A critical privilege escalation vulnerability in the GNU C Library dynamic loader could allow local attackers to execute arbitrary code with elevated permissions.

This is a time-of-check to time-of-use (TOCTOU) race condition (CWE-367) occurring within the dynamic loader (ld.so). An authenticated local user can exploit this flaw by manipulating file system paths during the expansion of $ORIGIN in setuid or setgid binaries, effectively bypassing security checks to load malicious shared objects.

Successful exploitation of this vulnerability enables a local attacker to gain elevated privileges on the affected host. Given the core nature of glibc, this could result in complete system compromise, unauthorized data access, and the bypass of critical security controls. While the CVSS score of 6.3 reflects the requirement for local access and specific system configurations, the impact on system integrity and confidentiality is severe.

Immediate Action: Update the GNU C Library (glibc) to version 2.45 or later immediately. Ensure that the Linux kernel sysctl parameter fs.protected_hardlinks is enabled, as this provides an effective mitigation against the race condition.

Proactive Monitoring: Monitor system logs for unusual process executions, specifically those involving setuid or setgid binaries. Audit local user activity for attempts to create hard links in unauthorized directories.

Compensating Controls: Ensure that all Linux distributions are updated to current versions, as most major vendors enable fs.protected_hardlinks by default. Restrict shell access to untrusted users to minimize the risk of local exploitation.

Public Exploit Available: Unknown.

Organizations should prioritize patching glibc to version 2.45 across all Linux environments. Because this vulnerability targets a fundamental system library, the risk of privilege escalation is significant for multi-user systems. Apply the update during the next maintenance cycle and verify that kernel-level security protections are active to prevent potential exploitation.