Critical Lua Vulnerability in Ubuntu 16.04 Allows Denial of Service and Code Execution

Linuxsecurity

Critical Lua Vulnerability in Ubuntu 16.04 Allows Denial of Service and Code Execution

First seen 8 May 2026, 15:39 UTC • •72.0

Article Content

1 / 3

Browse articles

ThreatCluster •May 9, 2026 at 15:39 UTC

•CVE-2025-49844 allows denial of service and arbitrary code execution in Lua.
•Affected systems include Ubuntu 16.04 LTS with lua5.1 and liblua5.1-0 packages.
•Users should update to the latest package versions to mitigate the vulnerability.

A significant vulnerability (CVE-2025-49844) has been identified in the Lua parser used in Ubuntu 16.04. This flaw allows remote attackers to craft malicious Lua scripts that can crash the Lua interpreter or execute arbitrary code under the user's login. The vulnerability stems from improper handling of garbage collection in the Lua parser. Affected systems include Ubuntu 16.04 LTS with lua5.1 and liblua5.1-0 packages. Users are advised to update their systems to the patched versions provided by Ubuntu Pro. The vulnerability was published on October 3, 2025, and has a known proof of concept dating back to April 13, 2019. Immediate action is recommended to mitigate potential risks.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 124d ago How this analysis works

Timeline

2019-04-13

First public PoC released

A proof of concept for exploiting the Lua vulnerability was made public.

2025-10-03

CVE-2025-49844 published

A vulnerability in Lua's garbage collection was disclosed, affecting Ubuntu 16.04.

2026-05-08

Security advisory issued

Ubuntu released a security notice urging users to update their systems to patch the Lua vulnerability.

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (2)

Denial of Service
Lua

Organization (1)

Ubuntu

Vulnerability (1)

CVE-2025-49844

Weakness (1)

CWE-94 - Code Injection

Affected Platform (1)

Lua 5.1

Relationships

CVE-2025-49844 targets Lua 5.1
Denial of Service targets Lua 5.1
Lua targets Lua 5.1
CVE-2025-49844 related to Ubuntu
CVE-2025-49844 related to CWE-94 - Code Injection

Following this threat?

Track Ubuntu and CVE-2025-49844 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical PostgreSQL Vulnerability Exposes Databases to Remote Code Execution A critical vulnerability, tracked as CVE-2026-6471 and dubbed PostGREShell, has been discovered in PostgreSQL, affecting versions since 2014. This flaw allows attackers with low-privilege replication accounts to execute arbitrary code on the database server, leading to full database and server compromise. The…

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…