CVE-2026-6368
ADVISORY - debianSummary
Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.
- glibc 2.43-4 (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1144252) [trixie] - glibc (Minor issue) [bookworm] - glibc (Minor issue) https://sourceware.org/bugzilla/show_bug.cgi?id=34090 https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2026-0014
EPSS Score: 0.00107 (0.013)
Common Weakness Enumeration (CWE)
ADVISORY - nist
Use of Uninitialized Resource
ADVISORY - redhat
Multiple Releases of Same Resource or Handle
Debian
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
| Package | Type | OS Name | OS Version | Affected Ranges | Fix Versions |
|---|---|---|---|---|---|
| debian/glibc | deb | debian | 12 | >0 | Not yet available |
| debian/glibc | deb | debian | unstable | <2.43-4 | 2.43-4 |
| debian/glibc | deb | debian | 13 | >0 | Not yet available |
| debian/glibc | deb | debian | 14 | <2.43-4 | 2.43-4 |
Severity and metrics
No CVSS data available from this advisory.
NIST
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
2.1lowUbuntu
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-
CVSS SCORE
N/AmediumRed Hat
CREATED
UPDATED
ADVISORY IDCVE-2026-6368
EXPLOITABILITY SCORE
1.8
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)
CVSS SCORE
5.5mediumminimos
CREATED
UPDATED
ADVISORY ID
MINI-8jj9-cwcg-wpqc
EXPLOITABILITY SCORE
-
EXPLOITS FOUND
-
COMMON WEAKNESS ENUMERATION (CWE)-