CVE-2025-8058: Double Free
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if some previous allocation fails. It can be accomplished either by a malloc failure or by using an interposed malloc that injects random malloc failures. The double free can allow buffer manipulation depending of how the regex is constructed. This issue affects all architectures and ABIs supported by the GNU C library.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8058?
CVE-2025-8058 is rated as a critical vulnerability due to its potential for double free conditions leading to buffer manipulation.
How do I fix CVE-2025-8058?
To fix CVE-2025-8058, upgrade your GNU C library to a version higher than 2.41.
What systems are affected by CVE-2025-8058?
CVE-2025-8058 affects all versions of the GNU C Library from 2.4 to 2.41.
Can CVE-2025-8058 lead to remote code execution?
Yes, CVE-2025-8058 can potentially lead to remote code execution through malicious buffer manipulation.
What happens if I don't address CVE-2025-8058?
If CVE-2025-8058 is not addressed, an attacker may exploit the vulnerability to cause application crashes or execute arbitrary code.