Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
musl libc up to 1.2.6 can be slowed locally
published 6 months ago
Summary
The standard C library used by many Linux applications (musl libc) may take a very long time to process specially crafted text. An attacker who can run code on the same machine could make affected programs hang, disrupting service. Install the latest library update or apply the vendor's patch to eliminate the problem.
What to do
- Update bellsoft musl-default to version 1.2.5-r15.
- Update bellsoft musl-perf to version 1.2.5-r16.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Alpaquita:25 | bellsoft | musl-default |
>= 1.2.5-r12, < 1.2.5-r15 Fix: upgrade to 1.2.5-r15
|
| Alpaquita:25 | bellsoft | musl-perf |
>= 1.2.5-r11, < 1.2.5-r16 Fix: upgrade to 1.2.5-r16
|
| BellSoft Hardened Containers:25 | bellsoft | musl-default |
>= 1.2.5-r12, < 1.2.5-r15 Fix: upgrade to 1.2.5-r15
|
| BellSoft Hardened Containers:25 | bellsoft | musl-perf |
>= 1.2.5-r11, < 1.2.5-r16 Fix: upgrade to 1.2.5-r16
|
Original advisory text
BELL-CVE-2026-6042
References
- https://docs.bell-sw.com/security/cves/CVE-2026-6042 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published13 Apr 2026
Updated14 Apr 2026
First seen14 Apr 2026
Track software like this
Free during beta