Back Linuxsecurity

Fedora 44 Emacs Important Memory Corruption CVE-2026

Linuxsecurity •LinuxSecurity Advisories • May 1, 2026

GNU Emacs is a powerful, customizable, self-documenting, modeless text editor. It contains special code editing features, a scripting language (elisp), and the capability to read mail, news, and more without leaving the editor. Update Information : Fix CVE-2026-6861: memory corruption vulnerability when processing SVG CSS.

GNU Emacs is a powerful, customizable, self-documenting, modeless text

editor. It contains special code editing features, a scripting language

(elisp), and the capability to read mail, news, and more without leaving

Fix CVE-2026-6861: memory corruption vulnerability when processing SVG CSS.

* Wed Apr 22 2026 Peter Oliver - 1:30.2-23 - Fix CVE-2026-6861: memory corruption vulnerability when processing SVG CSS. * Tue Mar 31 2026 Peter Oliver - 1:30.2-22 - Fix bad backport of Tree-sitter 0.26 compatibility patch. * Mon Mar 30 2026 Andreas Schneider - 1:30.2-21 - Rebuild against tree-sitter-0.26.7-2.fc45

[ 1 ] Bug #2460586 - CVE-2026-6861 emacs: Emacs: Memory corruption vulnerability when processing SVG CSS [fedora-all]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-49b8ca7981' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Memory Corruption Vulnerability in GNU Emacs Affects Fedora 42 and 44 A memory corruption vulnerability, identified as CVE-2026-6861, was published on April 22, 2026, affecting GNU Emacs when processing SVG CSS. This issue impacts users of Fedora 42 and Fedora 44, with specific updates released to address the vulnerability. The vulnerability could potentially allow attackers to exploit the memory corruption, although no active exploitation has been reported. Users are advised to update their systems using the provided commands to mitigate the risk. The updates were released by Peter Oliver, with version updates noted for both Fedora distributions. The vulnerability is significant enough to warrant immediate attention from users of the affected versions. The updates can be installed using the 'dnf' package manager, ensuring users are protected from potential exploits. 2 sources 46

Extracted Entities

CVEs (1)

CVE-2026-6861