CVE-2026-6368

EUVD-2026-55727
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
UNKNOWN
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 3.18%
Debian logo
Debian Releases
Debian Product
Codename
glibc
bookworm
postponed
bookworm (security)
vulnerable
forky
2.43-5
fixed
sid
2.43-5
fixed
trixie
no-dsa
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
glibc
bionic
needs-triage
focal
needs-triage
jammy
Fixed 2.35-0ubuntu3.15
released
noble
needs-triage
resolute
Fixed 2.43-2ubuntu2.4
released
xenial
needs-triage
eglibc
jammy
dne
noble
dne
resolute
dne
trusty
needs-triage
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
glibc
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-32bit
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.2
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-devel
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-devel-32bit
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.2
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-devel-static
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-extra
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-html
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
glibc-i18ndata
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-info
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-lang
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-locale
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-locale-32bit
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise server 12 SP3
2.22-145.21.2
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
glibc-locale-base
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-locale-base-32bit
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-profile
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
glibc-profile-32bit
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise server 12 SP3
2.22-145.21.2
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
glibc-utils
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
libnsl1
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
libnsl1-32bit
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
nscd
suse enterprise desktop 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise sap 12 SP5
2.22-114.52.2
fixed
suse enterprise sap 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise sap 15 SP7
2.38-150600.14.58.1
fixed
suse enterprise server 12 SP3
2.22-145.21.1
fixed
suse enterprise server 12 SP5
2.22-114.52.2
fixed
suse enterprise server 15 SP6
2.38-150600.14.58.1
fixed
suse enterprise server 15 SP7
2.38-150600.14.58.1
fixed
Common Weakness Enumeration
References
https://sourceware.org/bugzilla/show_bug.cgi?id=34090
https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014;h=1e9a0039f07471ddfe6816e5df04875bec409f92;hb=HEAD