AIKIDO-2026-10655
glib is vulnerable to Use-after-free
68
Medium Risk
This Affects:
glibTL;DR
In glib collection retain() for list/slist, deleting the current (possibly head) node could invalidate pointers/links that were later used during element dropping, leading to a use-after-free. The patch changes the deletion flow to update the head pointer from g_list_delete_link/g_slist_delete_link and only then drop the preserved element value, preventing use of stale list pointers.
Who does this affect?
You are using the glib List/SList retain() logic in versions prior to 0.22.7
Background info
glib is vulnerable to Use-after-free in versions 0.0.1 - 0.22.6.
How to fix this
Upgrade to version 0.22.7 or later
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant