Description
llvm-project commit bd456297 was discovered to contain a segmentation fault via the component mlir::Block::getArgument.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 12 | llvm-toolchain-13 +2 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | llvm-toolchain-13 | 1:13.0.1-2ubuntu2.2 | USN-6258-1 |
| Ubuntu 22.04 LTS | llvm-toolchain-14 | 1:14.0.0-1ubuntu1.1 | USN-6258-1 |
| Ubuntu 22.04 LTS | llvm-toolchain-15 | 1:15.0.7-0ubuntu0.22.04.3 | USN-6258-1 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | clang16 | 16.0.0-2 | — |
| Azure Linux 2 (CBL-Mariner) | llvm16 | 16.0.0-4 | — |
Advisories 1
- USN-6258-1 llvm-toolchain-13, llvm-toolchain-14, llvm-toolchain-15 vulnerabilities Ubuntu Security Notices (USN) · Apr 22, 2026