usu.edu Linux web-lb02-redirect.usu.edu Linux web-lb02.usu.edu Linux web-lb03-redirect.usu.edu Linux web-lb03.usu.edu Linux web-lb04.usu.edu Linux web02.usu.edu Linux web03.usu.edu Linux web04a Linux web05 Linux web06 Linux web08.usu.edu Linux web09.usu.edu Linux web10 Linux web10-awhc Linux web10-awhc Linux web11.usu.edu Linux web12.usu.edu Linux web13.usu.edu Linux web14.usu.edu Linux web15.usu.edu Linux web16.usu.edu Linux web17 Linux web18 Linux web19.usu.edu Linux web20 Linux web21 Linux web22 Linux web23 Linux web24 Linux web25 Linux web27.usu.edu Linux web28 Linux web29.usu.edu Linux web30.usu.edu Linux web31.usu.edu Linux web32.usu.edu Linux web33.usu.edu Linux web34.usu.edu Linux web35.usu.edu Linux web36.usu.edu Linux web37.usu.edu Linux webs.usu.edu Linux webtools Linux wpad Linux zldtst.db.usu.edu Linux
References 3