Red Hat Security Advisory

RHSA-2026:72503

Red Hat Hardened Images RPMs Security Update

Released 2026-09-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images compat-libpthread-nonshared-2.43-8.7.hum1@aarch64, compat-libpthread-nonshared-2.43-8.7.hum1@x86_64, glibc-2.43-8.7.hum1@aarch64 +47

Fixes 2 records

TI-2026-59353 CVE-2026-86805 · GHSA-fmf4-pr35-46c2

AT_SECURE programs may load attacker-controlled code via $ORIGIN

LOW 29

A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to escalate privileges.

CVSS 3.1MEDIUM 6.3 Local Low privileges User interaction EPSS 0.00097 Published 2026-09-22 Partial fix · 2.45 CWE-367

TI-2026-63696 CVE-2026-95818 · GHSA-h8x4-734c-9753

AT_SECURE program buffer overflow via $ORIGIN processing

LOW 16

A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs.

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00102 Published 2026-09-22 Partial fix · 2.45 CWE-121