Back Linuxsecurity

Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found

Linuxsecurity •LinuxSecurity Advisories • September 2, 2026

Keep your Linux systems secure and up to date with practical patching guidance. Review Linux Patching Best Practices ×

BioSig could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - biosig: Open-source software library for biomedical signal processing Details: Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input files. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code. (CVE-2026-22891, CVE-2026-20777)

BioSig could be made to crash or run programs as your login if it

opened a specially crafted file.

Software Description:

- biosig: Open-source software library for biomedical signal processing

Mark Bereza and Lilith Wyatt discovered that BioSig incorrectly handled certain crafted input

files. An attacker could possibly use this issue to cause a denial of

service or execute arbitrary code. (CVE-2026-22891, CVE-2026-20777)

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS libbiosig3 3.9.0-1ubuntu0.1~esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS libbiosig3 2.6.0-1ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS libbiosig3 2.3.3-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2026-20777, CVE-2026-22891

Ubuntu Security Notice USN-8713-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical BioSig Vulnerabilities in Ubuntu 26.04 LTS Discovered Two critical vulnerabilities (CVE-2026-22891, CVE-2026-20777) have been identified in the BioSig library, an open-source software for biomedical signal processing. Discovered by researchers Mark Bereza and Lilith Wyatt, these vulnerabilities allow an attacker to crash the application or execute arbitrary code by opening specially crafted files. Affected systems include Ubuntu 26.04 LTS and earlier versions, with updates available through Ubuntu Pro. Users are urged to apply standard system updates to mitigate risks. The vulnerabilities were published on March 3, 2026, and are now addressed in the latest package versions. The potential impact includes denial of service and unauthorized code execution, which could compromise system integrity. Current status indicates that patches are available, and users should update their systems immediately to prevent exploitation. 2 sources 46

Extracted Entities

Ubuntu 26.04 LTS BioSig Critical Denial of Service Vulnerabilities Found

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (2)

Platforms (1)