diff --git a/backport-Free-dynarray-buffer-after-parsing-nsswitch.conf.patch b/backport-Free-dynarray-buffer-after-parsing-nsswitch.conf.patch
new file mode 100644
index 0000000000000000000000000000000000000000..d960131d069970ab969608d017519a198877a8b4
--- /dev/null
+++ b/backport-Free-dynarray-buffer-after-parsing-nsswitch.conf.patch
@@ -0,0 +1,37 @@
+From af90dc572ad232d05b667c4ce218d499f066b7bc Mon Sep 17 00:00:00 2001
+From: DJ Delorie <dj@redhat.com>
+Date: Fri, 30 May 2025 21:04:37 -0400
+Subject: [PATCH] nss: free dynarray buffer after parsing nsswitch.conf
+
+Resolves: swbz 31791
+
+Reviewed-by: Collin Funk <collin.funk1@gmail.com>
+---
+ nss/nss_action_parse.c | 5 ++++-
+ 1 file changed, 4 insertions(+), 1 deletion(-)
+
+diff --git a/nss/nss_action_parse.c b/nss/nss_action_parse.c
+index 2b67a8a2a0..ee3aadf312 100644
+--- a/nss/nss_action_parse.c
++++ b/nss/nss_action_parse.c
+@@ -168,13 +168,16 @@ nss_action_list
+   action_list_init (&list);
+   if (nss_action_parse (line, &list))
+     {
++      nss_action_list retval;
+       size_t size;
+       struct nss_action null_service
+         = { .module = NULL, };
+ 
+       action_list_add (&list, null_service);
+       size = action_list_size (&list);
+-      return __nss_action_allocate (action_list_begin (&list), size);
++      retval = __nss_action_allocate (action_list_begin (&list), size);
++      action_list_free (&list);
++      return retval;
+     }
+   else if (action_list_has_failed (&list))
+     {
+-- 
+2.43.7
+
diff --git a/glibc.spec b/glibc.spec
index 0e0761734414ab49fb9fe9aab97b52f48d8b26fe..ccce259f58efbe9a479f5adbb5f06db88910092b 100644
--- a/glibc.spec
+++ b/glibc.spec
@@ -67,7 +67,7 @@
 ##############################################################################
 Name: 	 	glibc
 Version: 	2.38
-Release: 	70
+Release: 	71
 Summary: 	The GNU libc libraries
 License:	%{all_license}
 URL: 		http://www.gnu.org/software/glibc/
@@ -359,6 +359,7 @@ Patch269: i386-Update-___tls_get_addr-to-preserve-vector-regis.patch
 Patch270: x86-64-Add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch
 Patch271: i386-Also-add-GLIBC_ABI_GNU2_TLS-version-BZ-33129.patch
 Patch272: i386-Add-GLIBC_ABI_GNU_TLS-version-BZ-33221.patch
+Patch273: backport-Free-dynarray-buffer-after-parsing-nsswitch.conf.patch
 
 #openEuler patch list
 Patch9000: turn-default-value-of-x86_rep_stosb_threshold_form_2K_to_1M.patch
@@ -1587,6 +1588,10 @@ fi
 %endif
 
 %changelog
+* Mon Sep 15 2025 jinshuaiyu <jinshuaiyu@kylinos.cn> - 2.38-71
+- Backport patches from glibc upstream 2.38 branch
+- Free dynarray buffer after parsing nsswitch.conf
+
 * Sun Sep 14 2025 Funda Wang <fundawang@yeah.net> - 2.38-70
 - revert filter of GLIBC_PRIVATE and GLIBC_ABI_DT_RELR