CVE-2026-57941: Apache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancy
Apache HTTP Server: modhttp2 use-after-free / wild write via shared session->bbtmp re-entrancy
Other sources
Use After Free vulnerability in Apache HTTP Server's modhttp2 via shared session->bbtmp re-entrancy
— Launchpad
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.4.69-1 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.29-1ubuntu4.27+esm12 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.41-4ubuntu3.23+esm8 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.52-1ubuntu4.24 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.58-1ubuntu8.16 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.68-1ubuntu6.1 - Upgrade
Upgrade
ubuntu/apache2to a version that resolves this vulnerability.Fixed in 2.4.66-2ubuntu2.5 - Upgrade
Upgrade
debian/apache2to a version that resolves this vulnerability.Fixed in 2.4.71-1~deb12u1 - Upgrade
Upgrade
debian/apache2to a version that resolves this vulnerability.Fixed in 2.4.69-1~deb13u1 - Upgrade
Upgrade
debian/apache2to a version that resolves this vulnerability.Fixed in 2.4.69-1 - Upgrade
Upgrade
debian/apache2to a version that resolves this vulnerability.Fixed in 2.4.71-1~deb12u1Fixed in 2.4.71-1~deb13u1Fixed in 2.4.69-1Fixed in 2.4.71-1
Event History
Frequently Asked Questions
Which deployments are within the affected version range?
Apache HTTP Server versions from 2.4.0 through 2.4.68 are affected according to the available information.
Is exploitation tied to a particular Apache module?
The issue is in mod_http2, so deployments using that module are the relevant exposure area.