Improper DNS Resolution in GNU C Library Affects Multiple Versions
CVE-2026-4438

Currently unrated

Key Information:

Status
Vendor
CVE Published:
20 March 2026

What is CVE-2026-4438?

An issue has been identified in the GNU C Library where the functions gethostbyaddr or gethostbyaddr_r may return an invalid DNS hostname due to a misconfiguration in the nsswitch.conf file. This issue can occur when the DNS backend is specified, leading to responses that do not comply with DNS specifications. Consequently, applications relying on accurate DNS resolution can receive erroneous hostnames, potentially compromising network functionality and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Affected Version(s)

glibc 2.34 <= 2.43

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Antonio Maini (0rbitingZer0) - 0rbitingZer0@proton.me
.