High 7.8Known exploited (CISA KEV)Published Oct 3, 2023

CVE-2023-4911Glibc: buffer overflow in ld.so leading to privilege escalation

Updated under an hour ago (Oct 26, 2026, 6:00 PM ET)

Does this affect you?

It affects Red Hat Enterprise Linux 8 and 44 other products. Add what you run to find out whether that includes you.

CISA lists it as known exploited since Nov 21, 2023; federal agencies had to remediate by Dec 12, 2023. Treat that date as your deadline.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Red Hat Enterprise Linux 8

Exploited in the last 30 days

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-122
Known exploited: Added to CISA KEV Nov 21, 2023; federal remediation due Dec 12, 2023Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
EPSS (exploitation in the next 30 days): 63.77% (percentile 99)
Assigned by: redhat
NVD analysis: Analyzed
Record last updated: Oct 14, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Red Hat Red Hat Enterprise Linux 8 redhat:enterprise_linux	from 0:2.28-225.el8_8.6 not affected	CNA record
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support redhat:rhel_eus	from 0:2.28-189.6.el8_6 not affected	CNA record
Red Hat Red Hat Enterprise Linux 8.6 Extended Update Support redhat:rhev_hypervisor	from 0:2.28-189.6.el8_6 not affected	CNA record
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP siemens:simatic_s7_1500_cpu_1518f_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
Siemens SIMATIC S7-1500 TM MFP - GNU/Linux subsystem siemens:simatic_s7_1500_tm_mfp_gnu_linux_subsystem (from the name)	before V1.1	CISA ADP
Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP siemens:siplus_s7_1500_cpu_1518_4_pn_dp_mfp (from the name)	from V3.1.5	CISA ADP
netapp bootstrap_os netapp:bootstrap_os	all versions	NVD
siemens simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmware siemens:simatic_s7-1500_cpu_1518-4_pn/dp_mfp_firmware	from 3.1.5	NVD
siemens simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmware siemens:simatic_s7-1500_cpu_1518f-4_pn/dp_mfp_firmware	from 3.1.5	NVD
1–10 of 46

References

References

https://access.redhat.com/errata/RHSA-2023:5453	vendor-advisory, x-refsource-redhat, third-party-advisory
https://access.redhat.com/errata/RHSA-2023:5454	vendor-advisory, x-refsource-redhat, third-party-advisory
https://access.redhat.com/errata/RHSA-2023:5455	vendor-advisory, x-refsource-redhat, third-party-advisory
https://access.redhat.com/errata/RHSA-2023:5476	vendor-advisory, x-refsource-redhat, third-party-advisory
https://access.redhat.com/errata/RHSA-2024:0033	vendor-advisory, x-refsource-redhat, third-party-advisory
https://access.redhat.com/security/cve/CVE-2023-4911	vdb-entry, x-refsource-redhat, third-party-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2238352	issue-tracking, x-refsource-redhat, patch
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt	exploit, third-party-advisory
https://www.qualys.com/cve-2023-4911/	third-party-advisory
http://packetstormsecurity.com/files/174986/glibc-ld.so-Local-Privilege-Escalation.html	exploit, third-party-advisory, vdb-entry
1–10 of 25

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.