Description
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs.
When such a program's DT_RPATH or DT_RUNPATH begins with $ORIGIN and is followed by NUL or '/' the loader both reads past the end of the path buffer and writes past the end of a stack-allocated internal buffer. The corrupted loader stack can lead to a loader crash (denial of service) and limited disclosure of process memory.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| The GNU C Library | glibc | 2.14 – < 2.45 | 2.45 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | glibc | 2.43-7 | — |
| Debian 13 | glibc | No fix yet | — |
| Debian 12 | glibc | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 26.10 | glibc | 2.44-1ubuntu2.1 | USN-9065-1 |
| Ubuntu 26.04 LTS | glibc | 2.43-2ubuntu2.7 | USN-9065-1 |
| Ubuntu 24.04 LTS | glibc | 2.39-0ubuntu8.12 | USN-9065-1 |
| Ubuntu 22.04 LTS | glibc | 2.35-0ubuntu3.18 | USN-9065-1 |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | glibc | No fix yet | — |
| Ubuntu Pro 18.04 LTS | glibc | No fix yet | — |
| Ubuntu Pro 16.04 LTS | glibc | No fix yet | — |
| Ubuntu Pro 14.04 LTS | eglibc | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Hardened Images 1 | glibc +227 | 2.43-8.7.hum1 | RHSA-2026:72503 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 9 | nscd +172 | 2.34-284.el9_8.4 | ALSA-2026:95618 |
| AlmaLinux 8 | nscd +213 | 2.28-251.el8_10.53 | ALSA-2026:96087 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | glibc +219 | 2.39-147.el10_3 | RLSA-2026:98599 |
| Rocky Linux 9 | glibc | 2.34-284.el9_8.4 | RLSA-2026:98512, RLSA-2026:95618 |
| Rocky Linux 9 | nscd +211 | 2.34-290.el9_9 | RLSA-2026:98512 |
| Rocky Linux 8 | glibc | 2.28-251.el8_10.53 | RLSA-2026:96087 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | glibc | No fix yet | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | nscd +214 | 2.34-284.0.1.el9_8.4 | ELSA-2026-95618 |
| Oracle Linux 8 | nscd +213 | 2.28-251.0.5.el8_10.53 | ELSA-2026-96087 |
Wolfi
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Wolfi rolling | sln-2.43 +26 | 2.43-r18 | — |
| Wolfi rolling | sln-2.44 +26 | 2.44-r8 | — |
Advisories 11
- RLSA-2026:98599 Moderate: glibc security update Rocky Linux Security Advisories · Nov 13, 2026
- RLSA-2026:98512 Moderate: glibc security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- USN-9065-1 glibc vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- WID-SEC-2026-3522 GNU libc: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- RLSA-2026:96087 Moderate: glibc security update Rocky Linux Security Advisories · Nov 10, 2026
- ALSA-2026:96087 Moderate: glibc security update AlmaLinux Security Advisories · Nov 10, 2026
- ELSA-2026-96087 Moderate: glibc security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 9, 2026
- RLSA-2026:95618 Moderate: glibc security update Rocky Linux Security Advisories · Nov 6, 2026
- ALSA-2026:95618 Moderate: glibc security update AlmaLinux Security Advisories · Nov 6, 2026
- ELSA-2026-95618 Moderate: glibc security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 6, 2026
- RHSA-2026:72503 Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update Red Hat Security Advisories (RHSA) · Sep 29, 2026