CVE-2026-0915: GNU C Library Fixes A Security Issue Present Since 1996
CVE-2026-0915 was published on Friday as a security issue with the GNU C Library "glibc" for code introduced 30 years ago. The latest Glibc Git code is now patched for this issue introduced in 1996.
The oss-security bulletin sums up the issue as the getnetbyaddr and getnetbyaddr_r functions leaking the stack contents to the DNS resovler. It does note though that it is rare to call these APIs with a network value of zero and for an attacker to take advantage of this issue it can only leak the ad...
Read more at phoronix.com