Vulnerability · Published Jul 23, 2025 · Assigned by glibc

CVE-2025-8058

Medium 5.9

In plain English

A medium-severity double free in glibc from The GNU C Library. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 4.0)5.9Medium
Exploit odds (30 days)0.2%top 87.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8compat-libpthread-nonshared2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-all-langpacks2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-benchtests2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-common2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-devel2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:10glibc-doc2.39-46.el10_0.alma.1ALSA-2025:13240
AlmaLinux:8glibc-doc2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-gconv-extra2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-headers2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-aa2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-af2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-agr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ak2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-am2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-an2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-anp2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ar2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-as2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ast2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ayc2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-az2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-be2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bem2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ber2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bg2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bhb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bho2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bo2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-br2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-brx2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-bs2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-byn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ca2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ce2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-chr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-cmn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-crh2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-cs2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-csb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-cv2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-cy2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-da2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-de2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-doi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-dsb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-dv2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-dz2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-el2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-en2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-eo2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-es2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-et2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-eu2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fa2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ff2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fil2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fo2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fur2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-fy2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ga2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-gd2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-gez2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-gl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-gu2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-gv2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ha2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hak2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-he2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hif2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hne2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hsb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ht2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hu2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-hy2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ia2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-id2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ig2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ik2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-is2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-it2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-iu2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ja2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ka2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kab2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kk2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-km2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ko2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kok2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ks2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ku2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-kw2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ky2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lg2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-li2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lij2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ln2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lo2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lt2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lv2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-lzh2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mag2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mai2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mfe2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mg2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mhr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-miq2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mjw2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mk2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ml2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mni2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ms2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-mt2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-my2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nan2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nb2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nds2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ne2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nhn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-niu2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-nso2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-oc2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-om2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-or2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-os2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-pa2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-pap2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-pl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ps2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-pt2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-quz2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-raj2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ro2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ru2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-rw2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sa2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sah2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sat2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sc2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sd2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-se2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sgs2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-shn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-shs2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-si2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sid2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sk2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sm2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-so2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sq2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ss2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-st2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sv2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-sw2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-szl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ta2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tcy2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-te2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tg2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-th2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-the2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ti2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tig2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tk2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tl2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tn2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-to2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tpi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tr2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ts2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-tt2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ug2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-uk2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-unm2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ur2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-uz2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-ve2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-vi2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-wa2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-wae2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-wal2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-wo2.28-251.el8_10.25ALSA-2025:12980
AlmaLinux:8glibc-langpack-xh2.28-251.el8_10.25ALSA-2025:12980

Affected products (as reported)

VendorProductVersions
The GNU C Library glibc 2.4 – before 2.42

Weakness: CWE-415 · Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:L/VI:L/VA:H/SC:L/SI:L/SA:H

References