AZL-95495

See a problem?

Import Source

https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95495.json

JSON Data

https://api.osv.dev/v1/vulns/AZL-95495

Upstream

CVE-2026-6368

Published

2026-08-10T19:17:30Z

Modified

2026-09-20T05:33:47Z

Summary

CVE-2026-6368 affecting package glibc 2.38-21

Details

Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-6368

Affected packages

Azure Linux:3 / glibc

Package

Name: glibc
Purl: pkg:rpm/azure-linux/glibc

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Last Affected

2.38-21

Database specific

source

"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-95495.json"