Critical tmux Vulnerability in Ubuntu Leads to Denial of Service Risk

A use-after-free vulnerability was discovered in tmux, affecting Ubuntu 26.04 LTS and its derivatives. This flaw allows a local attacker to craft specific inputs that could cause tmux to crash, resulting in a denial of service. The vulnerability is identified in Ubuntu Security Notice USN-8428-1, and it is crucial for users to update their systems to mitigate this risk. The affected package version is tmux 3.6a-2ubuntu0.1. A standard system update will apply the necessary changes to address this issue. No active exploitation has been reported as of now, but the potential for local denial of service attacks exists. Users are advised to ensure their systems are updated promptly to avoid any disruptions.

Key Points: • A use-after-free vulnerability in tmux could allow local denial of service attacks. • Affected systems include Ubuntu 26.04 LTS and its derivatives. • Users should update to tmux 3.6a-2ubuntu0.1 to mitigate the risk.