● Ubuntu USN · June 2026

Ubuntu Linux Security Advisory: June 2026 Glibc Syslog Buffer Triage

Technical triage of Ubuntu's core system library updates resolving the Glibc __vsyslog_internal buffer overflow and systemd integration flaws.

Library Issues

Root LPE Flaw

7.8

CVSS Glibc

Critical

Base Image Priority

セキュリティトリアージとリスク評価

In June 2026, Canonical deployed emergency fixes for Glibc addressing CVE-2023-6246, a heap-based buffer overflow in __vsyslog_internal(). Attackers could trigger unauthenticated local privilege escalation across standard utilities like su and sudo.

優先脆弱性トリアージマトリックス

CVE識別番号	対象サブシステム / コンポーネント	影響範囲	CVSS	ゼロデイ悪用確認？
CVE-2023-6246	GNU C Library (glibc)	Heap Buffer Overflow	7.8 High	YES (PoC Published)
CVE-2024-2961	glibc iconv	Out-of-Bounds Write	8.1 High	No
CVE-2024-33655	systemd-resolved	DNS Cache Poisoning	6.5 Medium	No

注目ソースコード分析

Deep Dive: Glibc __vsyslog_internal Heap Buffer Overflow Teardown →

See how calculating the printed string length without accounting for the syslog prefix allowed attackers to overflow heap memory in su/sudo.

← セキュリティディレクトリ一覧すべてのセキュリティ更新情報 →