Vim is an open source command line text editor. Vim < v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will also be cleared and if that quickfix list points to the same tagstack data, Vim will try to free it again, resulting in a double-free/use-after-free access exception. Impact is low since the user must intentionally execute vim with several non-default flags, but it may cause a crash of Vim. The issue has been fixed as of Vim patch v9.1.0647
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-common", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-dbg", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-lesstif", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.052-1ubuntu3.1+esm18" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-athena", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-athena-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-athena-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-common", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-common-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-doc", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gnome", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gnome-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gnome-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gnome-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk3", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk3-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gtk3-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-gui-common", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-nox", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-nox-py2", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-nox-py2-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-runtime", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-tiny", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:7.4.1689-3ubuntu1.5+esm24" } ] }
{ "ubuntu_priority": "medium", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-athena", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-common", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-doc", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gnome", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gtk", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gtk-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-nox", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-runtime", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-tiny", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "xxd", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.0.1453-1ubuntu1.13+esm9" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-athena", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-common", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-doc", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-gtk", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-nox", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-runtime", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-tiny", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "xxd", "binary_version": "2:8.1.2269-1ubuntu5.24" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.1.2269-1ubuntu5.24" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-athena", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-athena-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-common", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-doc", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-gtk", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-gtk3", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-gui-common", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-nox", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-runtime", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-tiny", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "xxd", "binary_version": "2:8.2.3995-1ubuntu2.18" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:8.2.3995-1ubuntu2.18" } ] }
{ "ubuntu_priority": "medium", "availability": "No subscription required", "binaries": [ { "binary_name": "vim", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-athena", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-common", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-doc", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-gtk3", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-gtk3-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-gui-common", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-motif", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-motif-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-nox", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-nox-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-runtime", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-tiny", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "vim-tiny-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "xxd", "binary_version": "2:9.1.0016-1ubuntu7.2" }, { "binary_name": "xxd-dbgsym", "binary_version": "2:9.1.0016-1ubuntu7.2" } ] }