Description
pt_chown in GNU C Library (aka glibc or libc6) before 2.18 does not properly check permissions for tty files, which allows local users to change the permission on the files and obtain access to arbitrary pseudo-terminals by leveraging a FUSE file system.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glibc | 2.21-1 | — |
| Debian 13 | glibc | 2.21-1 | — |
| Debian 12 | glibc | 2.21-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | eglibc | 2.19-0ubuntu6.8 | USN-2985-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | glibc | 2.11.3-17.87.3 | SUSE-SU-2015:1424-1 |
| SLES 11 SP3 | glibc | 2.11.3-17.87.3 | SUSE-SU-2015:1424-1 |
| SLES 11 SP2 | glibc | 2.11.3-17.45.66.1 | SUSE-SU-2016:0470-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 11 SP4 | glibc | 2.11.3-17.87.3 | SUSE-SU-2015:1424-1 |
| SLES for SAP 11 SP3 | glibc | 2.11.3-17.87.3 | SUSE-SU-2015:1424-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | glibc | 2.24-2.3 | openSUSE-SU-2024:10154-1 |
Advisories 4
- USN-2985-1 eglibc, glibc vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- SUSE-SU-2016:0470-1 Security update for glibc SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1424-1 Security update for glibc SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10154-1 glibc-2.24-2.3 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
References
- https://sourceware.org/bugzilla/show_bug.cgi?id=15755
- 55113 third-party-advisory
- SUSE-SU-2015:1424 vendor-advisory
- [libc-alpha] 20130812 The GNU C Library version 2.18 is now available mailing-list
- SUSE-SU-2016:0470 vendor-advisory
- USN-2985-2 vendor-advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=976408
- GLSA-201503-04 vendor-advisory
- MDVSA-2013:283 vendor-advisory
- USN-2985-1 vendor-advisory