Medium · 5.4 Rejected CVE-2026-73860 EUVD-2026-118481

REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18107. Reason: This candidate is a duplicate of CVE-2026-18107. Notes: …

Published Nov 6, 2026 · Updated Nov 9, 2026 · Assigned by GitHub_M

Package: criu Package: criu Package: criu Ecosystem: Azure Linux Ecosystem: Debian Ecosystem: Ubuntu

Description

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-18107. Reason: This candidate is a duplicate of CVE-2026-18107. Notes: All CVE users should reference CVE-2026-18107 instead of this candidate.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Debian

Security tracker ↗

Release	Package	Fixed in	Advisory
Debian 14	criu	4.2-5	—
Debian 13	criu	No fix yet	—
Debian 12	criu	No fix yet	—

Ubuntu