CVE-2026-92392
Fixed in a distro release EPSS 1%CVSS 8.1
During an upload, curl mishandles HTTP/2 `RST_STREAM` received from the server (with reason `HTTP_1_1_REQUIRED` or `REFUSED_STREAM`) leading to a use after free of a `struct Curl_easy` object.
Products: curl
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Alpine 3.21 | curl | 8.14.1-r3 |
| Alpine 3.22 | curl | 8.14.1-r4 |
| Alpine 3.23 | curl | 8.23.0-r0 |
| Alpine 3.24 | curl | 8.23.0-r0 |
| Amazon Linux 2023 | curl | 8.21.0-5.amzn2023.0.3 |
| Amazon Linux 2023 | curl-minimal | 8.21.0-5.amzn2023.0.3 |
| Amazon Linux 2023 | libcurl | 8.21.0-5.amzn2023.0.3 |
| Amazon Linux 2023 | libcurl-devel | 8.21.0-5.amzn2023.0.3 |
| Amazon Linux 2023 | libcurl-minimal | 8.21.0-5.amzn2023.0.3 |
| Chainguard | curl | 8.23.0-r0 |
| Debian 13 | curl | 8.14.1-2+deb13u7 |
| Debian 14 | curl | no fix |
| Red Hat hummingbird 1 | cargo | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | clippy | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | curl | 0:8.23.0-0.1.hum1 |
| Red Hat hummingbird 1 | libcurl | 0:8.23.0-0.1.hum1 |
| Red Hat hummingbird 1 | libcurl-devel | 0:8.23.0-0.1.hum1 |
| Red Hat hummingbird 1 | libcurl-minimal | 0:8.23.0-0.1.hum1 |
| Red Hat hummingbird 1 | rust | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-analyzer | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-debugger-common | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-doc | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-gdb | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-lldb | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-src | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-aarch64-unknown-none-softfloat | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-aarch64-unknown-uefi | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-i686-pc-windows-gnu | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-wasm32-unknown-unknown | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-wasm32-wasip1 | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-pc-windows-gnu | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-unknown-none | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rust-std-static-x86_64-unknown-uefi | 0:1.99.0-1.hum1 |
| Red Hat hummingbird 1 | rustfmt | 0:1.99.0-1.hum1 |
| Ubuntu 26.04 LTS | curl | 8.18.0-1ubuntu2.8 |
| Ubuntu 26.10 | curl | 8.20.0-2ubuntu11.1 |
| Wolfi | curl | 8.23.0-r0 |
| openSUSE Tumbleweed | curl | 8.23.0-1.1 |