local-CVE-2025-8058
authorGNU Libc Maintainers <debian-glibc@lists.debian.org>
Wed, 27 May 2026 04:49:44 +0000 (11:49 +0700)
committerArnaud Rebillout <arnaudr@debian.org>
Wed, 27 May 2026 04:49:44 +0000 (11:49 +0700)
commit0754d624553a2809975538517cf6adaae1cc9eb9
treeeae37839a5ebac64ae5bf57a4189e71640bb4942
parent9d9c6f7e63639c64dba0e9a970be105520583e29
local-CVE-2025-8058

Origin: backport, https://sourceware.org/git/?p=glibc.git;a=commit;h=6fa61e5997cca8c92e7ea9816341ecb63f8623e3

From 6fa61e5997cca8c92e7ea9816341ecb63f8623e3 Mon Sep 17 00:00:00 2001
From: Florian Weimer <fweimer@redhat.com>
Date: Mon, 21 Jul 2025 21:43:49 +0200
Subject: [PATCH] posix: Fix double-free after allocation failure in regcomp
 (bug 33185)

If a memory allocation failure occurs during bracket expression
parsing in regcomp, a double-free error may result.

Reported-by: Anastasia Belova <abelova@astralinux.ru>
Co-authored-by: Paul Eggert <eggert@cs.ucla.edu>
Reviewed-by: Andreas K. Huettel <dilfridge@gentoo.org>
(cherry picked from commit 7ea06e994093fa0bcca0d0ee2c1db271d8d7885d)

Gbp-Pq: Topic any
Gbp-Pq: Name local-CVE-2025-8058.diff
posix/Makefile
posix/regcomp.c
posix/tst-regcomp-bracket-free.c [new file with mode: 0644]