VulnSocial

CVE-2023-4911PoC(canonical / bootstrap_os)

MEDIUMCVSS 7.8 · HIGHCISA KEV

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Prioritize remediation for canonical bootstrap_os systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft
  • Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.

canonical CVEsBack to dashboard
4.5/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-12-12. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-122CWE-787

Priority

MEDIUM

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • bootstrap_os
  • codeready_linux_builder
  • codeready_linux_builder_eus
  • codeready_linux_builder_for_arm64

Threat summary

  • Public PoC and exploit tooling are both present
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-02-11); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
canonicaldebianfedoraprojectgnunetappredhatsiemens
Products
bootstrap_oscodeready_linux_buildercodeready_linux_builder_euscodeready_linux_builder_for_arm64codeready_linux_builder_for_arm64_euscodeready_linux_builder_for_ibm_z_systemscodeready_linux_builder_for_ibm_z_systems_euscodeready_linux_builder_for_power_little_endiancodeready_linux_builder_for_power_little_endian_eusdebian_linux

29 versions affected across 49 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-11: 1Mentions · 2026-03-03: 1PoC Mentioned / Linked · 2026-02-11: 1Exploit Tool / Code · 2026-02-11: 1Technical Details · 2026-02-11: 102-1103-03
Signal classification2 categories
PoC
150.0%
General
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-02-111
PoC1
2026-03-031
General1
Full discourse2 posts
  • Red Secure Tech Ltd.@redsecuretech
    PoC

    CVE-2023-4911 PoC exploits GLIBC_TUNABLES buffer overflow in glibc 2.35–2.38 for local privilege escalation via patched libc & su. https://redsecuretech.co.uk/blog/post/cve-2023-4911-looney-tunables-glibc-local-root-exploit-poc/908 #Cybersecurity #CVE #glibc #LooneyTunables #LocalRoot #PrivilegeEscalation #ExploitPoC #LinuxSecurity #ThreatIntel #Ubuntu https://t.co/0B4lU1x4bT

    Post summary

    The tweet announces a PoC for CVE-2023-4911, describing a GLIBC_TUNABLES buffer overflow in glibc 2.35–2.38 that enables local privilege escalation, and provides a link to a detailed blog post.

    01010127
    41 followersView on X
  • 317ON13_LIRW@ToTo13ru_xakep
    General

    I just completed Looney Tunables room on TryHackMe! CVE-2023-4911: That's all Sec-Folks! https://tryhackme.com/room/looneytunes?utm_campaign=social_share&utm_medium=social&utm_content=room&utm_source=twitter&sharerId=662fb6411f3680a87baf9e1f #tryhackme via @tryhackme

    Post summary

    The post announces completion of a TryHackMe room about CVE-2023-4911 but provides no technical details or evidence of exploitation.

    0000062
     View on X
CPE platform detail83 entries

83 of 83 entries

PartVendorProductVersionTarget SWTarget HW
OScanonicalubuntu_linux22.04--
OScanonicalubuntu_linux23.04--
OSdebiandebian_linux11.0--
OSdebiandebian_linux12.0--
OSfedoraprojectfedora37--
OSfedoraprojectfedora38--
OSfedoraprojectfedora39--
Appgnuglibc---
OSnetappbootstrap_os---
HWnetapph300s---
OSnetapph300s_firmware---
HWnetapph410c---
OSnetapph410c_firmware---
HWnetapph410s---
OSnetapph410s_firmware---
HWnetapph500s---
OSnetapph500s_firmware---
HWnetapph700s---
OSnetapph700s_firmware---
HWnetapphci_compute_node---
Appnetappontap_select_deploy_administration_utility---
Appredhatcodeready_linux_builder9.0--
Appredhatcodeready_linux_builder_eus8.6--
Appredhatcodeready_linux_builder_eus9.2--
Appredhatcodeready_linux_builder_eus9.4--
Appredhatcodeready_linux_builder_eus9.6--
Appredhatcodeready_linux_builder_for_arm649.0_aarch64--
Appredhatcodeready_linux_builder_for_arm64_eus8.6--
Appredhatcodeready_linux_builder_for_arm64_eus9.2_aarch64--
Appredhatcodeready_linux_builder_for_arm64_eus9.4_aarch64--
Appredhatcodeready_linux_builder_for_arm64_eus9.6_aarch64--
Appredhatcodeready_linux_builder_for_ibm_z_systems9.0_s390x--
Appredhatcodeready_linux_builder_for_ibm_z_systems_eus8.6--
Appredhatcodeready_linux_builder_for_ibm_z_systems_eus9.2_s390x--
Appredhatcodeready_linux_builder_for_ibm_z_systems_eus9.4_s390x--
Appredhatcodeready_linux_builder_for_ibm_z_systems_eus9.6_s390x--
Appredhatcodeready_linux_builder_for_power_little_endian9.0_ppc64le--
Appredhatcodeready_linux_builder_for_power_little_endian_eus8.6--
Appredhatcodeready_linux_builder_for_power_little_endian_eus9.2_ppc64le--
Appredhatcodeready_linux_builder_for_power_little_endian_eus9.4_ppc64le--
Appredhatcodeready_linux_builder_for_power_little_endian_eus9.6_ppc64le--
OSredhatenterprise_linux8.0--
OSredhatenterprise_linux9.0--
OSredhatenterprise_linux_eus8.6--
OSredhatenterprise_linux_eus9.2--
OSredhatenterprise_linux_eus9.4--
OSredhatenterprise_linux_eus9.6--
OSredhatenterprise_linux_for_arm_649.0_aarch64--
OSredhatenterprise_linux_for_arm_64_eus8.6_aarch64--
OSredhatenterprise_linux_for_arm_64_eus9.2_aarch64--
OSredhatenterprise_linux_for_arm_64_eus9.4_aarch64--
OSredhatenterprise_linux_for_arm_64_eus9.6_aarch64--
OSredhatenterprise_linux_for_ibm_z_systems9.0_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus9.2_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus9.4_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus9.6_s390x--
OSredhatenterprise_linux_for_ibm_z_systems_eus_s390x8.6--
OSredhatenterprise_linux_for_power_big_endian_eus8.6_ppc64le--
OSredhatenterprise_linux_for_power_little_endian9.0_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus9.2_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus9.4_ppc64le--
OSredhatenterprise_linux_for_power_little_endian_eus9.6_ppc64le--
OSredhatenterprise_linux_server_aus8.6--
OSredhatenterprise_linux_server_aus9.2--
OSredhatenterprise_linux_server_aus9.4--
OSredhatenterprise_linux_server_aus9.6--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.2_ppc64le--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.4_ppc64le--
OSredhatenterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions9.6_ppc64le--
OSredhatenterprise_linux_server_tus8.6--
OSredhatenterprise_linux_update_services_for_sap_solutions9.2--
OSredhatenterprise_linux_update_services_for_sap_solutions9.4--
OSredhatenterprise_linux_update_services_for_sap_solutions9.6--
Appredhatvirtualization4.0--
Appredhatvirtualization_host4.0--
HWsiemenssimatic_s7-1500_cpu_1518-4_pn\/dp_mfp---
OSsiemenssimatic_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware---
HWsiemenssimatic_s7-1500_cpu_1518f-4_pn\/dp_mfp---
OSsiemenssimatic_s7-1500_cpu_1518f-4_pn\/dp_mfp_firmware---
HWsiemenssimatic_s7-1500_tm_mfp---
OSsiemenssimatic_s7-1500_tm_mfp_firmware---
HWsiemenssiplus_s7-1500_cpu_1518-4_pn\/dp_mfp---
OSsiemenssiplus_s7-1500_cpu_1518-4_pn\/dp_mfp_firmware---

Explore more

Back to dashboardcanonical CVEsdebian CVEsfedoraproject CVEsbootstrap_os vulnerabilities