Critical DoS Vulnerability in gpsd Affects Multiple Linux Distributions

Critical DoS Vulnerability in gpsd Affects Multiple Linux Distributions

First seen 30 Jan 2026, 12:26 UTC Linuxsecurity 46.3

Article Content

Browse articles
ThreatCluster

A critical heap-based out-of-bounds write vulnerability was identified in gpsd, affecting Linux distributions like Mageia and Debian 11. The vulnerability, located in the hnd_129540 function, allows attackers to exploit the failure to validate user-supplied satellite counts, potentially leading to memory corruption and Denial of Service (DoS). The issue is tracked under CVE-2025-67268.