Red Hat Security AdvisoryRHSA-2026:0770
gpsd security update
Released 2026-01-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) gpsd-1:3.26.1-1.el10_1.1, gpsd-clients-1:3.26.1-1.el10_1.1, python3-gpsd-1:3.26.1-1.el10_1.1
Fixes 2 records
Priority MEDIUM 50
gpsd before commit dc966aa contains a heap-based out-of-bounds write vulnerability in the drivers/driver_nmea2000.c file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00791 · Published 2026-01-02 · Fixed CWE-122
Priority MEDIUM 40
An integer underflow vulnerability exists in the `nextstate()` function in `gpsd/packet.c` of gpsd versions prior to commit `ffa1d6f40bca0b035fc7f5e563160ebb67199da7`.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00563 · Published 2026-01-02 · Fixed CWE-191
