{"id":"CVE-2019-19126","title":"On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possib…","summary":"On the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possib…","severity":"low","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-665","CWE-20"],"vendor":"gnu","product":"glibc","affected":["glibc < 2.31","ubuntu_linux = 16.04","ubuntu_linux = 18.04","ubuntu_linux = 19.10","fedora = 30","fedora = 31","debian_linux = 10.0"],"patched":["glibc 2.31"],"published":"2019-11-19","updated":"2026-10-14","sourceUpdated":"2026-10-14T07:16:50.737","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2019-19126","references":[{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","label":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FQ5LC6JOYSOYFPRUZ4S45KL6IP3RPPZ/","label":"cve@mitre.org"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFJ5E7NWOL6ROE5QVICHKIOUGCPFJVUH/","label":"cve@mitre.org"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=25204","label":"cve@mitre.org"},{"url":"https://usn.ubuntu.com/4416-1/","label":"cve@mitre.org"},{"url":"https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4FQ5LC6JOYSOYFPRUZ4S45KL6IP3RPPZ/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZFJ5E7NWOL6ROE5QVICHKIOUGCPFJVUH/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://sourceware.org/bugzilla/show_bug.cgi?id=25204","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://usn.ubuntu.com/4416-1/","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","label":"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-19126.json"},{"url":"https://access.redhat.com/security/cve/CVE-2019-19126"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774681"},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-19126"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-19126"},{"url":"https://access.redhat.com/errata/RHSA-2020:3861"},{"url":"https://access.redhat.com/errata/RHSA-2021:0949"},{"url":"https://access.redhat.com/errata/RHSA-2020:1828"}],"tags":["nvd","csaf","vex","red-hat"],"epss":0.00409,"epssPercentile":0.3336,"ingestedAt":"2026-10-14T07:21:04.823Z","scores":{"nvd":3.3,"vendor":2.9},"slug":"CVE-2019-19126","body":"## Overview\n\nOn the x86-64 architecture, the GNU C Library (aka glibc) before 2.31 fails to ignore the LD_PREFER_MAP_32BIT_EXEC environment variable during program execution after a security transition, allowing local attackers to restrict the possible mapping addresses for loaded libraries and thus bypass ASLR for a setuid program.\n\n## Affected\n\n- `glibc < 2.31`\n- `ubuntu_linux = 16.04`\n- `ubuntu_linux = 18.04`\n- `ubuntu_linux = 19.10`\n- `fedora = 30`\n- `fedora = 31`\n- `debian_linux = 10.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `glibc 2.31`\n\n## Vendor advisories\n\n- **RHSA-2020:3861** · Red Hat · fixed in: Red Hat Enterprise Linux Client (v. 7), Red Hat Enterprise Linux Client Optional (v. 7), Red Hat Enterprise Linux ComputeNode (v. 7), Red Hat Enterprise Linux ComputeNode Optional (v. 7), Red Hat Enterprise Linux Server (v. 7), Red Hat Enterprise Linux Server Optional (v. 7), … · released 2020-09-29 · [advisory](https://access.redhat.com/errata/RHSA-2020:3861)\n- **RHSA-2021:0949** · Red Hat · fixed in: OpenShift Do 1 · released 2021-03-22 · [advisory](https://access.redhat.com/errata/RHSA-2021:0949)\n- **RHSA-2020:1828** · Red Hat · fixed in: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux BaseOS (v. 8), Red Hat CodeReady Linux Builder (v. 8) · released 2020-04-28 · [advisory](https://access.redhat.com/errata/RHSA-2020:1828)\n- **Red Hat VEX** · Low · affected: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6 · updated 2026-10-14 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2019/cve-2019-19126.json)","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}