gpsd is a daemon that collects GPS data from receivers and serves it to client applications over network or local interfaces.
Overview
gpsd is a daemon that collects GPS data from receivers and serves it to client applications over network or local interfaces. Recent advisories describe critical gpsd vulnerabilities: a buffer overflow leading to denial-of-service (CVE-2025) on Fedora 42, and a separate critical Denial of Service vulnerability affecting Ubuntu 25.10 (USN-7948), signaling a risk of service disruption if unpatched.
Related Threat Clusters
-
Critical GPSd Vulnerabilities Affect Multiple Ubuntu Releases
Multiple security vulnerabilities were discovered in GPSd affecting Ubuntu 25.10 and earlier versions. An attacker could exploit these vulnerabilities to cause denial of service or potentially execute arbitrary code by…
2 articles · Updated January 8, 2026 -
Critical DoS Vulnerability in gpsd Affects Multiple Linux Distributions
A critical heap-based out-of-bounds write vulnerability was identified in gpsd, affecting Linux distributions like Mageia and Debian 11. The vulnerability, located in the hnd_129540 function, allows attackers to exploit…
2 articles · Updated January 30, 2026 -
Critical Buffer Overflow Vulnerability in gpsd Affects Fedora 42 and 43
A critical buffer overflow vulnerability (CVE-2025) was identified in gpsd, a daemon that facilitates access to GPS sensors on Fedora systems. This vulnerability affects users of Fedora 42 and 43, allowing potential…
2 articles · Updated January 20, 2026
Recent Intelligence Reports
- Mageia 9 gpsd Critical DoS Heap Overflow Vulnerability MGASA-2026 — Linuxsecurity · January 30, 2026
- Fedora 42: gpsd Critical Buffer Overflow & DoS CVE-2025 — Linuxsecurity · January 20, 2026
- Debian 11: gpsd Critical DoS Heap Issue DLA-4441-1 CVE-2025 — Linuxsecurity · January 19, 2026
- Ubuntu 25.10: GPSd Critical Denial of Service Vulnerability USN-7948 — Linuxsecurity · January 8, 2026