Skip to main content

Ubuntu Linux CVE-2026-94282

| EUVDEUVD-2026-88168 MEDIUM
Out-of-bounds Read (CWE-125)
2026-09-25 vendor:ubuntu GHSA-p77j-q345-2f8c
Buffer Overflow Information Disclosure Red Hat Suse
5.6
CVSS 3.1 · Vendor: vendor:ubuntu
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Access
    Identify affected Ubuntu package
  2. Exploit
    Determine unknown vulnerability class
  3. Impact
    Impact undetermined

Vulnerability Assessment

Weakness
CWE
CWE-125
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, read limits
MITRE ATT&CK

1 technique across 1 tactic: Collection

The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up.

Sign in to read
Exploitation Conditions

Cannot be determined. The CVE description is absent, so no product feature, protocol, configuration setting, deployment mode, authentication level, or user-interaction requirement can be extracted. The sole datum is that the flaw is tracked for an Ubuntu-shipped package. Enrichment from the Ubuntu Security Notice and upstream advisory is required to state any concrete prerequisite or limiting factor.
Impact

Risk cannot be meaningfully assessed from the provided data. There is no description, no CVSS base score or vector, no CWE, no EPSS probability, no KEV listing, no POC indicator, and no SSVC decision data. The only signal is that the CVE is tracked by the Ubuntu security team (vendor:ubuntu), which implies it affects a software package shipped in the Ubuntu ecosystem (potentially the Linux kernel, a core library, or an application package), but the specific component, impact, and attack surface are all unknown. With no exploitation-probability or severity signals available, this cannot be triaged as either a confirmed high priority or a confirmed low-real-risk issue - it is simply undetermined. CRITICAL GAP: every scoring input a defender would normally weigh (attack vector, complexity, privileges, technical impact, automatability, exploitation status) is missing; the CVE must be enriched from NVD, the Ubuntu Security Notices/CVE tracker, and the upstream project advisory before any risk decision is made.
Exploit ScenarioDerived

No exploit scenario can be constructed because the vulnerability class, affected component, and attack vector are all unknown. The only established fact is that Ubuntu is tracking the issue for one of its packages. No public exploit code is indicated in the provided data.
This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).
Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Sep 25, 2026

Risk cannot be meaningfully assessed from the provided data. CVE-2026-94282 is reported solely by the vendor source 'ubuntu', indicating that a package distributed through Ubuntu channels is affected, but no description, CVSS score, CVSS vector, CWE identifier, or affected-version metadata accompanies the record, so the nature of the flaw, the attack surface, and the deployment contexts at risk are all unknown. Exploitation status: no public exploit identified at time of analysis. Authentication requirements are not confirmed from available data, and no CISA KEV listing or EPSS score was provided to indicate real-world exploitation or likelihood. Until the corresponding Ubuntu Security Notice and upstream advisory are retrieved, this record should be treated as an unresolved tracking identifier rather than a characterized vulnerability.

RemediationAI

No vendor-released patch identified at time of analysis, and no patch version, advisory URL, or upstream commit was included in the provided data, so no upgrade target can be specified without risking an invented version number. The immediate actionable step is to obtain the authoritative record: monitor the Ubuntu Security Notices feed and the Ubuntu CVE tracker entry for CVE-2026-94282 to capture the affected package list, the fixed version, and any interim guidance the moment it is published. Because the vulnerable component is unidentified, targeted compensating controls (disabling a specific feature, blocking a specific port, or restricting a specific endpoint) cannot be prescribed responsibly; doing so would be guesswork. In the interim, the defensible actions are inventorying Ubuntu hosts and installed package versions so affected systems can be located quickly, ensuring unattended-upgrades or an equivalent patch pipeline is functional so a fix can be deployed promptly, and applying exposure reduction at the perimeter. Any such measure carries a trade-off - tightening network access or restricting services may break legitimate functionality - so changes should be evaluated against the confirmed attack surface only after the advisory is available.

Affected VersionsENISA

libXi 0 <1.8.4

Affected Packages

euvd libxi fix: 1.8.4

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

The underlying technology, library, or protocol involved cannot be determined because the CVE description field is empty and no CWE classification was supplied. Without a CWE, the root-cause class cannot be established - whether this is an input-validation defect, a memory-safety issue, an access-control error, a cryptographic weakness, or a logic flaw is entirely unknown, and each of those classes implies a very different exploitation model and mitigation strategy. No CPE strings were provided, so the exact affected product, package name, and version range remain unidentified beyond the single attribution to the Ubuntu vendor source, which indicates only that Ubuntu tracks, builds, or ships the impacted component. Enrichment from the Ubuntu Security Notice, the Ubuntu CVE tracker entry, and the originating upstream project advisory is required before any technical characterization, attack-path analysis, or severity judgment can be made.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (vendor:ubuntu) PRIMARY 5.6 MEDIUM
AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H
SUSE 6.1 MEDIUM
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Red Hat 6.1 MEDIUM

Primary rating from Vendor (vendor:ubuntu).

CVSS VectorVendor: vendor:ubuntu

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High

Lifecycle Timeline

2
Patch available
Sep 28, 2026 - 10:16 EUVD
CVSS changed
Sep 28, 2026 - 09:22 NVD
5.6 (MEDIUM)

DescriptionCVE.org

[Unknown description]

Threat Intelligence Overview

EPSS Score
0.1%
Top 98% exploitable
Data Quality
4 sources
Confidence: Medium
EUVD NVD CVE.org EPSS MSRC Vendor

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity MEDIUM
CISA KEV No
Public POC No
EPSS 0.1%
Patch available Yes
Active threat No
Deciding rule
MEDIUM severity (CVSS 4.0-6.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Defer
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact· derived
Medium

Priority Score

28
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +28
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Buffer Overflow HIGH

A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Same weakness CWE-125 – Out-of-bounds Read

View all
CVE-2014-0160 HIGH POC
7.5
CVE-2016-5198 HIGH POC
8.8
CVE-2025-5777 CRITICAL POC
9.3
CVE-2016-1646 HIGH POC
8.8
CVE-2017-5030 HIGH POC
8.8
CVE-2016-4523 HIGH
7.5
CVE-2024-48456 HIGH POC
7.5
CVE-2024-48457 HIGH POC
7.5

Same technique Buffer Overflow

View all
CVE-2017-7269 CRITICAL POC
9.8
CVE-2015-5119 CRITICAL POC
9.8
CVE-2015-3113 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2020-0796 CRITICAL POC
10.0
CVE-2019-11043 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8

Vendor StatusVendor

SUSE

Severity: Moderate
Product Status
openSUSE Tumbleweed Fixed
SUSE Linux Enterprise Micro 5.3 Affected
SUSE Linux Enterprise Micro 5.4 Affected
SUSE Linux Enterprise Micro 5.5 Affected
SUSE Linux Enterprise Module for Basesystem 15 SP7 Affected

References

Advisories & patches
ADVISORY https://gitlab.freedesktop.org/xorg/lib/libx11/-/commit/924fc91f0 ADVISORY https://gitlab.freedesktop.org/xorg/lib/libxrender/-/commit/0564bce54 ADVISORY https://gitlab.freedesktop.org/xorg/lib/libxtst/-/commit/ac60f5f47 ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-94282 ADVISORY https://seclists.org/oss-sec/2026/q4/212 REF https://gitlab.freedesktop.org/xorg/lib/libxi/-/merge_requests/23/diffs?commit_id=cecf160e9731fe01f3632f875f29ffcb598b052a

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy