Description
FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.22.0, the RDPSND async playback thread can process queued PDUs after the channel is closed and internal state is freed, leading to a use after free in rdpsnd_treat_wave. This vulnerability is fixed in 3.22.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeRDP | FreeRDP | < 3.22.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | freerdp3 | 3.22.0+dfsg-1 | — |
| Debian 13 | freerdp3 | 3.15.0+dfsg-2.1+deb13u1 | — |
| Debian 12 | freerdp2 | No fix yet | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 25.10 | freerdp3 | 3.16.0+dfsg-2ubuntu0.1 | USN-8042-1 |
| Ubuntu 24.04 LTS | freerdp3 | 3.5.1+dfsg1-0ubuntu1.2 | USN-8042-1 |
| Ubuntu 22.04 LTS | freerdp2 | 2.6.1+dfsg1-3ubuntu2.10 | USN-8042-1 |
| Ubuntu 18.04 LTS | freerdp | No fix yet | — |
| Ubuntu 16.04 LTS | freerdp | No fix yet | — |
Show 3 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 24.04 LTS | freerdp2 | 2.11.5+dfsg1-1ubuntu0.1~esm5 | USN-8042-1 |
| Ubuntu Pro 20.04 LTS | freerdp2 | 2.6.1+dfsg1-0ubuntu0.20.04.2+esm3 | USN-8042-1 |
| Ubuntu Pro 18.04 LTS | freerdp2 | 2.2.0+dfsg1-0ubuntu0.18.04.4+esm5 | USN-8042-1 |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | freerdp +5 | 2:3.10.3-5.el10_1.5 | RHSA-2026:19033, RHSA-2026:6799 |
| RHEL 9 | freerdp +4 | 2:2.11.7-1.el9_7.5 | RHSA-2026:6340 |
| RHEL 8 | freerdp +4 | 2:2.11.7-6.el8_10 | RHSA-2026:6918 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10.0 EUS | freerdp +5 | 2:3.10.3-3.el10_0.5 | RHSA-2026:6743 |
| RHEL 9.6 EUS | freerdp +4 | 2:2.11.7-1.el9_6.7 | RHSA-2026:6727 |
| RHEL 9.4 EUS | freerdp +4 | 2:2.11.2-1.el9_4.5 | RHSA-2026:6958 |
| RHEL 9.2 E4S | freerdp +2 | 2:2.4.1-6.el9_2.6 | RHSA-2026:9641 |
| RHEL 9.0 E4S | freerdp +2 | 2:2.4.1-3.el9_0.4 | RHSA-2026:9640 |
| RHEL 8.8 TUS | freerdp +3 | 2:2.2.0-12.el8_8.5 | RHSA-2026:10076 |
| RHEL 8.8 E4S | freerdp +3 | 2:2.2.0-12.el8_8.5 | RHSA-2026:10076 |
| RHEL 8.6 TUS | freerdp +3 | 2:2.2.0-7.el8_6.5 | RHSA-2026:10951 |
| RHEL 8.6 E4S | freerdp +3 | 2:2.2.0-7.el8_6.5 | RHSA-2026:10951 |
| RHEL 8.6 AUS | freerdp +3 | 2:2.2.0-7.el8_6.5 | RHSA-2026:10951 |
| RHEL 8.4 EUS Long Life | freerdp +3 | 2:2.2.0-12.el8_4 | RHSA-2026:10735 |
| RHEL 8.4 AUS | freerdp +3 | 2:2.2.0-12.el8_4 | RHSA-2026:10735 |
| RHEL 7 ELS | freerdp +4 | 2.1.1-5.el7_9.7 | RHSA-2026:11323 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | freerdp +5 | 2:3.10.3-5.el10_1.5 | ALSA-2026:6799 |
| AlmaLinux 9 | freerdp +4 | 2:2.11.7-1.el9_7.5 | ALSA-2026:6340 |
| AlmaLinux 8 | freerdp +4 | 2:2.11.7-6.el8_10 | ALSA-2026:6918 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 10 | freerdp | 2:3.10.3-5.el10_1.5 | RLSA-2026:6799 |
| Rocky Linux 9 | freerdp | 2:2.11.7-1.el9_7.5 | RLSA-2026:6340 |
| Rocky Linux 8 | freerdp | 2:2.11.7-6.el8_10 | RLSA-2026:6918 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | freerdp | 2.4.0-150400.3.38.1 | SUSE-SU-2026:1217-1, SUSE-SU-2026:0763-1, SUSE-SU-2026:0649-1 |
| SLES 15 SP7 | freerdp2 | 2.11.7-150700.3.8.1 | SUSE-SU-2026:1313-1, SUSE-SU-2026:0683-1 |
| SLES 12 SP5 | freerdp | 2.1.2-12.57.1 | SUSE-SU-2026:0762-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | freerdp | 3.22.0-1.1 | openSUSE-SU-2026:10132-1 |
| openSUSE Tumbleweed | freerdp2 | 2.11.7-5.1 | openSUSE-SU-2026:10243-1 |
| openSUSE Leap 16.0 | freerdp | 3.22.0-160000.1.1 | openSUSE-SU-2026:20339-1 |
| openSUSE Leap 16.0 | freerdp2 | 2.11.7-bp160.2.1 | openSUSE-SU-2026:20320-1 |
| openSUSE Leap 15.6 | freerdp | 2.11.2-150600.4.9.1 | SUSE-SU-2026:1217-1, SUSE-SU-2026:0649-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | freerdp | 3.22.0-r0 | — |
| Alpine v3.23 | freerdp | 3.22.0-r0 | — |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | freerdp +5 | 2:3.6.3-1.amzn2023.0.4 | ALAS2023-2026-1454 |
| Amazon Linux 2 | freerdp +4 | 2:2.11.7-1.amzn2.0.5 | ALAS2-2026-3181 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 10 | freerdp +5 | 2:3.10.3-5.el10_1.5 | ELSA-2026-19033, ELSA-2026-6799 |
| Oracle Linux 9 | freerdp +4 | 2:2.11.7-1.el9_7.5 | ELSA-2026-6340 |
| Oracle Linux 8 | freerdp +4 | 2:2.11.7-6.el8_10 | ELSA-2026-6918 |
| Oracle Linux 7 | freerdp +4 | 2.1.1-5.0.7.el7_9 | ELSA-2026-11323 |
Advisories 39
- ALSA-2026:6799 Important: freerdp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:6340 Important: freerdp security update AlmaLinux Security Advisories · Oct 29, 2026
- ALSA-2026:6918 Important: freerdp security update AlmaLinux Security Advisories · Oct 29, 2026
- USN-8042-1 freerdp2, freerdp3 vulnerabilities Ubuntu Security Notices (USN) · Oct 27, 2026
- RHSA-2026:19033 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Oct 7, 2026
- WID-SEC-2026-0244 FreeRDP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Sep 28, 2026
- RHSA-2026:9641 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:9640 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6958 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6918 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6743 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6799 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6727 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:6340 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:11323 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:10951 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:10735 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- RHSA-2026:10076 Red Hat Security Advisory: freerdp security update Red Hat Security Advisories (RHSA) · Aug 19, 2026
- ALAS2-2026-3181 Important: freerdp security update (Amazon Linux 2) Amazon Linux Security Center (ALAS) · Jul 29, 2026
- ELSA-2026-19033 Important: freerdp security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Jul 8, 2026
- ELSA-2026-11323 Important: freerdp security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 9, 2026
- SUSE-SU-2026:1313-1 Security update for freerdp2 SUSE / openSUSE Security Updates · Apr 15, 2026
- RLSA-2026:6799 Important: freerdp security update Rocky Linux Security Advisories · Apr 9, 2026
- SUSE-SU-2026:1217-1 Security update for freerdp SUSE / openSUSE Security Updates · Apr 9, 2026
- RLSA-2026:6918 Important: freerdp security update Rocky Linux Security Advisories · Apr 9, 2026
- RLSA-2026:6340 Important: freerdp security update Rocky Linux Security Advisories · Apr 7, 2026
- ELSA-2026-6799 Important: freerdp security update (Oracle Linux 10) Oracle Linux Security Advisories (ELSA) · Apr 7, 2026
- ELSA-2026-6918 Important: freerdp security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Apr 7, 2026
- ELSA-2026-6340 Important: freerdp security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Apr 1, 2026
- openSUSE-SU-2026:20339-1 Security update for freerdp SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2026:10243-1 freerdp2-2.11.7-5.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2026:10132-1 freerdp-3.22.0-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- SUSE-SU-2026:0683-1 Security update for freerdp2 SUSE / openSUSE Security Updates · Mar 23, 2026
- openSUSE-SU-2026:20320-1 Security update for freerdp2 SUSE / openSUSE Security Updates · Mar 5, 2026
- ALAS2023-2026-1454 Important: freerdp security update (Amazon Linux 2023) Amazon Linux Security Center (ALAS) · Mar 5, 2026
- SUSE-SU-2026:0763-1 Security update for freerdp SUSE / openSUSE Security Updates · Mar 4, 2026
- SUSE-SU-2026:0762-1 Security update for freerdp SUSE / openSUSE Security Updates · Mar 4, 2026
- SUSE-SU-2026:0649-1 Security update for freerdp SUSE / openSUSE Security Updates · Feb 26, 2026
- SUSE-SU-2026:0621-1 Security update for freerdp SUSE / openSUSE Security Updates · Feb 26, 2026