ALPINE-CVE-2026-116332: Use After Free
Use after free in PostgreSQL portal setup allows an object creator to execute arbitrary code as the operating system user running the database, via running user-defined code during planning or executor startup that closes the portal currently being prepared. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/postgresql15to a version that resolves this vulnerability.Fixed in 15.20-r0 - Upgrade
Upgrade
alpine/postgresql16to a version that resolves this vulnerability.Fixed in 16.16-r0 - Upgrade
Upgrade
alpine/postgresql17to a version that resolves this vulnerability.Fixed in 17.12-r0 - Upgrade
Upgrade
alpine/postgresql18to a version that resolves this vulnerability.Fixed in 18.7-r0 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 18.7 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 17.12 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 16.16 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 15.20 - Upgrade
Upgrade
PostgreSQLto a version that resolves this vulnerability.Fixed in 14.25
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs privileges to create an object in PostgreSQL. Exploitation involves user-defined code running during planning or executor startup that closes the portal being prepared.
What level of access could successful exploitation provide?
Successful exploitation can execute arbitrary code as the operating system user that runs the PostgreSQL database. This can affect confidentiality, integrity, and availability of the database host under that account.
How can I determine whether my PostgreSQL installation is affected?
Affected versions are PostgreSQL releases before 18.7, 17.12, 16.16, 15.20, and 14.25. The listed Alpine packages are alpine/postgresql15, alpine/postgresql16, alpine/postgresql17, and alpine/postgresql18; compare the installed package's PostgreSQL branch and version with the applicable fixed release.