ALSA-2026:98105: Important: libimobiledevice security update

Q: What is the impact of this issue?

The issue is a denial of service caused by a double-free condition in libimobiledevice's service_receive functionality.

Q: Which AlmaLinux packages are affected?

The advisory identifies the almalinux/libimobiledevice and almalinux/libimobiledevice-devel packages.

Published Nov 11, 2026

Updated

libimobiledevice is a library for connecting to mobile devices including phones and music players

Security Fix(es):

libimobiledevice: libimobiledevice: Denial of Service via double free in servicereceive (CVE-2026-116260)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected Software

2 affected componentsFixes available

almalinux/libimobiledevice<1.2.0-18.el8_10

1.2.0-18.el8_10

almalinux/libimobiledevice-devel<1.2.0-18.el8_10

1.2.0-18.el8_10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade almalinux/libimobiledevice to a version that resolves this vulnerability.
Fixed in 1.2.0-18.el8_10
Upgrade
Upgrade almalinux/libimobiledevice-devel to a version that resolves this vulnerability.
Fixed in 1.2.0-18.el8_10

Event History

Nov 11, 2026

Advisory Published

via OSV·12:00 AM

Data Sourced

via OSV·12:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116260

Frequently Asked Questions

What is the impact of this issue?