Linuxsecurity Multiple rsync Vulnerabilities Affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS
Article Content
- •rsync vulnerabilities affect Ubuntu 22.04, 24.04, 25.10, and 26.04 LTS.
- •CVE-2025-10158 and CVE-2026-29518 pose significant risks including denial of service and privilege escalation.
- •Immediate updates are necessary to secure affected systems against these vulnerabilities.
Several vulnerabilities were identified in the rsync tool affecting multiple Ubuntu LTS versions. CVE-2025-10158 allows remote attackers to cause a denial of service through a heap-based out-of-bounds read. CVE-2026-29518 exposes rsync daemons without chroot protection to race conditions, enabling local attackers to overwrite files or escalate privileges. Additional vulnerabilities (CVE-2026-41035, CVE-2026-43617, CVE-2026-43618, CVE-2026-43619, CVE-2026-45232) were also discovered, some allowing denial of service or information disclosure. Affected systems include Ubuntu 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS. Users are advised to update their systems to mitigate these risks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (10)
Following this threat?
Track Ubuntu and CVE-2025-10158 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…