CVE-2015-8984: The fnmatch function in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dependent at...

Security readout for executives and security teams

This is a glibc issue in the filename-pattern matching function. In vulnerable versions before glibc 2.22, a malformed pattern can crash an application in some contexts. Business impact is mainly service disruption, not documented data theft or code execution in the provided sources. Most relevant to older Linux systems or embedded appliances using glibc/libc6 before 2.22, especially applications that accept user-supplied filename or glob-style patterns. Modern supported distributions may already include fixes or backports. Treat as a hygiene and resilience issue for legacy Linux estates. It is not KEV-listed and no active exploitation is cited, but exposed services on old glibc should be updated during normal vulnerability remediation cycles. Mitigation focus: Update glibc/libc6 through supported vendor packages that include the upstream fix.; Prioritize internet-facing services that process user-controlled filename or pattern inputs.; Check vendor advisories for backported fixes on distributions reporting versions below 2.22..

Prepared

Jun 13, 2026, 06:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.