CVE-2026-96442
Fixed in a distro release EPSS <1%CVSS 7.8
A code execution flaw was found in Emacs, affecting versions prior to 31.2. The Flymake mode using language backends other than Lisp would execute arbitrary code from the edited file while performing syntax checking. Viewing or editing untrusted files using Emacs could lead to arbitrary code execution with the privileges of the user running Emacs.
Products: GNU Emacs, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 10 | emacs | 1:29.4-14.el10_2.3 |
| AlmaLinux 10 | emacs-common | 1:29.4-14.el10_2.3 |
| AlmaLinux 10 | emacs-filesystem | 1:29.4-14.el10_2.3 |
| AlmaLinux 10 | emacs-lucid | 1:29.4-14.el10_2.3 |
| AlmaLinux 10 | emacs-nw | 1:29.4-14.el10_2.3 |
| AlmaLinux 9 | emacs | 1:27.2-18.el9_8.3 |
| AlmaLinux 9 | emacs-common | 1:27.2-18.el9_8.3 |
| AlmaLinux 9 | emacs-filesystem | 1:27.2-18.el9_8.3 |
| AlmaLinux 9 | emacs-lucid | 1:27.2-18.el9_8.3 |
| AlmaLinux 9 | emacs-nox | 1:27.2-18.el9_8.3 |
| Amazon Linux 2 | emacs | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-common | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-devel | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-filesystem | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-lucid | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-nox | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2 | emacs-terminal | 1:27.2-4.amzn2.0.9 |
| Amazon Linux 2023 | emacs | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-common | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-devel | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-filesystem | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-lucid | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-nox | 1:28.2-3.amzn2023.0.12 |
| Amazon Linux 2023 | emacs-terminal | 1:28.2-3.amzn2023.0.12 |
| Debian 12 | emacs | no fix |
| Debian 13 | emacs | no fix |
| Debian 14 | emacs | no fix |
| Red Hat Enterprise Linux 10.2 | emacs | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-common | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-common-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-debugsource | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-filesystem | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-gtk+x11-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-lucid | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-lucid-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-nw | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 10.2 | emacs-nw-debuginfo | 1:29.4-14.el10_2.3 |
| Red Hat Enterprise Linux 9 | emacs | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-common | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-common-debuginfo | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-debuginfo | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-debugsource | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-filesystem | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-lucid | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-lucid-debuginfo | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-nox | 1:27.2-18.el9_8.3 |
| Red Hat Enterprise Linux 9 | emacs-nox-debuginfo | 1:27.2-18.el9_8.3 |
| Rocky Linux 10 | emacs | 1:29.4-14.el10_2.3 |
| Rocky Linux 9 | emacs | 1:27.2-18.el9_8.3 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Module for Basesystem 15 SP7 | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Module for Desktop Applications 15 SP7 | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server 15 SP6-LTSS | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server 16.0 | emacs | 30.2-160000.4.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP6 | emacs | 27.2-150400.3.34.1 |
| SUSE Linux Enterprise Server for SAP applications 16.0 | emacs | 30.2-160000.4.1 |
| Ubuntu 16.04 LTS | xemacs21 | no fix |
| Ubuntu 16.04 LTS | xemacs21-packages | no fix |
| Ubuntu 18.04 LTS | xemacs21 | no fix |
| Ubuntu 18.04 LTS | xemacs21-packages | no fix |
| Ubuntu 20.04 LTS | xemacs21 | no fix |
| Ubuntu 20.04 LTS | xemacs21-packages | no fix |
| Ubuntu 22.04 LTS | xemacs21 | no fix |
| Ubuntu 22.04 LTS | xemacs21-packages | no fix |
| Ubuntu 24.04 LTS | xemacs21 | no fix |
| Ubuntu 24.04 LTS | xemacs21-packages | no fix |
| Ubuntu 26.04 LTS | xemacs21 | no fix |
| Ubuntu 26.04 LTS | xemacs21-packages | no fix |
| Ubuntu 26.10 | emacs | no fix |
| Ubuntu 26.10 | xemacs21 | no fix |
| Ubuntu 26.10 | xemacs21-packages | no fix |
| Ubuntu Pro 16.04 LTS | emacs24 | no fix |
| Ubuntu Pro 18.04 LTS | emacs25 | no fix |
| Ubuntu Pro 20.04 LTS | emacs | no fix |
| Ubuntu Pro 22.04 LTS | emacs | no fix |
| Ubuntu Pro 24.04 LTS | emacs | no fix |
| Ubuntu Pro 26.04 LTS | emacs | no fix |
| openSUSE Leap 16.0 | emacs | 30.2-160000.4.1 |
| openSUSE Tumbleweed | emacs | 31.1-4.1 |