Multiple Vulnerabilities in GNU C Library Affect Ubuntu Systems

Linuxsecurity

Multiple Vulnerabilities in GNU C Library Affect Ubuntu Systems

First seen 27 Jul 2026, 16:09 UTC • •57.9

Article Content

1 / 4

Browse articles

ThreatCluster •July 28, 2026 at 15:18 UTC

•Ubuntu released USN-8611-1 on July 27, 2026, addressing critical vulnerabilities in glibc.
•CVE-2026-4046 can lead to denial of service via the iconv function, affecting Ubuntu 24.04 LTS.
•Immediate system updates are recommended to patch vulnerabilities and prevent exploitation.

On July 27, 2026, Ubuntu released USN-8611-1 addressing several vulnerabilities in the GNU C Library (glibc). Key issues include improper handling of IBM character sets and DNS responses, potentially leading to denial of service and incorrect hostname information. Specifically, CVE-2026-4046 allows denial of service via the iconv function, while CVE-2026-4437 and CVE-2026-4438 affect DNS functions, impacting Ubuntu 24.04 LTS. Additionally, CVE-2026-5435 involves buffer length enforcement issues, and CVE-2026-5450 presents a heap overflow risk. Other vulnerabilities include CVE-2026-5928 and CVE-2026-6238, which may expose sensitive information or cause denial of service. Users are advised to update their systems to mitigate these risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 46d ago How this analysis works

Timeline

2026-03-20

CVE-2026-4437 and CVE-2026-4438 published

These vulnerabilities in DNS functions can lead to incorrect hostname information and violations of DNS specifications.

2026-03-30

CVE-2026-4046 published

The iconv function vulnerability allows denial of service through improper handling of IBM character sets.

2026-04-20

CVE-2026-5450 and CVE-2026-5928 published

Heap buffer overflow and sensitive information exposure vulnerabilities were disclosed.

2026-04-28

CVE-2026-5435 and CVE-2026-6238 published

These vulnerabilities involve buffer length enforcement and potential denial of service risks.

2026-07-27

USN-8611-1 released

Ubuntu issued a security notice addressing multiple vulnerabilities in glibc, urging users to update.

More articles in this cluster (3)

Following this threat?

Track Ubuntu and CVE-2024-54661 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…