Bug 2538306 (CVE-2026-95818) - CVE-2026-95818 glibc: glibc: Local attacker can cause denial of service and information disclosure via stack-based buffer overflow.
Summary: CVE-2026-95818 glibc: glibc: Local attacker can cause denial of service and i...
Keywords:
Status: NEW
Alias: CVE-2026-95818
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-09-22 17:55 UTC by OSIDB Bzimport
Modified: 2026-09-22 18:03 UTC (History)
15 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-09-22 17:55:04 UTC 
A stack-based buffer overflow in the dynamic loader (ld.so) of the GNU C Library (glibc) versions 2.14 through 2.44 allows a local attacker to crash or corrupt the memory of setuid/setgid (AT_SECURE) programs.

When such a program's DT_RPATH or DT_RUNPATH begins with $ORIGIN and is followed by NUL or '/' the loader both reads past the end of the path buffer and writes past the end of a stack-allocated internal buffer. The corrupted loader stack can lead to a loader crash (denial of service) and limited disclosure of process memory.
Note You need to log in before you can comment on or make changes to this bug.