Back Linuxsecurity Ubuntu 22.04 LTS MUNGE Critical Buffer Overflow Threat CVE-2026
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: MUNGE could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - munge: authentication service for credentials Details: Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue to forge MUNGE credentials, leading to arbitrary code execution.
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS - Ubuntu 14.04 LTS Summary: MUNGE could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - munge: authentication service for credentials Details: Titouan Lazard discovered that MUNGE contained an exploitable buffer overflow in munged (the MUNGE authentication daemon). A local attacker could possibly use this issue to forge MUNGE credentials, leading to arbitrary code execution.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libmunge-dev 0.5.16-1ubuntu0.1 libmunge2 0.5.16-1ubuntu0.1 munge 0.5.16-1ubuntu0.1 Ubuntu 24.04 LTS libmunge-dev 0.5.15-4ubuntu0.1 libmunge2 0.5.15-4ubuntu0.1 munge 0.5.15-4ubuntu0.1 Ubuntu 22.04 LTS libmunge-dev 0.5.14-6ubuntu0.1 libmunge2 0.5.14-6ubuntu0.1 munge 0.5.14-6ubuntu0.1 Ubuntu 20.04 LTS libmunge-dev 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro libmunge2 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro munge 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libmunge-dev 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro libmunge2 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro munge 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libmunge-dev 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro libmunge2 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro munge 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS libmunge-dev 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro libmunge2 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro munge 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libmunge-dev 0.5.16-1ubuntu0.1 libmunge2 0.5.16-1ubuntu0.1 munge 0.5.16-1ubuntu0.1 Ubuntu 24.04 LTS libmunge-dev 0.5.15-4ubuntu0.1 libmunge2 0.5.15-4ubuntu0.1 munge 0.5.15-4ubuntu0.1 Ubuntu 22.04 LTS libmunge-dev 0.5.14-6ubuntu0.1 libmunge2 0.5.14-6ubuntu0.1 munge 0.5.14-6ubuntu0.1 Ubuntu 20.04 LTS libmunge-dev 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro libmunge2 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro munge 0.5.13-2ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS libmunge-dev 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro libmunge2 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro munge 0.5.13-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libmunge-dev 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro libmunge2 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro munge 0.5.11-3ubuntu0.1+esm1 Available with Ubuntu Pro Ubuntu 14.04 LTS libmunge-dev 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro libmunge2 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro munge 0.5.11-1ubuntu1.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
