vim: Vim is a greatly improved version of the good old UNIX editor Vi
CVE-2025-26603 is fixed in 22 products on 1 platform, first by vim 2:8.0.1453-1ubuntu1.13+esm12, released February 18, 2025. It is not reported as exploited. Patch Radar priority: Routine.
Vim is a greatly improved version of the good old UNIX editor Vi. Vimallows to redirect screen messages using the `:redir` ex command toregister, variables and files. It also allows to show the contents ofregisters using the `:registers` or `:display` ex command. When redirectingthe output of `:display` to a register, Vim will free the register contentbefore storing the new content in the register. Now when redirecting the`:display` command to a register that is being displayed, Vim will free thecontent while shortly afterwards trying to access it, which leads to ause-after-free. Vim pre 9.1.1115 checks in the ex_display() function, thatit does not try to redirect to a register while displaying this register atthe same time. However this check is not complete, and so Vim does notcheck the `+` and `*` registers (which typically donate the X11/clipboardregisters, and when a clipboard connection is not possible will fall backto use register 0 instead. In Patch 9.1.1115 Vim will therefore skipoutputting to register zero when trying to redirect to the clipboardregisters `*` or `+`. Users are advised to upgrade. There are no knownworkarounds for this vulnerability.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| vim · Debian 13.5 (trixie) | 2:9.1.1230-1 | DEBIAN-CVE-2025-26603 | Feb 18, 2025 |
| vim · Debian 14 | 2:9.1.1230-1 | DEBIAN-CVE-2025-26603 | Feb 18, 2025 |
| vim · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-athena · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-athena 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-athena · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-athena 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-athena · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-athena 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-athena · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-athena 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-athena · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-athena 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-common · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-common 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-common · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-common 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-common · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-common 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-common · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-common 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-common · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-common 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-common · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-data · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-debuginfo · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-debugsource · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-default-editor · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-enhanced · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-enhanced-debuginfo · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-filesystem · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-gnome · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-gnome 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-gtk · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-gtk 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-gtk · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-gtk 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-gtk · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-gtk 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-gtk3 · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-gtk3 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-gtk3 · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-gtk3 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-gtk3 · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-gtk3 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-gtk3 · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-gtk3 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-gtk3 · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-gtk3 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-gui-common · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-gui-common 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-gui-common · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-gui-common 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-gui-common · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-gui-common 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-gui-common · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-gui-common 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-gui-common · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-gui-common 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-minimal · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-minimal-debuginfo · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| vim-motif · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-motif 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-motif · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-motif 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-nox · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-nox 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-nox · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-nox 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-nox · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-nox 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-nox · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-nox 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-nox · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-nox 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-runtime · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-runtime 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-runtime · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-runtime 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-runtime · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-runtime 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-runtime · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-runtime 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-runtime · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-runtime 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| vim-tiny · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | vim-tiny 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| vim-tiny · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | vim-tiny 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| vim-tiny · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | vim-tiny 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| vim-tiny · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | vim-tiny 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| vim-tiny · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | vim-tiny 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| xxd · Ubuntu 18.04.6 LTS (bionic) | 2:8.0.1453-1ubuntu1.13+esm12 | xxd 2:8.0.1453-1ubuntu1.13+esm12 | Feb 18, 2025 |
| xxd · Ubuntu 20.04 LTS (focal) | 2:8.1.2269-1ubuntu5.32 | xxd 2:8.1.2269-1ubuntu5.32 | Feb 18, 2025 |
| xxd · Ubuntu 22.04.1 LTS (jammy) | 2:8.2.3995-1ubuntu2.24 | xxd 2:8.2.3995-1ubuntu2.24 | Feb 18, 2025 |
| xxd · Ubuntu 24.04.5 LTS (noble) | 2:9.1.0016-1ubuntu7.8 | xxd 2:9.1.0016-1ubuntu7.8 | Feb 18, 2025 |
| xxd · Ubuntu 24.10 (oracular) | 2:9.1.0496-1ubuntu6.5 | xxd 2:9.1.0496-1ubuntu6.5 | Jan 16, 2026 |
| xxd · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
| xxd-debuginfo · amzn 2023 | 2:9.1.1202-1.amzn2023.0.1 | ALAS2023-2025-932 | Apr 9, 2025 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.