Description
When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The GNU C Library | glibc | 2.13 – ≤ 2.40 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glibc | 2.40-6 | — |
| Debian 13 | glibc | 2.40-6 | — |
| Debian 12 | glibc | 2.36-9+deb12u10 | — |
| Debian 11 | glibc | 2.31-13+deb11u12 | DLA-4143-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | glibc | 2.39-0ubuntu8.4 | USN-7259-1 |
| Ubuntu 22.04 LTS | glibc | 2.35-0ubuntu3.9 | USN-7259-1 |
| Ubuntu 20.04 LTS | glibc | 2.31-0ubuntu9.17 | USN-7259-1 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 18.04 LTS | glibc | 2.27-3ubuntu1.6+esm4 | USN-7259-1 |
| Ubuntu Pro 16.04 LTS | glibc | 2.23-0ubuntu11.3+esm8 | USN-7259-2 |
| Ubuntu Pro 14.04 LTS | eglibc | 2.19-0ubuntu6.15+esm4 | USN-7259-3 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9 | nscd +214 | 2.34-125.el9_5.8 | RHSA-2025:4244 |
| RHEL 8 | nscd +213 | 2.28-251.el8_10.16 | RHSA-2025:3828 |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 9.4 EUS | nscd +214 | 2.34-100.el9_4.10 | RHSA-2025:4243 |
| RHEL 9.2 EUS | nscd +214 | 2.34-60.el9_2.17 | RHSA-2025:4241 |
| RHEL 9.0 E4S | nscd +209 | 2.34-28.el9_0.8 | RHSA-2025:4242 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | nscd +214 | 2.34-125.el9_5.8.alma.1 | ALSA-2025:4244 |
| AlmaLinux 8 | nscd +213 | 2.28-251.el8_10.16 | ALSA-2025:3828 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | glibc | 2.34-125.el9_5.8 | RLSA-2025:4244 |
| Rocky Linux 8 | glibc | 2.28-251.el8_10.16 | RLSA-2025:3828 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP6 | glibc | 2.38-150600.14.23.1 | SUSE-SU-2025:0582-1 |
| SLES 15 SP5 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES 15 SP4 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES 15 SP3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES 12 SP5 | glibc | 2.22-114.40.1 | SUSE-SU-2025:0510-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 16.0 | glibc | 2.40-160000.3.1 | SUSE-SU-2026:20198-1 |
| SLES for SAP 15 SP5 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES for SAP 15 SP4 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES for SAP 15 SP3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLES 16.0 | glibc | 2.40-160000.3.1 | SUSE-SU-2026:20198-1 |
| SLE Micro 6.2 | glibc | 2.40-160000.3.1 | SUSE-SU-2026:20563-1, SUSE-SU-2026:20178-1 |
| SLE Micro 6.1 | glibc | 2.38-slfo.1.1_3.1 | SUSE-SU-2025:20236-1 |
| SLE Micro 6.0 | glibc | 2.38-8.1 | SUSE-SU-2025:20135-1 |
| SLE Micro 5.5 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE Micro 5.4 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE Micro 5.3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE Micro 5.2 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE Micro 5.1 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE HPC 15 SP5 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE HPC 15 SP4 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SLE HPC 15 SP3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SUSE Manager Server 4.3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SUSE Manager Proxy 4.3 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
| SUSE Enterprise Storage 7.1 | glibc | 2.31-150300.92.1 | SUSE-SU-2025:0562-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | glibc | 2.41-1.1 | openSUSE-SU-2025:14851-1 |
| openSUSE Leap 16.0 | glibc +4 | 2.40-160000.3.1 | openSUSE-SU-2026:20133-1 |
| openSUSE Leap 15.6 | glibc | 2.38-150600.14.23.1 | SUSE-SU-2025:0582-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | nscd +217 | 2.34-181.amzn2023.0.1 | ALAS2023-2025-988 |
| Amazon Linux 2 | nscd +199 | 2.26-64.amzn2.0.4 | ALAS2-2025-2828 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | glibc | 2.38-11 | — |
| Azure Linux 2 (CBL-Mariner) | glibc | 2.35-9 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | nscd +214 | 2.34-125.0.1.el9_5.8 | ELSA-2025-4244 |
| Oracle Linux 8 | nscd +213 | 2.28-251.0.3.el8_10.16 | ELSA-2025-3828 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | glibc | 2.40-r6 | — |
Advisories 37
- ALSA-2025:4244 Moderate: glibc security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2025:3828 Moderate: glibc security update AlmaLinux Security Advisories · Oct 29, 2026
- RHSA-2025:4244 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:4243 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:4242 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:4241 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- RHSA-2025:3828 Red Hat Security Advisory: glibc security update Red Hat Security Advisories (RHSA) · Oct 14, 2026
- SSA-398330 SSA-398330: Vulnerabilities in the additional GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP >= V3.1.0 and < V3.1.5 Siemens ProductCERT · Oct 13, 2026
- WID-SEC-2025-1439 Dell Secure Connect Gateway: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Oct 11, 2026
- WID-SEC-2025-1559 Oracle Communications: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 11, 2026
- SUSE-SU-2026:20563-1 Security update for glibc SUSE / openSUSE Security Updates · Jul 9, 2026
- USN-7259-2 glibc vulnerability Ubuntu Security Notices (USN) · Jun 25, 2026
- ICSA-26-134-16 Siemens Ruggedcom Rox CISA ICS & IT advisories · May 14, 2026
- NCSC-2026-0147 Kwetsbaarheden verholpen in Siemens-producten NCSC-NL (Netherlands) · May 13, 2026
- SSA-577017 SSA-577017: Multiple Vulnerabilities in Ruggedcom Rox Before 2.17.1 Siemens ProductCERT · May 12, 2026
- USN-7259-3 eglibc vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-7259-1 glibc vulnerability Ubuntu Security Notices (USN) · Apr 27, 2026
- openSUSE-SU-2026:20133-1 Security update for glibc SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20198-1 Security update for glibc SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:20178-1 Security update for glibc SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20236-1 Security update for glibc SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2025:20135-1 Security update for glibc SUSE / openSUSE Security Updates · Mar 23, 2026
- DLA-4143-1 glibc - security update Debian Security (DSA / DLA) · Mar 9, 2026
- WID-SEC-2025-0172 GNU libc: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Mar 5, 2026
- SUSE-SU-2025:0510-1 Security update for glibc SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:14851-1 glibc-2.41-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2025:0562-1 Security update for glibc SUSE / openSUSE Security Updates · Feb 4, 2026
- WID-SEC-2025-1365 IBM QRadar SIEM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 18, 2026
- NCSC-2025-0246 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Aug 12, 2025
- ICSA-23-348-10 Siemens SIMATIC S7-1500 CISA ICS & IT advisories · Aug 12, 2025
- RLSA-2025:4244 Moderate: glibc security update Rocky Linux Security Advisories · Jul 29, 2025
- RLSA-2025:3828 Moderate: glibc security update Rocky Linux Security Advisories · Jul 29, 2025
- ALAS2023-2025-988 Moderate: glibc security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Jun 2, 2025
- SUSE-SU-2025:0582-1 Security update for glibc SUSE / openSUSE Security Updates · May 2, 2025
- ELSA-2025-4244 Moderate: glibc security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 28, 2025
- ALAS2-2025-2828 Moderate: glibc security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Apr 16, 2025
- ELSA-2025-3828 Moderate: glibc security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 14, 2025