glibc ld.so Local Privilege Escalation

Dubbed Looney Tunables, Qualys discovered a buffer overflow vulnerability in the glibc dynamic loader's processing of the GLIBC_TUNABLES environment variable. This vulnerability was introduced in April 2021 (glibc 2.34) by commit 2ed18c.

april buffer buffer overflow buffer overflow vulnerability commit dynamic environment environment variable escalation glibc loader local local privilege escalation looney tunables overflow privilege privilege escalation qualys tunables variable vulnerability