Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-4751 EUVD-2026-14768GHSA-9g3x-ch5w-33ch

NULL Pointer Dereference in tmate-io tmate

Published Mar 24, 2026 · Updated Mar 24, 2026 · Assigned by GovTech CSG

Description

NULL Pointer Dereference vulnerability in tmate-io tmate.This issue affects tmate: before 2.4.0.

Affected products

VendorProductAffectedFixed
tmate-io tmate — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 tmate 2.4.0-4.1 —
Debian 13 tmate No fix yet —
Debian 12 tmate No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 tmate No fix yet —
Ubuntu 26.04 LTS tmate No fix yet —
Ubuntu 25.10 tmate No fix yet —
Ubuntu 24.04 LTS tmate No fix yet —
Ubuntu 22.04 LTS tmate No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS tmate No fix yet —
Ubuntu 18.04 LTS tmate No fix yet —
Ubuntu 16.04 LTS tmate No fix yet —

References