Skip to content
OpenAdvisories
Medium USN-8428-1 1 CVE

tmux vulnerability

Published Jun 15, 2026 · Updated Jun 15, 2026

Ecosystem: Ubuntu

Summary

It was discovered that tmux incorrectly handled image cleanup, leading to
a use-after-free vulnerability. A local attacker could possibly use this
issue to cause tmux to crash, resulting in a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS tmux 3.6a-2ubuntu0.1

Vulnerabilities 1

  • Medium 4.5
    CVE-2026-11623

    tmux image.c image_free use after free

    A security vulnerability has been detected in tmux up to 3.6a. Affected is the function image_free of the file image.c. Such manipulation leads to use after free. Local access is required to approach this attack. This attack is characterized by high complexit…

    tmux tmux tmux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-11623