Ubuntu 26.04 LTS nginx Critical Denial of Service 2026-42945

ubuntu

May 14, 2026

nginx could be made to crash or run programs if it received specially crafted network traffic.

Summary

nginx could be made to crash or run programs if it received specially

crafted network traffic.

Software Description:

- nginx: small, powerful, scalable web/proxy server

Details:

It was discovered that the nginx ngx_http_rewrite_module component

incorrectly handled certain rewrite directives. A remote attacker could use

this issue to cause nginx to crash, resulting in a denial of service, or

possibly execute arbitrary code.

Topics Covered

security advisory denial of service critical Ubuntu nginx network attack

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
  nginx                           1.28.3-2ubuntu1.1
  nginx-core                      1.28.3-2ubuntu1.1
  nginx-extras                    1.28.3-2ubuntu1.1
  nginx-full                      1.28.3-2ubuntu1.1
  nginx-light                     1.28.3-2ubuntu1.1

Ubuntu 25.10
  nginx                           1.28.0-6ubuntu1.3
  nginx-core                      1.28.0-6ubuntu1.3
  nginx-extras                    1.28.0-6ubuntu1.3
  nginx-full                      1.28.0-6ubuntu1.3
  nginx-light                     1.28.0-6ubuntu1.3

Ubuntu 24.04 LTS
  nginx                           1.24.0-2ubuntu7.8
  nginx-core                      1.24.0-2ubuntu7.8
  nginx-extras                    1.24.0-2ubuntu7.8
  nginx-full                      1.24.0-2ubuntu7.8
  nginx-light                     1.24.0-2ubuntu7.8

Ubuntu 22.04 LTS
  nginx                           1.18.0-6ubuntu14.11
  nginx-core                      1.18.0-6ubuntu14.11
  nginx-extras                    1.18.0-6ubuntu14.11
  nginx-full                      1.18.0-6ubuntu14.11
  nginx-light                     1.18.0-6ubuntu14.11

In general, a standard system update will make all the necessary changes.