Libwebsockets Vulnerabilities Lead to Denial of Service Risks in Ubuntu

Libwebsockets Vulnerabilities Lead to Denial of Service Risks in Ubuntu

First seen 12 Feb 2026, 16:43 UTC LinuxsecurityUbuntu 28.0

Article Content

Browse articles
ThreatCluster

Multiple vulnerabilities in Libwebsockets affect Ubuntu 20.04, 22.04, and 24.04 LTS. Discovered by Raffaele Bova, these issues include improper memory handling and buffer size checks that could allow attackers to cause denial of service or execute arbitrary code. The vulnerabilities are tracked as CVE-2025-11677 and CVE-2025-11678, both published on October 20, 2025.

Timeline

2025-10-20
CVE-2025-11677 and CVE-2025-11678 published
2026-02-11
Ubuntu releases advisory USN-8024-1 on Libwebsockets vulnerabilities
2026-02-12
Linuxsecurity reports on USN-8024 regarding Libwebsockets