Glibc: buffer overflow in ld.so leading to privilege escalation

A flaw in Linux's core library allows attackers to overflow a buffer by setting a special environment variable, potentially letting them run malicious code with administrator rights on vulnerable systems.

A buffer overflow exists in glibc's ld.so dynamic loader during GLIBC_TUNABLES environment variable parsing. Local attackers can exploit this via crafted environment variables on SUID binaries to achieve arbitrary code execution with elevated privileges; exploitation requires local access and presence of a vulnerable SUID binary.