How many CVEs have patched link_map?

14 published CVEs changed link_map in debian/glibc, in 10 distinct patches totalling 486 changed lines, between 2017 and 2026.

What is the latest CVE that changed link_map?

CVE-2025-15281 (wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory), published 2026-01-20, changed lines 1 to 50 of elf/dl-call_fini.c.

How does link_map compare to the rest of debian/glibc?

debian/glibc has 23 CVEs with a located fix in total; 14 of them changed link_map.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

link_map in debian/glibc: Patched by 14 CVEs

Name: link_map in debian/glibc: CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

link_map in debian/glibc: Patched by 14 CVEs

CVEs that patched it

Every published CVE whose fix changed link_map, newest first, with the lines each fix touched.

wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · elf/dl-call_fini.c · lines 1–50 · +50 −0
High · CVSS 7.5
EPSS 0.5%2026-01-20
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · elf/dl-close.c · line 108 · +0 −25
High · CVSS 7.5
EPSS 0.5%2026-01-20
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · elf/dl-sort-maps.c · lines 185–187 · +2 −1
High · CVSS 7.5
EPSS 0.5%2026-01-20
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · elf/dl-tls.c · lines 828–973 · +9 −7 in 2 hunks
High · CVSS 7.5
EPSS 0.5%2026-01-20
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · include/link.h · lines 281–284 · +4 −0
High · CVSS 7.5
EPSS 0.5%2026-01-20
wordexp with WRDE_REUSE and WRDE_APPEND may return uninitialized memory
CVE-2025-15281 · sysdeps/generic/ldsodefs.h · lines 108–1063 · +12 −2 in 2 hunks
High · CVSS 7.5
EPSS 0.5%2026-01-20
CVE-2025-0395
CVE-2025-0395 · elf/dl-call_fini.c · lines 1–50 · +50 −0
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
CVE-2025-0395
CVE-2025-0395 · elf/dl-close.c · line 108 · +0 −25
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
CVE-2025-0395
CVE-2025-0395 · elf/dl-sort-maps.c · lines 185–187 · +2 −1
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
CVE-2025-0395
CVE-2025-0395 · elf/dl-tls.c · lines 828–973 · +9 −7 in 2 hunks
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
CVE-2025-0395
CVE-2025-0395 · include/link.h · lines 281–284 · +4 −0
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
CVE-2025-0395
CVE-2025-0395 · sysdeps/generic/ldsodefs.h · lines 108–1063 · +12 −2 in 2 hunks
Medium · CVSS 6.2
EPSS 0.4%2025-01-22
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · elf/dl-call_fini.c · lines 1–50 · +50 −0
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · elf/dl-close.c · line 108 · +0 −25
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · elf/dl-sort-maps.c · lines 185–187 · +2 −1
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · include/link.h · lines 281–284 · +4 −0
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: potential use-after-free in getaddrinfo()
CVE-2023-4806 · sysdeps/generic/ldsodefs.h · lines 108–1063 · +12 −2 in 2 hunks
Medium · CVSS 5.9
EPSS 1.6%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · elf/dl-call_fini.c · lines 1–50 · +50 −0
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · elf/dl-close.c · line 108 · +0 −25
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · elf/dl-sort-maps.c · lines 185–187 · +2 −1
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · include/link.h · lines 281–284 · +4 −0
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
Glibc: stack read overflow in getaddrinfo in no-aaaa mode
CVE-2023-4527 · sysdeps/generic/ldsodefs.h · lines 108–1063 · +12 −2 in 2 hunks
Medium · CVSS 6.5
EPSS 1.7%2023-09-18
CVE-2020-27618
CVE-2020-27618 · sysdeps/hppa/dl-fptr.c · lines 398–406 · +9 −1
Medium · CVSS 5.5
EPSS 0.9%2021-02-26
CVE-2019-25013
CVE-2019-25013 · sysdeps/hppa/dl-fptr.c · lines 398–406 · +9 −1
Medium · CVSS 5.9
EPSS 3.6%2021-01-04
CVE-2020-29562
CVE-2020-29562 · sysdeps/hppa/dl-fptr.c · lines 398–406 · +9 −1
Medium · CVSS 4.8
EPSS 1.7%2020-12-04
CVE-2020-6096
CVE-2020-6096 · sysdeps/hppa/dl-fptr.c · lines 398–406 · +9 −1
High · CVSS 8.1
EPSS 5.5%2020-04-01
CVE-2019-9169
CVE-2019-9169 · include/link.h · lines 219–222 · +4 −0
Critical · CVSS 9.8
EPSS 4.7%2019-02-26
CVE-2019-7309
CVE-2019-7309 · include/link.h · lines 219–222 · +4 −0
Medium · CVSS 5.5
EPSS 0.6%2019-02-03
CVE-2016-10739
CVE-2016-10739 · include/link.h · lines 219–222 · +4 −0
Medium · CVSS 5.3
EPSS 0.5%2019-01-21
CVE-2019-6488
CVE-2019-6488 · include/link.h · lines 219–222 · +4 −0
High · CVSS 7.8
EPSS 0.4%2019-01-18
CVE-2018-19591
CVE-2018-19591 · include/link.h · lines 219–222 · +4 −0
High · CVSS 7.5
EPSS 5.5%2018-12-04
CVE-2016-10228
CVE-2016-10228 · sysdeps/hppa/dl-fptr.c · lines 398–406 · +9 −1
Medium · CVSS 5.9
EPSS 4.1%2017-03-02

Get an alert when the next CVE fix lands in debian/glibc, with the patched functions.

Monitor glibc CVEs

link_map

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track debian/glibc CVEs