Upstream information

CVE-2026-86805 at MITRE

Description

A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges. When expanding $ORIGIN in DT_RPATH for setuid/setgid (AT_SECURE) programs, glibc validates the lexically normalized search path against the trusted directories but then opens the raw, un-normalized path. On systems where the Linux fs.protected_hardlinks sysctl is disabled, a local attacker who hard-links such a program into an attacker-controlled directory and wins a race to replace an intermediate path component with a symbolic link can direct the loader outside the trusted directory, causing it to load an attacker-controlled shared object and execute arbitrary code with the elevated privileges of the program.

Exploitation requires an installed setuid or setgid binary whose DT_RPATH uses $ORIGIN followed by ".." traversal that normalizes into a trusted directory, and the ability to hard-link that binary and win the race by swapping a path component for a symbolic link. Major Linux-based OS distributions ship with fs.protected_hardlinks enabled by default and mitigate the vulnerability.

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having important severity.

CVSS v3 Scores
CVSS detail CNA (3ff69d7a-14f2-4f67-a097-88dee7810d18) SUSE
Base Score 6.3 7
Vector CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local Local
Attack Complexity High High
Privileges Required Low Low
User Interaction Required None
Scope Unchanged Unchanged
Confidentiality Impact High High
Integrity Impact High High
Availability Impact Low High
CVSSv3 Version 3.1 3.1
CVSS v4 Scores
CVSS detail SUSE
Base Score 7.3
Vector CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Attack Vector Local
Attack Complexity Low
Attack Requirements Present
Privileges Required Low
User Interaction None
Vulnerable System Confidentiality Impact High
Vulnerable System Integrity Impact High
Vulnerable System Availability Impact High
Subsequent System Confidentiality Impact None
Subsequent System Integrity Impact None
Subsequent System Availability Impact None
CVSSv4 Version 4.0
SUSE Bugzilla entries: 1282509 [NEW], 1282587 [RESOLVED / INVALID]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container bci/bci-base-fips:16.0-20.13
Container bci/bci-busybox:16.0-22.13
Container bci/bci-init:16.0-13.26
Container bci/bci-micro-fips:16.0-25.14
Container bci/bci-micro:16.0-22.13
Container bci/bci-minimal:16.0-18.14
Container bci/nodejs:24.18.1-base-11.8
Container suse/cosign:3.1.2-3.12
Container suse/pcp:6.2.0-12.30
Container suse/sl-micro/6.2/baremetal-iso-image:latest
Container suse/sl-micro/6.2/base-iso-image:latest
Container suse/sl-micro/6.2/kvm-iso-image:latest
Container suse/sl-micro/6.2/rt-iso-image:latest
  • glibc >= 2.40-160000.7.1
Container bci/bci-base:16.0-23.9
  • glibc >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
Container bci/bci-busybox:15.7-25.35
Container bci/bci-init:latest
Container bci/bci-micro-fips:latest
Container bci/bci-micro:latest
Container bci/bci-minimal:latest
Container bci/dotnet-aspnet:10.0.13-31.2
Container bci/dotnet-aspnet:8.0.32-101.2
Container bci/dotnet-aspnet:9.0.21-60.2
Container bci/dotnet-runtime:10.0.13-31.2
Container bci/dotnet-runtime:8.0.32-101.2
Container bci/dotnet-runtime:9.0.21-60.2
Container bci/dotnet-sdk:10.0.13-31.2
Container bci/dotnet-sdk:8.0.32-101.2
Container bci/dotnet-sdk:9.0.21-61.2
Container bci/node:22
Container bci/openjdk-devel:17
Container bci/openjdk-devel:21
Container bci/openjdk-devel:latest
Container bci/openjdk:17
Container bci/openjdk:21
Container bci/openjdk:latest
Container bci/python:3
Container bci/python:latest
Container private-registry/1.2/harbor-core:1.2.2-1.125
Container private-registry/1.2/harbor-exporter:1.2.2-1.125
Container private-registry/1.2/harbor-jobservice:1.2.2-1.123
Container private-registry/1.2/harbor-portal:1.2.2-1.134
Container private-registry/1.2/harbor-registry:1.2.2-1.125
Container private-registry/1.2/harbor-registryctl:1.2.2-1.125
Container private-registry/1.2/harbor-trivy-adapter:1.2.2-1.134
Container private-registry/harbor-core:1.1.4-2.143
Container private-registry/harbor-exporter:1.1.4-2.144
Container private-registry/harbor-jobservice:1.1.4-2.143
Container private-registry/harbor-portal:1.1.4-2.157
Container private-registry/harbor-registry:1.1.4-2.144
Container private-registry/harbor-registryctl:1.1.4-2.145
Container private-registry/harbor-trivy-adapter:1.1.4-2.158
Container suse/ltss/sle15.6/bci-base-fips:15.6-35.108
Container suse/ltss/sle15.6/sle15:15.6-5.98
Container suse/sle15:latest
Container trento/mcp-server-trento:latest
Container trento/trento-checks:latest
Container trento/trento-wanda:latest
Container trento/trento-web:latest
  • glibc >= 2.38-150600.14.61.1
Container bci/bci-sle15-kernel-module-devel:latest
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
Container bci/bci-sle16-kernel-module-devel:16.0-32.13
Container bci/kiwi:10.2.33-20.12
  • glibc >= 2.40-160000.7.1
  • glibc-devel >= 2.40-160000.7.1
  • glibc-gconv-modules-extra >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
Container bci/gcc:15.3-13.25
  • glibc >= 2.40-160000.7.1
  • glibc-devel >= 2.40-160000.7.1
Container bci/golang:1.25.14-3.73.8
Container bci/golang:1.25.14-openssl-91.9
Container bci/golang:1.26.9-2.74.9
Container bci/golang:latest
Container bci/ruby:2
Container bci/ruby:latest
Container bci/rust:latest
Container bci/spack:latest
  • glibc >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
Container bci/rust:1.97
  • glibc-devel >= 2.38-150600.14.61.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:latest
  • glibc >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
Container suse/ltss/sle15.4/bci-base-fips:15.4.2.105
Container suse/ltss/sle15.4/sle15:15.4-6.49
Container suse/ltss/sle15.5/sle15:15.5-8.74
  • glibc >= 2.31-150300.109.1
Container suse/postgres:16
Container suse/postgres:16.15
Container suse/postgres:17
Container suse/postgres:17.11
Container suse/postgres:latest
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
Container suse/sle-micro-rancher/5.3:latest
Container suse/sle-micro-rancher/5.4:5.4.4.5.197
Container suse/sle-micro/5.5:2.0.4-5.8.125
Container suse/sle-micro/base-5.5:2.0.4-5.8.322
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.620
Container suse/sle-micro/rt-5.5:2.0.4-4.5.738
  • glibc >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
Container suse/sle-micro/5.3/toolbox:16.3-6.11.291
Container suse/sle-micro/5.4/toolbox:16.3-5.19.292
Container suse/sle-micro/5.5/toolbox:16.3-3.12.203
  • glibc >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
Container suse/sles/16.0/toolbox:16.3-1.130
  • glibc >= 2.40-160000.7.1
  • glibc-locale >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
Image SLES-Azure-3P
Image SLES-Azure-Basic
Image SLES-Azure-Standard
Image SLES-BYOS-Azure
Image SLES-BYOS-EC2
Image SLES-EC2
Image SLES-SAP-Azure
Image SLES-SAP-Azure-3P
Image SLES-SAP-BYOS-Azure
Image SLES-SAP-BYOS-EC2
Image SLES-SAP-BYOS-GCE
Image SLES-SAP-GCE
Image SLES-SAP-GCE-3P
  • glibc >= 2.40-160000.7.1
  • glibc-i18ndata >= 2.40-160000.7.1
  • glibc-locale >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
Image SLES15-SP6-HPC-BYOS
Image SLES15-SP6-HPC-BYOS-Azure
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
Image SLES15-SP6-SAP-BYOS
Image SLES15-SP6-SAP-BYOS-GCE
Image SLES15-SP7-SAP-Azure
Image SLES15-SP7-SAP-Azure-3P
Image SLES15-SP7-SAP-BYOS-Azure
Image SLES15-SP7-SAP-BYOS-EC2
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • libnsl1 >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
Image SLES15-SP6
Image SLES15-SP6-Azure-3P
Image SLES15-SP6-Azure-Standard
Image SLES15-SP6-BYOS
Image SLES15-SP6-BYOS-Azure
Image SLES15-SP6-BYOS-GCE
Image SLES15-SP6-GCE
Image SLES15-SP7-Azure-3P
Image SLES15-SP7-Azure-Basic
Image SLES15-SP7-Azure-Standard
Image SLES15-SP7-BYOS-Azure
Image SLES15-SP7-BYOS-EC2
Image SLES15-SP7-EC2
  • glibc >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
Image SLES15-SP7-EC2-ECS-HVM
  • glibc >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
SUSE Linux Enterprise Desktop 15 SP7
SUSE Linux Enterprise Server 15 SP7
SUSE Linux Enterprise Server for SAP Applications 15 SP7
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-devel-32bit >= 2.38-150600.14.61.1
  • glibc-devel-static >= 2.38-150600.14.61.1
  • glibc-extra >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-info >= 2.38-150600.14.61.1
  • glibc-lang >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • glibc-locale-base-32bit >= 2.38-150600.14.61.1
  • glibc-profile >= 2.38-150600.14.61.1
  • glibc-utils >= 2.38-150600.14.61.1
  • libnsl1 >= 2.38-150600.14.61.1
  • libnsl1-32bit >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2026-4656 (aarch64,ppc64le,s390x,x86_64)
SUSE-SLE-Module-Development-Tools-15-SP7-2026-4656 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-4591 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-4591 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-4591 (aarch64,x86_64)
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-4591 (aarch64,x86_64)
SUSE Linux Enterprise Micro 5.3
  • glibc >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Micro-5.3-2026-4591 (aarch64,s390x,x86_64)
SUSE Linux Enterprise Micro 5.4
  • glibc >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Micro-5.4-2026-4591 (aarch64,s390x,x86_64)
SUSE Linux Enterprise Micro 5.5
  • glibc >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Micro-5.5-2026-4591 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Module for Basesystem 15 SP7
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-extra >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-info >= 2.38-150600.14.61.1
  • glibc-lang >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • glibc-locale-base-32bit >= 2.38-150600.14.61.1
  • glibc-profile >= 2.38-150600.14.61.1
  • libnsl1 >= 2.38-150600.14.61.1
  • libnsl1-32bit >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP7-2026-4656 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Module for Development Tools 15 SP7
  • glibc-devel-32bit >= 2.38-150600.14.61.1
  • glibc-devel-static >= 2.38-150600.14.61.1
  • glibc-utils >= 2.38-150600.14.61.1
 Patchnames:
SUSE-SLE-Module-Development-Tools-15-SP7-2026-4656 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE
  • glibc >= 2.11.3-17.110.58.1
  • glibc-32bit >= 2.11.3-17.110.58.1
  • glibc-devel >= 2.11.3-17.110.58.1
  • glibc-devel-32bit >= 2.11.3-17.110.58.1
  • glibc-html >= 2.11.3-17.110.58.1
  • glibc-i18ndata >= 2.11.3-17.110.58.1
  • glibc-info >= 2.11.3-17.110.58.1
  • glibc-locale >= 2.11.3-17.110.58.1
  • glibc-locale-32bit >= 2.11.3-17.110.58.1
  • glibc-profile >= 2.11.3-17.110.58.1
  • glibc-profile-32bit >= 2.11.3-17.110.58.1
  • nscd >= 2.11.3-17.110.58.1
 Patchnames:
SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-4669 (x86_64)
SUSE Linux Enterprise Server 12 SP5-LTSS
  • glibc >= 2.22-114.55.1
  • glibc-32bit >= 2.22-114.55.1
  • glibc-devel >= 2.22-114.55.1
  • glibc-devel-32bit >= 2.22-114.55.1
  • glibc-devel-static >= 2.22-114.55.1
  • glibc-html >= 2.22-114.55.1
  • glibc-i18ndata >= 2.22-114.55.1
  • glibc-info >= 2.22-114.55.1
  • glibc-locale >= 2.22-114.55.1
  • glibc-locale-32bit >= 2.22-114.55.1
  • glibc-profile >= 2.22-114.55.1
  • glibc-profile-32bit >= 2.22-114.55.1
  • nscd >= 2.22-114.55.1
 Patchnames:
SUSE-SLE-SERVER-12-SP5-LTSS-2026-4654 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP4-LTSS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-4591 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP5-LTSS
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-4591 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 15 SP6-LTSS
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-devel-32bit >= 2.38-150600.14.61.1
  • glibc-devel-static >= 2.38-150600.14.61.1
  • glibc-extra >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-info >= 2.38-150600.14.61.1
  • glibc-lang >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • glibc-locale-base-32bit >= 2.38-150600.14.61.1
  • glibc-profile >= 2.38-150600.14.61.1
  • glibc-utils >= 2.38-150600.14.61.1
  • libnsl1 >= 2.38-150600.14.61.1
  • libnsl1-32bit >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
 Patchnames:
SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-4656 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server 16.0
SUSE Linux Enterprise Server for SAP applications 16.0
  • glibc >= 2.40-160000.7.1
  • glibc-devel >= 2.40-160000.7.1
  • glibc-devel-static >= 2.40-160000.7.1
  • glibc-extra >= 2.40-160000.7.1
  • glibc-gconv-modules-extra >= 2.40-160000.7.1
  • glibc-html >= 2.40-160000.7.1
  • glibc-i18ndata >= 2.40-160000.7.1
  • glibc-info >= 2.40-160000.7.1
  • glibc-lang >= 2.40-160000.7.1
  • glibc-locale >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
  • glibc-profile >= 2.40-160000.7.1
  • glibc-utils >= 2.40-160000.7.1
 Patchnames:
SUSE-SLES-16.0-1769 (aarch64,ppc64le,s390x,x86_64)
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
  • glibc >= 2.22-114.55.1
  • glibc-32bit >= 2.22-114.55.1
  • glibc-devel >= 2.22-114.55.1
  • glibc-devel-32bit >= 2.22-114.55.1
  • glibc-devel-static >= 2.22-114.55.1
  • glibc-html >= 2.22-114.55.1
  • glibc-i18ndata >= 2.22-114.55.1
  • glibc-info >= 2.22-114.55.1
  • glibc-locale >= 2.22-114.55.1
  • glibc-locale-32bit >= 2.22-114.55.1
  • glibc-profile >= 2.22-114.55.1
  • glibc-profile-32bit >= 2.22-114.55.1
  • nscd >= 2.22-114.55.1
 Patchnames:
SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-4654 (x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP4
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-SLES_SAP-15-SP4-2026-4591 (ppc64le,x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP5
  • glibc >= 2.31-150300.109.1
  • glibc-32bit >= 2.31-150300.109.1
  • glibc-devel >= 2.31-150300.109.1
  • glibc-devel-32bit >= 2.31-150300.109.1
  • glibc-devel-static >= 2.31-150300.109.1
  • glibc-extra >= 2.31-150300.109.1
  • glibc-i18ndata >= 2.31-150300.109.1
  • glibc-info >= 2.31-150300.109.1
  • glibc-lang >= 2.31-150300.109.1
  • glibc-locale >= 2.31-150300.109.1
  • glibc-locale-base >= 2.31-150300.109.1
  • glibc-locale-base-32bit >= 2.31-150300.109.1
  • glibc-profile >= 2.31-150300.109.1
  • glibc-utils >= 2.31-150300.109.1
  • nscd >= 2.31-150300.109.1
 Patchnames:
SUSE-SLE-Product-SLES_SAP-15-SP5-2026-4591 (ppc64le,x86_64)
SUSE Linux Enterprise Server for SAP Applications 15 SP6
  • glibc >= 2.38-150600.14.61.1
  • glibc-32bit >= 2.38-150600.14.61.1
  • glibc-devel >= 2.38-150600.14.61.1
  • glibc-devel-32bit >= 2.38-150600.14.61.1
  • glibc-devel-static >= 2.38-150600.14.61.1
  • glibc-extra >= 2.38-150600.14.61.1
  • glibc-i18ndata >= 2.38-150600.14.61.1
  • glibc-info >= 2.38-150600.14.61.1
  • glibc-lang >= 2.38-150600.14.61.1
  • glibc-locale >= 2.38-150600.14.61.1
  • glibc-locale-base >= 2.38-150600.14.61.1
  • glibc-locale-base-32bit >= 2.38-150600.14.61.1
  • glibc-profile >= 2.38-150600.14.61.1
  • glibc-utils >= 2.38-150600.14.61.1
  • libnsl1 >= 2.38-150600.14.61.1
  • libnsl1-32bit >= 2.38-150600.14.61.1
  • nscd >= 2.38-150600.14.61.1
 Patchnames:
SUSE-SLE-Product-SLES_SAP-15-SP6-2026-4656 (ppc64le,x86_64)
SUSE Linux Micro 6.2
  • glibc >= 2.40-160000.7.1
  • glibc-devel >= 2.40-160000.7.1
  • glibc-gconv-modules-extra >= 2.40-160000.7.1
  • glibc-locale >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
 Patchnames:
SUSE-SL-Micro-6.2-1769 (aarch64,ppc64le,s390x,x86_64)
openSUSE Leap 16.0
  • cross-aarch64-glibc-devel >= 2.40-160000.7.1
  • cross-ppc64le-glibc-devel >= 2.40-160000.7.1
  • cross-riscv64-glibc-devel >= 2.40-160000.7.1
  • cross-s390x-glibc-devel >= 2.40-160000.7.1
  • glibc >= 2.40-160000.7.1
  • glibc-devel >= 2.40-160000.7.1
  • glibc-devel-static >= 2.40-160000.7.1
  • glibc-extra >= 2.40-160000.7.1
  • glibc-gconv-modules-extra >= 2.40-160000.7.1
  • glibc-html >= 2.40-160000.7.1
  • glibc-i18ndata >= 2.40-160000.7.1
  • glibc-info >= 2.40-160000.7.1
  • glibc-lang >= 2.40-160000.7.1
  • glibc-locale >= 2.40-160000.7.1
  • glibc-locale-base >= 2.40-160000.7.1
  • glibc-profile >= 2.40-160000.7.1
  • glibc-utils >= 2.40-160000.7.1
 Patchnames:
openSUSE-Leap-16.0-1769
openSUSE Tumbleweed
  • glibc >= 2.44-3.1
  • glibc-devel >= 2.44-3.1
  • glibc-devel-static >= 2.44-3.1
  • glibc-extra >= 2.44-3.1
  • glibc-gconv-modules-extra >= 2.44-3.1
  • glibc-html >= 2.44-3.1
  • glibc-i18ndata >= 2.44-3.1
  • glibc-info >= 2.44-3.1
  • glibc-lang >= 2.44-3.1
  • glibc-locale >= 2.44-3.1
  • glibc-locale-base >= 2.44-3.1
  • glibc-profile >= 2.44-3.1
 Patchnames:
openSUSE-Tumbleweed-2026-12072

List of packages in QA

Product(s) Package(s)
SUSE Linux Micro Extras 6.2
  • glibc-gconv-modules-extra >= 2.40-160000.7.1

First public cloud image revisions this CVE is fixed in:

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s) Source package State
Products under general support and receiving all security fixes.
SLES15-SP5-CHOST-BYOS-SAP-CCloud glibc In progress
SLES15-SP6-CHOST-BYOS glibc In progress
SLES15-SP6-CHOST-BYOS-Aliyun glibc In progress
SLES15-SP6-CHOST-BYOS-Azure glibc In progress
SLES15-SP6-CHOST-BYOS-EC2 glibc In progress
SLES15-SP6-CHOST-BYOS-GCE glibc In progress
SLES15-SP6-CHOST-BYOS-GDC glibc In progress
SLES15-SP6-CHOST-BYOS-SAP-CCloud glibc In progress
SLES15-SP7-CHOST-BYOS-Aliyun glibc In progress
SLES15-SP7-CHOST-BYOS-Azure glibc In progress
SLES15-SP7-CHOST-BYOS-EC2 glibc In progress
SLES15-SP7-CHOST-BYOS-GCE glibc In progress
SLES15-SP7-CHOST-BYOS-GDC glibc In progress
SLES15-SP7-CHOST-BYOS-SAP-CCloud glibc In progress
SUSE Linux Enterprise Desktop 15 SP7 glibc Released
SUSE Linux Enterprise Micro 5.3 glibc Released
SUSE Linux Enterprise Micro 5.4 glibc Released
SUSE Linux Enterprise Micro 5.5 glibc Released
SUSE Linux Enterprise Micro for Rancher 5.3 glibc Released
SUSE Linux Enterprise Micro for Rancher 5.4 glibc Released
SUSE Linux Enterprise Module for Basesystem 15 SP7 glibc Released
SUSE Linux Enterprise Module for Development Tools 15 SP7 glibc Released
SUSE Linux Enterprise Server 15 SP7 glibc Released
SUSE Linux Enterprise Server 16.0 glibc Released
SUSE Linux Enterprise Server 16.1 glibc Affected
SUSE Linux Enterprise Server 16.2 glibc Affected
SUSE Linux Enterprise Server for NVIDIA 16.1 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP7 glibc Released
SUSE Linux Enterprise Server for SAP applications 16.0 glibc Released
SUSE Linux Enterprise Server for SAP applications 16.1 glibc Affected
SUSE Linux Enterprise Server for SAP applications 16.2 glibc Affected
SUSE Linux Micro 6.0 glibc In progress
SUSE Linux Micro 6.1 glibc Affected
SUSE Linux Micro 6.2 glibc Released
SUSE Linux Micro Extras 6.2 glibc In progress
openSUSE Leap 16.0 glibc Released
openSUSE Leap 16.1 glibc Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SLES15-SP3-CHOST-BYOS-Aliyun glibc In progress
SLES15-SP3-CHOST-BYOS-Azure glibc In progress
SLES15-SP3-CHOST-BYOS-EC2 glibc In progress
SLES15-SP3-CHOST-BYOS-GCE glibc In progress
SLES15-SP3-CHOST-BYOS-SAP-CCloud glibc In progress
SLES15-SP4-CHOST-BYOS glibc In progress
SLES15-SP4-CHOST-BYOS-Aliyun glibc In progress
SLES15-SP4-CHOST-BYOS-Azure glibc In progress
SLES15-SP4-CHOST-BYOS-EC2 glibc In progress
SLES15-SP4-CHOST-BYOS-GCE glibc In progress
SLES15-SP4-CHOST-BYOS-SAP-CCloud glibc In progress
SLES15-SP5-CHOST-BYOS-Aliyun glibc In progress
SLES15-SP5-CHOST-BYOS-Azure glibc In progress
SLES15-SP5-CHOST-BYOS-EC2 glibc In progress
SLES15-SP5-CHOST-BYOS-GCE glibc In progress
SLES15-SP5-CHOST-BYOS-GDC glibc In progress
SUSE Linux Enterprise High Performance Computing 12 SP5 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS glibc Released
SUSE Linux Enterprise High Performance Computing 15 SP5 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS glibc Released
SUSE Linux Enterprise Module for Basesystem 15 SP4 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 SP5 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 SP6 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP4 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP5 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP6 glibc Affected
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE glibc Released
SUSE Linux Enterprise Server 12 SP5 glibc Affected
SUSE Linux Enterprise Server 12 SP5-LTSS glibc Released
SUSE Linux Enterprise Server 15 SP4 glibc Affected
SUSE Linux Enterprise Server 15 SP4-LTSS glibc Released
SUSE Linux Enterprise Server 15 SP5 glibc Affected
SUSE Linux Enterprise Server 15 SP5-LTSS glibc Released
SUSE Linux Enterprise Server 15 SP6 glibc Affected
SUSE Linux Enterprise Server 15 SP6-LTSS glibc Released
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 glibc Released
SUSE Linux Enterprise Server for SAP Applications 12 SP5 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP4 glibc Released
SUSE Linux Enterprise Server for SAP Applications 15 SP5 glibc Released
SUSE Linux Enterprise Server for SAP Applications 15 SP6 glibc Released
Products past their end of life and not receiving proactive updates anymore.
SUSE CaaS Platform 4.0 glibc Affected
SUSE Enterprise Storage 6 glibc Affected
SUSE Enterprise Storage 7 glibc Affected
SUSE Enterprise Storage 7.1 glibc Affected
SUSE Linux Enterprise Desktop 11 SP3 glibc Affected
SUSE Linux Enterprise Desktop 11 SP4 glibc Affected
SUSE Linux Enterprise Desktop 12 SP4 glibc Affected
SUSE Linux Enterprise Desktop 15 glibc Affected
SUSE Linux Enterprise Desktop 15 SP1 glibc Affected
SUSE Linux Enterprise Desktop 15 SP2 glibc Affected
SUSE Linux Enterprise Desktop 15 SP3 glibc Affected
SUSE Linux Enterprise Desktop 15 SP4 glibc Affected
SUSE Linux Enterprise Desktop 15 SP5 glibc Affected
SUSE Linux Enterprise Desktop 15 SP6 glibc Affected
SUSE Linux Enterprise High Performance Computing 12 SP4 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP1 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP2 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP3 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP4 glibc Affected
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS glibc Released
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS glibc Released
SUSE Linux Enterprise High Performance Computing 15-ESPOS glibc Affected
SUSE Linux Enterprise High Performance Computing 15-LTSS glibc Affected
SUSE Linux Enterprise Micro 5.0 glibc Affected
SUSE Linux Enterprise Micro 5.1 glibc Affected
SUSE Linux Enterprise Micro 5.2 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 SP1 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 SP2 glibc Affected
SUSE Linux Enterprise Module for Basesystem 15 SP3 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP1 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP2 glibc Affected
SUSE Linux Enterprise Module for Development Tools 15 SP3 glibc Affected
SUSE Linux Enterprise Module for Legacy 15 SP3 glibc Affected
SUSE Linux Enterprise Point of Sale 11 SP3 glibc Affected
SUSE Linux Enterprise Real Time 15 SP2 glibc Affected
SUSE Linux Enterprise Real Time 15 SP3 glibc Affected
SUSE Linux Enterprise Real Time 15 SP4 glibc Affected
SUSE Linux Enterprise Server 11 SP3 glibc Affected
SUSE Linux Enterprise Server 11 SP3-LTSS glibc Affected
SUSE Linux Enterprise Server 11 SP4 glibc Affected
SUSE Linux Enterprise Server 11 SP4-LTSS glibc Affected
SUSE Linux Enterprise Server 12 SP4 glibc Affected
SUSE Linux Enterprise Server 12 SP4-ESPOS glibc Affected
SUSE Linux Enterprise Server 12 SP4-LTSS glibc Affected
SUSE Linux Enterprise Server 15 glibc Affected
SUSE Linux Enterprise Server 15 SP1 glibc Affected
SUSE Linux Enterprise Server 15 SP1-BCL glibc Affected
SUSE Linux Enterprise Server 15 SP1-LTSS glibc Affected
SUSE Linux Enterprise Server 15 SP2 glibc Affected
SUSE Linux Enterprise Server 15 SP2-BCL glibc Affected
SUSE Linux Enterprise Server 15 SP2-LTSS glibc Affected
SUSE Linux Enterprise Server 15 SP3 glibc Affected
SUSE Linux Enterprise Server 15 SP3-BCL glibc Affected
SUSE Linux Enterprise Server 15 SP3-LTSS glibc Affected
SUSE Linux Enterprise Server 15-LTSS glibc Affected
SUSE Linux Enterprise Server for SAP Applications 11 SP3 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 11 SP4 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP4 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP1 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP2 glibc Affected
SUSE Linux Enterprise Server for SAP Applications 15 SP3 glibc Affected
SUSE Linux Enterprise Software Development Kit 11 SP3 glibc Affected
SUSE Linux Enterprise Software Development Kit 11 SP4 glibc Affected
SUSE Linux Enterprise Software Development Kit 12 SP4 glibc Affected
SUSE Linux Enterprise Software Development Kit 12 SP5 glibc Affected
SUSE Manager Proxy 4.0 glibc Affected
SUSE Manager Proxy 4.1 glibc Affected
SUSE Manager Proxy 4.2 glibc Affected
SUSE Manager Proxy 4.3 glibc Affected
SUSE Manager Proxy LTS 4.3 glibc Affected
SUSE Manager Retail Branch Server 4.0 glibc Affected
SUSE Manager Retail Branch Server 4.1 glibc Affected
SUSE Manager Retail Branch Server 4.2 glibc Affected
SUSE Manager Retail Branch Server 4.3 glibc Affected
SUSE Manager Retail Branch Server LTS 4.3 glibc Affected
SUSE Manager Server 4.0 glibc Affected
SUSE Manager Server 4.1 glibc Affected
SUSE Manager Server 4.2 glibc Affected
SUSE Manager Server 4.3 glibc Affected
SUSE Manager Server LTS 4.3 glibc Affected
SUSE OpenStack Cloud 9 glibc Affected
SUSE OpenStack Cloud Crowbar 9 glibc Affected
openSUSE Leap 15.3 glibc Released
openSUSE Leap 15.4 glibc Affected
openSUSE Leap 15.5 glibc Affected
openSUSE Leap 15.6 glibc Released
openSUSE Leap Micro 5.2 glibc Affected
openSUSE Leap Micro 5.3 glibc Affected
openSUSE Leap Micro 5.4 glibc Affected
openSUSE Leap Micro 5.5 glibc Affected
Products at an unknown state of their lifecycle.
SLES-CHOST-BYOS-Aliyun glibc In progress
SLES-CHOST-BYOS-Azure glibc In progress
SLES-CHOST-BYOS-EC2 glibc In progress
SLES-CHOST-BYOS-GCE glibc In progress
SLES-CHOST-BYOS-GDC glibc In progress
SLES-CHOST-BYOS-SAP-CCloud glibc In progress
SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure glibc Affected
SUSE-Multi-Linux-Manager-Proxy-BYOS-GCE glibc Affected
Container Status
bci/bci-base-fips:16.1
bci/bci-base:16.1
bci/bci-busybox:16.1
bci/bci-init:16.1
bci/bci-micro-fips:16.1
bci/bci-micro:16.1
bci/bci-minimal:16.1
bci/bci-sle16-kernel-module-devel:16.1
bci/gcc:15
bci/gcc:16
bci/golang:1.26
bci/golang:1.27
bci/kiwi:10
bci/node:24
bci/openjdk
bci/openjdk-devel
bci/openjdk-devel:17
bci/openjdk-devel:21
bci/openjdk:17
bci/openjdk:21
bci/ruby:3.4-base
bci/rust:1.97
bci/rust:1.98
ses/6/cephcsi/cephcsi
ses/6/rook/ceph
ses/7/ceph/ceph
ses/7/ceph/grafana
ses/7/ceph/prometheus-alertmanager
ses/7/ceph/prometheus-node-exporter
ses/7/ceph/prometheus-server
ses/7/cephcsi/cephcsi
ses/7/cephcsi/csi-attacher:v2.1.0
ses/7/cephcsi/csi-attacher:v3.3.0
ses/7/cephcsi/csi-livenessprobe:v1.1.0
ses/7/cephcsi/csi-node-driver-registrar:v1.2.0
ses/7/cephcsi/csi-node-driver-registrar:v2.3.0
ses/7/cephcsi/csi-provisioner:v1.6.0
ses/7/cephcsi/csi-provisioner:v3.0.0
ses/7/cephcsi/csi-resizer:v0.4.0
ses/7/cephcsi/csi-resizer:v1.3.0
ses/7/cephcsi/csi-snapshotter:v2.1.0
ses/7/cephcsi/csi-snapshotter:v2.1.1
ses/7/cephcsi/csi-snapshotter:v4.2.0
ses/7/prometheus-webhook-snmp
ses/7/rook/ceph
suse/cosign:3
suse/pcp:6
suse/sl-micro/6.1/baremetal-iso-image
suse/sl-micro/6.1/baremetal-os-container
suse/sl-micro/6.1/base-iso-image
suse/sl-micro/6.1/base-os-container
suse/sl-micro/6.1/kvm-iso-image
suse/sl-micro/6.1/kvm-os-container
suse/sl-micro/6.1/rt-iso-image
suse/sl-micro/6.1/rt-os-container
suse/sle-micro/5.0/toolbox
suse/sle15:15.0
suse/sle15:15.1
suse/sle15:15.2
suse/sles/15.2/virt-api:0.38.1
suse/sles/15.2/virt-controller:0.38.1
suse/sles/15.2/virt-handler:0.38.1
suse/sles/15.2/virt-launcher:0.38.1
suse/sles/15.2/virt-operator:0.38.1
suse/sles/16.1/containerdisk-minimal
suse/sles/16.1/distrobox		 glibcAffected
bci/bci-base-fips:16.0
bci/bci-base:16.0
bci/bci-busybox
bci/bci-busybox:16.0
bci/bci-init
bci/bci-init:16.0
bci/bci-micro
bci/bci-micro-fips
bci/bci-micro-fips:16.0
bci/bci-micro:16.0
bci/bci-minimal
bci/bci-minimal:16.0
bci/bci-sle16-kernel-module-devel:16.0
bci/dotnet-aspnet
bci/dotnet-aspnet:8.0
bci/dotnet-aspnet:9.0
bci/dotnet-runtime
bci/dotnet-runtime:8.0
bci/dotnet-runtime:9.0
bci/dotnet-sdk
bci/dotnet-sdk:8.0
bci/dotnet-sdk:9.0
bci/golang
bci/golang:1.25
bci/golang:1.25-openssl
bci/node:22
bci/nodejs
bci/python
bci/python:3
bci/ruby
bci/ruby:2
bci/rust
bci/spack
private-registry/1.2/harbor-core
private-registry/1.2/harbor-exporter
private-registry/1.2/harbor-jobservice
private-registry/1.2/harbor-portal
private-registry/1.2/harbor-registry
private-registry/1.2/harbor-registryctl
private-registry/1.2/harbor-trivy-adapter
private-registry/harbor-core
private-registry/harbor-exporter
private-registry/harbor-jobservice
private-registry/harbor-portal
private-registry/harbor-registry
private-registry/harbor-registryctl
private-registry/harbor-trivy-adapter
suse/cosign
suse/hpc/warewulf4-x86_64/sle-hpc-node
suse/ltss/sle15.4/bci-base-fips
suse/ltss/sle15.4/sle15
suse/ltss/sle15.5/sle15
suse/ltss/sle15.6/bci-base-fips
suse/ltss/sle15.6/sle15
suse/pcp
suse/sl-micro/6.2/baremetal-iso-image
suse/sl-micro/6.2/base-iso-image
suse/sl-micro/6.2/kvm-iso-image
suse/sl-micro/6.2/rt-iso-image
suse/sle-micro-rancher/5.3
suse/sle-micro-rancher/5.4
suse/sle-micro/5.3/toolbox
suse/sle-micro/5.4/toolbox
suse/sle-micro/5.5
suse/sle-micro/5.5/toolbox
suse/sle-micro/base-5.5
suse/sle-micro/kvm-5.5
suse/sle-micro/rt-5.5
suse/sle15
suse/sles/16.0/toolbox
trento/mcp-server-trento
trento/trento-checks
trento/trento-wanda
trento/trento-web		 glibcReleased
bci/bci-base-fips
bci/bci-base-fips:15.5
bci/bci-base-fips:15.6
bci/bci-busybox:15.4
bci/bci-busybox:15.5
bci/bci-busybox:15.6
bci/bci-init:15.3
bci/bci-init:15.4
bci/bci-init:15.5
bci/bci-init:15.6
bci/bci-micro-fips:15.6
bci/bci-micro:15.3
bci/bci-micro:15.4
bci/bci-micro:15.5
bci/bci-micro:15.6
bci/bci-minimal:15.3
bci/bci-minimal:15.4
bci/bci-minimal:15.5
bci/bci-minimal:15.6
bci/bci-sle15-kernel-module-devel
bci/bci-sle15-kernel-module-devel:15.5
bci/bci-sle15-kernel-module-devel:15.6
bci/dotnet-aspnet:3.1
bci/dotnet-aspnet:5.0
bci/dotnet-aspnet:6.0
bci/dotnet-aspnet:7.0
bci/dotnet-runtime:3.1
bci/dotnet-runtime:5.0
bci/dotnet-runtime:6.0
bci/dotnet-runtime:7.0
bci/dotnet-sdk:3.1
bci/dotnet-sdk:5.0
bci/dotnet-sdk:6.0
bci/dotnet-sdk:7.0
bci/gcc
bci/golang:1.16
bci/golang:1.17
bci/golang:1.18
bci/golang:1.19
bci/golang:1.20-openssl
bci/golang:1.21
bci/golang:1.23
bci/golang:1.23-openssl
bci/kiwi
bci/node:12
bci/node:14
bci/node:16
bci/node:18
bci/node:20
bci/openjdk-devel:11
bci/openjdk:11
bci/php
bci/php-apache
bci/php-apache:8
bci/php-fpm
bci/php-fpm:8
bci/php:8
bci/rust:1.56
bci/rust:1.59
bci/rust:1.60
bci/rust:1.61
bci/rust:1.62
bci/rust:1.63
bci/rust:1.64
bci/rust:1.65
bci/rust:1.66
bci/rust:1.67
bci/rust:1.68
bci/rust:1.77
bci/rust:1.86
bci/spack:0.23
containers/apache-pulsar:3.3
containers/apache-tomcat:10.1-openjdk11
containers/apache-tomcat:10.1-openjdk17
containers/apache-tomcat:10.1-openjdk21
containers/apache-tomcat:9-openjdk11
containers/apache-tomcat:9-openjdk17
containers/apache-tomcat:9-openjdk21
containers/apache-tomcat:9-openjdk8
containers/lmcache-lmstack-router:0
containers/lmcache-vllm-openai:0
containers/milvus:2.4
containers/ollama:0
containers/open-webui-mcpo:0
containers/open-webui-pipelines:0
containers/open-webui:0
containers/python:3.11
containers/python:3.9
containers/pytorch:2-nvidia
containers/pytorch:2.5.0
containers/suse-ai-observability-extension-runtime:1
containers/suse-ai-observability-extension-setup:1
containers/vllm-openai:0
kiwi-templates-Minimal
kiwi-templates-Minimal-Cloud-sap
kiwi-templates-Minimal-MS-HyperV-sap
kiwi-templates-Minimal-VMware-sap
kiwi-templates-Minimal-kvm-and-xen-sap
private-registry/harbor-db
private-registry/harbor-nginx
private-registry/harbor-valkey
rancher/elemental-builder-image/5.3
rancher/elemental-channel
rancher/elemental-channel/sl-micro:6.2-baremetal
rancher/elemental-channel/sl-micro:6.2-base
rancher/elemental-channel/sl-micro:6.2-kvm
rancher/elemental-channel/sl-micro:6.2-rt
rancher/elemental-operator
rancher/elemental-operator/5.3
rancher/elemental-rt-channel
rancher/elemental-teal-iso/5.3
rancher/elemental-teal-iso/5.4
rancher/elemental-teal-rt/5.3
rancher/elemental-teal-rt/5.4
rancher/elemental-teal/5.3
rancher/elemental-teal/5.4
rancher/seedimage-builder
rancher/seedimage-builder/5.3
ses/7.1/ceph/grafana
ses/7.1/ceph/haproxy
ses/7.1/ceph/keepalived
ses/7.1/ceph/prometheus-alertmanager
ses/7.1/ceph/prometheus-node-exporter
ses/7.1/ceph/prometheus-server
ses/7.1/ceph/prometheus-snmp_notifier
ses/7.1/cephcsi/cephcsi
ses/7.1/cephcsi/csi-attacher:v4.1.0
ses/7.1/cephcsi/csi-node-driver-registrar:v2.7.0
ses/7.1/cephcsi/csi-provisioner:v3.4.0
ses/7.1/cephcsi/csi-resizer:v1.7.0
ses/7.1/cephcsi/csi-snapshotter:v6.2.1
ses/7.1/rook/ceph
suse/389-ds
suse/bind
suse/bind:9
suse/git
suse/git:2
suse/helm
suse/kiosk/firefox-esr:esr
suse/kiosk/pulseaudio:17
suse/kiosk/xorg:21
suse/kubectl
suse/kubectl:1.31
suse/ltss/sle15.3/bci-base-fips
suse/ltss/sle15.3/sle15
suse/manager/4.3/proxy-httpd
suse/manager/4.3/proxy-salt-broker
suse/manager/4.3/proxy-squid
suse/manager/4.3/proxy-ssh
suse/manager/4.3/proxy-tftpd
suse/manager/5.0/x86_64/proxy-httpd
suse/manager/5.0/x86_64/proxy-salt-broker
suse/manager/5.0/x86_64/proxy-squid
suse/manager/5.0/x86_64/proxy-ssh
suse/manager/5.0/x86_64/proxy-tftpd
suse/manager/5.0/x86_64/server
suse/manager/5.0/x86_64/server-attestation
suse/manager/5.0/x86_64/server-hub-xmlrpc-api
suse/manager/5.0/x86_64/server-migration-14-16
suse/mariadb-client:10.11
suse/mariadb:10.11
suse/multi-linux-manager/5.1/x86_64/proxy-httpd
suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker
suse/multi-linux-manager/5.1/x86_64/proxy-squid
suse/multi-linux-manager/5.1/x86_64/proxy-ssh
suse/multi-linux-manager/5.1/x86_64/proxy-tftpd
suse/multi-linux-manager/5.1/x86_64/server
suse/multi-linux-manager/5.1/x86_64/server-attestation
suse/multi-linux-manager/5.1/x86_64/server-hub-xmlrpc-api
suse/multi-linux-manager/5.1/x86_64/server-migration-14-16
suse/multi-linux-manager/5.1/x86_64/server-saline
suse/multi-linux-manager/5.2/x86_64/monitoring-alertmanager
suse/multi-linux-manager/5.2/x86_64/monitoring-blackbox_exporter
suse/multi-linux-manager/5.2/x86_64/monitoring-grafana
suse/multi-linux-manager/5.2/x86_64/monitoring-prometheus
suse/multi-linux-manager/5.2/x86_64/proxy-httpd
suse/multi-linux-manager/5.2/x86_64/proxy-salt-broker
suse/multi-linux-manager/5.2/x86_64/proxy-squid
suse/multi-linux-manager/5.2/x86_64/proxy-ssh
suse/multi-linux-manager/5.2/x86_64/proxy-tftpd
suse/multi-linux-manager/5.2/x86_64/server
suse/multi-linux-manager/5.2/x86_64/server-attestation
suse/multi-linux-manager/5.2/x86_64/server-database-migration
suse/multi-linux-manager/5.2/x86_64/server-hub-xmlrpc-api
suse/multi-linux-manager/5.2/x86_64/server-saline
suse/nginx
suse/nginx:1.21
suse/pcp:5
suse/postgres
suse/postgres:10
suse/postgres:12
suse/postgres:13
suse/postgres:14
suse/postgres:15
suse/postgres:16
suse/registry
suse/registry:2.8
suse/rmt-mariadb
suse/rmt-mariadb-client
suse/rmt-nginx
suse/rmt-server
suse/sle-micro-rancher/5.2
suse/sle-micro/5.1/toolbox
suse/sle-micro/5.2/toolbox
suse/sle15:15.3
suse/sle15:15.4
suse/sle15:15.5
suse/sle15:15.6
suse/sles-16.1-kubevirt-minimal
suse/sles/15.3/cdi-apiserver:1.37.1
suse/sles/15.3/cdi-cloner:1.37.1
suse/sles/15.3/cdi-controller:1.37.1
suse/sles/15.3/cdi-importer:1.37.1
suse/sles/15.3/cdi-operator:1.37.1
suse/sles/15.3/cdi-uploadproxy:1.37.1
suse/sles/15.3/cdi-uploadserver:1.37.1
suse/sles/15.3/libguestfs-tools:0.45.0
suse/sles/15.3/virt-api:0.45.0
suse/sles/15.3/virt-controller:0.45.0
suse/sles/15.3/virt-handler:0.45.0
suse/sles/15.3/virt-launcher:0.45.0
suse/sles/15.3/virt-operator:0.45.0
suse/sles/15.4/cdi-apiserver:1.43.0
suse/sles/15.4/cdi-cloner:1.43.0
suse/sles/15.4/cdi-controller:1.43.0
suse/sles/15.4/cdi-importer:1.43.0
suse/sles/15.4/cdi-operator:1.43.0
suse/sles/15.4/cdi-uploadproxy:1.43.0
suse/sles/15.4/cdi-uploadserver:1.43.0
suse/sles/15.4/libguestfs-tools:0.49.0
suse/sles/15.4/virt-api:0.49.0
suse/sles/15.4/virt-controller:0.49.0
suse/sles/15.4/virt-handler:0.49.0
suse/sles/15.4/virt-launcher:0.49.0
suse/sles/15.4/virt-operator:0.49.0
suse/sles/15.5/cdi-apiserver:1.55.0
suse/sles/15.5/cdi-cloner:1.55.0
suse/sles/15.5/cdi-controller:1.55.0
suse/sles/15.5/cdi-importer:1.55.0
suse/sles/15.5/cdi-operator:1.55.0
suse/sles/15.5/cdi-uploadproxy:1.55.0
suse/sles/15.5/cdi-uploadserver:1.55.0
suse/sles/15.5/libguestfs-tools:0.58.0
suse/sles/15.5/virt-api:0.58.0
suse/sles/15.5/virt-controller:0.58.0
suse/sles/15.5/virt-exportproxy:0.58.0
suse/sles/15.5/virt-exportserver:0.58.0
suse/sles/15.5/virt-handler:0.58.0
suse/sles/15.5/virt-launcher:0.58.0
suse/sles/15.5/virt-operator:0.58.0
suse/sles/15.6/cdi-apiserver:1.58.0
suse/sles/15.6/cdi-cloner:1.58.0
suse/sles/15.6/cdi-controller:1.58.0
suse/sles/15.6/cdi-importer:1.58.0
suse/sles/15.6/cdi-operator:1.58.0
suse/sles/15.6/cdi-uploadproxy:1.58.0
suse/sles/15.6/cdi-uploadserver:1.58.0
suse/sles/15.6/libguestfs-tools:1.1.1
suse/sles/15.6/pr-helper:1.1.1
suse/sles/15.6/virt-api:1.1.1
suse/sles/15.6/virt-controller:1.1.1
suse/sles/15.6/virt-exportproxy:1.1.1
suse/sles/15.6/virt-exportserver:1.1.1
suse/sles/15.6/virt-handler:1.1.1
suse/sles/15.6/virt-launcher:1.1.1
suse/sles/15.6/virt-operator:1.1.1
suse/sles/15.7/cdi-apiserver:1.58.0
suse/sles/15.7/cdi-cloner:1.58.0
suse/sles/15.7/cdi-controller:1.58.0
suse/sles/15.7/cdi-importer:1.58.0
suse/sles/15.7/cdi-operator:1.58.0
suse/sles/15.7/cdi-uploadproxy:1.58.0
suse/sles/15.7/cdi-uploadserver:1.58.0
suse/sles/15.7/libguestfs-tools:1.5.0
suse/sles/15.7/pr-helper:1.5.0
suse/sles/15.7/virt-api:1.5.0
suse/sles/15.7/virt-controller:1.5.0
suse/sles/15.7/virt-exportproxy:1.5.0
suse/sles/15.7/virt-exportserver:1.5.0
suse/sles/15.7/virt-handler:1.5.0
suse/sles/15.7/virt-launcher:1.5.0
suse/sles/15.7/virt-operator:1.5.0
suse/sles/16.0/cdi-apiserver:1.64
suse/sles/16.0/cdi-cloner:1.64
suse/sles/16.0/cdi-controller:1.64
suse/sles/16.0/cdi-importer:1.64
suse/sles/16.0/cdi-uploadproxy:1.64
suse/sles/16.0/cdi-uploadserver:1.64
suse/sles12sp4
suse/sles12sp5
suse/stunnel
suse/valkey
third-party/amd/amdgpu-driver:sles-15.7-30.30.3
third-party/nvidia/driver:550.163.01-sles15.7
third-party/nvidia/driver:570.195.03-sles15.7
third-party/nvidia/driver:570.211.01-sles15.7
third-party/nvidia/driver:575.57.08-sles15.7
third-party/nvidia/driver:580.105.08-sles15.7
third-party/nvidia/driver:580.126.09-sles15.7
third-party/nvidia/driver:580.126.16-sles15.7
third-party/nvidia/driver:580.126.20-sles15.7
third-party/nvidia/driver:580.82.07-sles15.7
third-party/nvidia/driver:580.95.05-sles15.7
third-party/nvidia/driver:590.48.01-sles15.7
third-party/nvidia/driver:595.45.04-sles15.7
third-party/nvidia/driver:595.45.04-sles16.0
third-party/nvidia/driver:595.58.03-sles15.7
third-party/nvidia/driver:595.58.03-sles16.0
trento/trento-db
trento/trento-runner		 glibcIn progress

SUSE Timeline for this CVE

CVE page created: Wed Sep 23 19:43:15 2026
CVE page last modified: Thu Oct 15 14:11:22 2026