Disclosure summary
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
Source-reported weakness categories
CWE-415
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Microsoft Security Updates (CVRF) · 2025-Jul
Open original source · Updated Oct 21, 2025
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | azl3 glibc 2.38-12 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 glibc 2.38-15 on Azure Linux 3.0 | (MSRC status code 3) |
| Microsoft update guide | azl3 glibc 2.38-14 on Azure Linux 3.0 | (MSRC status code 3) |
Vendor remediation references
- CBL-Mariner Releases · build 2.38-15 · product IDs 20614-17084, 20570-17084
- Vendor guidance · product IDs 20614-17084, 20570-17084
Original records & references
- NIST NVD record
- CVE Program record
- msrc.microsoft.com — Vendor advisory
PUBLISHED 2025-10-21T21:01:52-04:00
MODIFIED 2025-10-21T21:01:52-04:00
INGESTED 2026-10-08T12:45:47-04:00