CVE-2026-6368

A flaw was found in glibc (GNU C Library). A local attacker or application using the wordexp function with the WRDE_APPEND flag can trigger the interface to return invalid memory in the we_wordv member. This invalid memory, when subsequently processed by wordfree, may cause the process to abort, leading to a Denial of Service (DoS).

This flaw in glibc has Moderate impact, as it can lead to a denial of service. Exploitation requires an application to specifically call wordexp with the WRDE_APPEND flag, followed by a wordfree call, which can result in a process abort. This vulnerability affects applications that utilize this particular programming pattern.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.