CVE-2026-0915 getnetbyaddr and getnetbyaddr_r leak stack contents to DNS resovler
Attackers can leak stack contents to DNS resolvers by triggering specific network queries in glibc when DNS backend is configured.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-0915?
CVE-2026-0915 is a high-severity vulnerability in Gnu Glibc, published on 15 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Calling getnetbyaddr or getnetbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend for networks and queries for a zero-valued network in the GNU C Library version 2.0 to version 2.42 can leak stack contents to the configured DNS resolver.
Weakness: CWE-908
Which versions are affected by CVE-2026-0915?
It affects 1 product.
Products include Gnu Glibc.
How do I fix CVE-2026-0915?
Upgrade to a fixed version.
Is CVE-2026-0915 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-0915 exists.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Gnu Glibc
Sources
Also known as AZL-74633, AZL-74817, BELL-CVE-2026-0915, CLSA-2026-1772013351, CLSA-2026-1772114900, DEBIAN-CVE-2026-0915 and 6 more.