Linuxsecurity
Critical Vulnerability in Ubuntu 22.04 LTS Zutty Allows Arbitrary Command Execution
First seen 6 Mar 2026, 08:11 UTC
•
•66.8
Export
Article Content
Browse articles
A security vulnerability has been identified in Zutty, an X terminal emulator included in Ubuntu 22.04 LTS. Discovered by Carter Sande, the flaw allows attackers to execute arbitrary commands by exploiting improper input handling on DECRQSS. Users of Ubuntu and its derivatives are advised to apply patches to mitigate this risk.
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Timeline
2022-09-20
CVE-2022-41138 published
2026-03-05
Ubuntu announces USN-8078-1 for Zutty vulnerability
2026-03-06
Linuxsecurity reports on Zutty vulnerability
More articles in this cluster
Continue Reading
Critical RCE Vulnerability in Rails Active Storage Disclosed
Critical NGINX Vulnerability CVE-2026-42945 Exposes Millions to RCE and DoS Attacks
Supply Chain Attack Compromises DAEMON Tools with Malicious Backdoor
Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks
Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS
Critical ldns Vulnerability in Ubuntu Allows Spoofed DNS Responses