Back Linuxsecurity

Ubuntu Emacs Important Memory Corruption DoS USN-8835-1 CVE-2026

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Emacs could be made to crash or expose sensitive information if it opened a specially crafted file. Software Description: - emacs: GNU Emacs editor Details: It was discovered that Emacs improperly handled specially crafted SVG images, resulting in memory corruption. An attacker could possibly use this issue to cause Emacs to crash, resulting in a denial of service, or obtain sensitive information.

Emacs could be made to crash or expose sensitive information if it opened

a specially crafted file.

Software Description:

- emacs: GNU Emacs editor

It was discovered that Emacs improperly handled specially crafted SVG

images, resulting in memory corruption. An attacker could possibly use

this issue to cause Emacs to crash, resulting in a denial of service, or

obtain sensitive information.

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS emacs 1:30.2+1-2ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 24.04 LTS emacs 1:29.3+1-1ubuntu2+esm4 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

Ubuntu Security Notice USN-8835-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Emacs Vulnerability Leads to Potential DoS and Information Exposure A vulnerability in Emacs, identified as USN-8835-1, allows attackers to crash the application or expose sensitive information by opening specially crafted SVG files. The flaw stems from improper handling of these files, leading to memory corruption. Affected systems include Ubuntu 26.04 LTS and 24.04 LTS versions of Emacs. Users are advised to update their systems to mitigate the risk. The vulnerability has been confirmed by multiple sources, including Ubuntu and Linuxsecurity. A standard system update is recommended to apply necessary changes. The vulnerability is associated with CVE-2026, although specific CVE details were not provided in the articles. No active exploitation has been reported as of now. 2 sources 46

Extracted Entities

Ubuntu Emacs Important Memory Corruption DoS USN-8835-1 CVE-2026

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)

Platforms (1)