Alerts This Week
Warning Icon 1 1,489
Alerts This Week
Warning Icon 1 1,489

Ubuntu 25.10 Vim Critical Denial Service Fix USN-8101-1 CVE-2026-25749

ubuntu
Calendar Grey March 18, 2026
Dist Ubuntu Esm H88
Updates for Vim on Ubuntu fix multiple critical issues, enabling potential denial of service or code execution risks.
Several security issues were fixed in Vim.

Summary

Several security issues were fixed in Vim.

Software Description:

- vim: Vi IMproved - enhanced vi editor

Details:

Rahul Hoysala discovered that Vim did not correctly handle certain tag

resolutions. An attacker could possibly use this issue to cause a denial

of service. (CVE-2026-25749)

It was discovered that Vim did not correctly handle processing certain

specialKey commands. An attacker could possibly use this issue to cause a

denial of service or execute arbitrary code. (CVE-2026-26269)

Kim Dong Han discovered that Vim did not correctly handle opening certain

URLs. If a user or system were tricked into opening a specially crafted

file, an attacker could possibly use this issue to execute arbitrary code.

(CVE-2026-28417)

Kim Dong Han discovered that Vim did not correctly handle parsing

Emacs-style tag files. An attacker could possibly use this issue to cause

a denial of service. (CVE-2026-28418, CVE-2026-28419)

Kim Dong Han discovered that Vim did not correctly handle proce...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial service critical software update Ubuntu vim

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  vim                             2:9.1.0967-1ubuntu6.1

Ubuntu 24.04 LTS
  vim                             2:9.1.0016-1ubuntu7.10

Ubuntu 22.04 LTS
  vim                             2:8.2.3995-1ubuntu2.26

Ubuntu 20.04 LTS
  vim                             2:8.1.2269-1ubuntu5.32+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  vim                             2:8.0.1453-1ubuntu1.13+esm14
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  vim                             2:7.4.1689-3ubuntu1.5+esm29
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  vim                             2:7.4.052-1ubuntu3.1+esm23
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8101-1

CVE-2026-25749, CVE-2026-26269, CVE-2026-28417, CVE-2026-28418,

CVE-2026-28419, CVE-2026-28420, CVE-2026-28421, CVE-2026-28422

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8101-1

Topics%20covered

Topics Covered

security advisory denial service critical software update Ubuntu vim

Package Information

https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.1
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.10
https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.26

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here