Back Linuxsecurity

SUSE glibc Important Local Privilege Escalation Vuln 2026-4669

Linuxsecurity •LinuxSecurity Advisories • October 15, 2026

Running self-managed GitLab? Critical flaws could allow server code execution. Check the fixes. ×

## This update for glibc fixes the following issue: * CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate privileges (bsc#1282509). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * glibc-info-2.11.3-17.110.58.1 * glibc-32bit-2.11.3-17.110.58.1 * nscd-2.11.3-17.110.58.1

* CVE-2026-86805 ( SUSE ): 7.3

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

* CVE-2026-86805 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

* CVE-2026-86805 ( NVD ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

* SUSE Linux Enterprise Server 11 SP4

* SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE

An update that solves one vulnerability can now be installed.

Announcement ID: SUSE-SU-2026:4669-1 Release Date: 2026-10-14T13:33:43Z Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE glibc Vulnerabilities Lead to Local Privilege Escalation and Crashes SUSE has released updates addressing multiple vulnerabilities in the glibc library, affecting various systems. Key issues include CVE-2026-86805, a TOCTOU race condition that allows local privilege escalation, and CVE-2026-8674, which can cause process crashes in local networks. Other vulnerabilities include CVE-2026-89092, leading to degraded DNS resolution, and CVE-2026-97399, which can cause program crashes due to an out-of-bounds read. The updates are for users of SUSE Linux Enterprise Server and openSUSE, with patch instructions provided for various product versions. The vulnerabilities were disclosed between September 11 and September 28, 2026, with patches released on October 14, 2026. Administrators are urged to apply the patches promptly to mitigate risks. 4 sources 46

Extracted Entities

SUSE glibc Important Local Privilege Escalation Vuln 2026-4669

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

IP Addresses (1)

Platforms (1)