Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Debian glibc could let attackers execute code

CVE-2019-1010022 · published 9 days ago
Summary

The standard C library used in Debian 12 (glibc) has a flaw that could let a malicious program run arbitrary code on the system. This risk is removed by installing the updated glibc packages now provided for Debian. Apply the latest package updates as soon as possible to stay protected.

What to do
  • Update debian rootio-glibc to version 2.36-9+deb12u13.root.io.14.
  • Update debian glibc to version 2.41-12+deb13u3.root.io.9.
  • Update debian rootio-glibc to version 2.31-13+deb11u14.root.io.14.
  • Update debian glibc to version 2.31-13+deb11u14.root.io.14.
  • Update debian rootio-glibc to version 2.36-9+deb12u13.root.io.15.
  • Update debian rootio-glibc to version 2.36-9+deb12u13.root.io.16.
  • Update debian rootio-glibc to version 2.36-9+deb12u14.root.io.19.
  • Update debian rootio-glibc to version 2.41-12+deb13u2.root.io.8.
  • Update debian rootio-glibc to version 2.41-12+deb13u3.root.io.9.
  • Update glibc to version 2.36-9+deb12u14.aikido.21.
  • Update rootio-glibc to version 2.36-9+deb12u14.aikido.21.
  • Update glibc to version 2.36-9+deb12u14.aikido.22.
  • Update rootio-glibc to version 2.36-9+deb12u14.aikido.22.
  • Update glibc to version 2.41-12+deb13u4.aikido.13.
  • Update rootio-glibc to version 2.41-12+deb13u4.aikido.13.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-glibc < 2.36-9+deb12u13.root.io.14
< 2.36-9+deb12u13.root.io.15
< 2.36-9+deb12u13.root.io.16
< 2.36-9+deb12u14.root.io.19
Fix: upgrade to 2.36-9+deb12u13.root.io.14
Root:Debian:13 debian glibc < 2.41-12+deb13u3.root.io.9
Fix: upgrade to 2.41-12+deb13u3.root.io.9
Debian:12 debian glibc All versions
Debian:13 debian glibc All versions
Debian:14 debian glibc All versions
Root:Debian:11 debian rootio-glibc < 2.31-13+deb11u14.root.io.14
Fix: upgrade to 2.31-13+deb11u14.root.io.14
Root:Debian:11 debian glibc < 2.31-13+deb11u14.root.io.14
Fix: upgrade to 2.31-13+deb11u14.root.io.14
Root:Debian:13 debian rootio-glibc < 2.41-12+deb13u2.root.io.8
< 2.41-12+deb13u3.root.io.9
Fix: upgrade to 2.41-12+deb13u2.root.io.8
Root:Debian:12 – glibc < 2.36-9+deb12u14.aikido.21
< 2.36-9+deb12u14.aikido.22
Fix: upgrade to 2.36-9+deb12u14.aikido.21
Root:Debian:12 – rootio-glibc < 2.36-9+deb12u14.aikido.21
< 2.36-9+deb12u14.aikido.22
Fix: upgrade to 2.36-9+deb12u14.aikido.21
Root:Debian:13 – glibc < 2.41-12+deb13u4.aikido.13
Fix: upgrade to 2.41-12+deb13u4.aikido.13
Root:Debian:13 – rootio-glibc < 2.41-12+deb13u4.aikido.13
Fix: upgrade to 2.41-12+deb13u4.aikido.13
Original advisory text
CVE-2019-1010022 in glibc - Patched by Root
Root has patched CVE-2019-1010022 in the glibc package for Root:Debian:12. Multiple fixed versions available.
References
Severity
9.8 Critical
Exploitation
EPSS 3%
Timeline
Published16 Sep 2026
Updated23 Sep 2026
First seen1 Apr 2026
Sources
ROOT-OS-DEBIAN-13-CVE-2019-1010022 · OSV
ROOT-OS-DEBIAN-12-CVE-2019-1010022 · OSV
ROOT-OS-DEBIAN-11-CVE-2019-1010022 · OSV
CVE-2019-1010022 · NVD
DEBIAN-CVE-2019-1010022 · OSV
Track software like this
Free during beta