Summary
It was discovered that the GNU C Library incorrectly handled the regcomp
function when memory allocation failures occured. An attacker could use
this issue to cause applications to crash, leading to a denial of service,
or possibly execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | glibc | 2.35-0ubuntu3.11 |
| Ubuntu · 24.04 LTS 24.04:LTS | glibc | 2.39-0ubuntu8.6 |
Vulnerabilities 1
-
Medium 5.9
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocat…
References
-
report
https://ubuntu.com/security/CVE-2025-8058