CVE-2026-77117

unknown
Published 2026-09-08 · Modified —
CVSS v3
CVSS v4 NEW
not yet in upstream
VIR risk

Description

GNU C Library vulnerabilities

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

Mitigation details

Source: Debian Security Tracker · View original ↗ · DFSG

CVE-2026-77117 NameCVE-2026-77117 SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) Debian Bugs1145880 Vulnerable and fixed packages The table below lists information on source packages. Source PackageReleaseVersionStatus glibc (PTS)bullseye2.31-13+deb11u11vulnerable bullseye…

CVE-2026-77117

NameCVE-2026-77117
SourceCVE (at NVD; CERT, ENISA, LWN, oss-sec, fulldisc, Debian ELTS, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs1145880

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
glibc (PTS)bullseye2.31-13+deb11u11vulnerable
bullseye (security)2.31-13+deb11u14vulnerable
bookworm2.36-9+deb12u14vulnerable
bookworm (security)2.36-9+deb12u7vulnerable
trixie2.41-12+deb13u3vulnerable
forky2.43-3vulnerable
sid2.43-4vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
glibcsource(unstable)(unfixed)1145880

Notes

[trixie] - glibc <no-dsa> (Minor issue)
https://bugzilla.redhat.com/show_bug.cgi?id=2523274

Home - Debian Security - Source (Git)

Apply commands

text fix
Notes
[trixie] - glibc <no-dsa> (Minor issue)https://bugzilla.redhat.com/show_bug.cgi?id=2523274

OS impact

suse SUSE Affected 1 release
VersionStatusFixed in
Affected
debian Debian Mixed 5 releases
VersionStatusFixed in
trixie Affected
sid Fixed 2.43-5
forky Affected
bullseye Affected
bookworm Affected
ubuntu Ubuntu Fixed 2 releases
VersionStatusFixed in
resolute Fixed 2.43-2ubuntu2.4
jammy Fixed 2.35-0ubuntu3.15

References

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.