{"schemaVersion":3,"id":"USN-8845-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"gvfs vulnerabilities\n\nKeith Linneman discovered that GVfs did not properly validate data\nreceived from SFTP servers. An attacker could possibly use this issue to\ncause a heap buffer overflow, resulting in arbitrary code execution or a\ndenial of service. (CVE-2026-84268)\n\nIt was discovered that GVfs incorrectly handled file ownership when\ncreating private D-Bus sockets in the admin backend. A local attacker\ncould possibly use this issue to change the ownership of arbitrary\nsystem files, resulting in privilege escalation to root. This issue only\naffected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04 LTS.\n(CVE-2026-88924)","dates":{"published":"2026-09-30T15:54:56.000Z","modified":"2026-10-01T06:27:36.427Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"gvfs","name":"gvfs","label":"gvfs","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/gvfs","purlType":"deb","versions":[{"text":"< 1.28.2-1ubuntu1~16.04.3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.36.1-0ubuntu1.3.3+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.44.1-1ubuntu1.2+esm1","noFixRecorded":false,"fixedIn":null},{"text":"< 1.48.2-0ubuntu1.2","noFixRecorded":false,"fixedIn":null},{"text":"< 1.54.4-0ubuntu1~24.04.4","noFixRecorded":false,"fixedIn":null},{"text":"< 1.60.0-1ubuntu0.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.2-1ubuntu1~16.04.3+esm1 | < 1.36.1-0ubuntu1.3.3+esm1 | < 1.44.1-1ubuntu1.2+esm1 | < 1.48.2-0ubuntu1.2 | < 1.54.4-0ubuntu1~24.04.4 | < 1.60.0-1ubuntu0.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-8845-1","label":"ubuntu.com/security/notices/USN-8845-1","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2026-84268","label":"ubuntu.com/security/CVE-2026-84268","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2026-88924","label":"ubuntu.com/security/CVE-2026-88924","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2026-84268","CVE-2026-88924"],"downstream":[],"duplicates":[],"related":["CVE-2026-84268","CVE-2026-88924"]},"timeline":[{"kind":"published","date":"2026-09-30T15:54:56.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-10-01T06:27:36.427Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:19:09.464Z","stale":false,"partial":false}}