Memory Leak Vulnerability in GNU C Library Affecting DNS Resolution

CVE-2026-0915

What is CVE-2026-0915?

A memory leak vulnerability exists in the GNU C Library that may expose stack contents to a configured DNS resolver. This occurs when the functions getnetbyaddr or getnetbyaddr_r are called, and the nsswitch.conf configuration specifies the use of the library's DNS backend for querying networks with a zero-valued address. The potential exposure of sensitive information to external DNS resolvers raises significant security concerns.

References