Double Free Vulnerability in GNU C Library Affecting Multiple Architectures

CVE-2025-8058

What is CVE-2025-8058?

The GNU C library versions from 2.4 to 2.41 contain a vulnerability in the regcomp function, which may lead to a double free condition under specific failure scenarios. When a memory allocation fails, whether through a standard malloc or an interposed allocation function that deliberately triggers such failures, this can potentially result in buffer manipulation risks. This vulnerability impacts all architectures and ABIs supported by the GNU C library, posing a significant threat to system security and stability.

References