CVE-2026-9080

Calling curl_easy_pause() within the event-based CURLMOPT_SOCKETFUNCTION callback triggers a use-after-free vulnerability, where libcurl attempts to store a flag using a dangling struct pointer immediately after that pointer's memory has been freed.

• curl 8.21.0~rc2-1 [trixie] - curl (Minor issue) [bookworm] - curl (Vulnerable code not present) [bullseye] - curl (Vulnerable code not present) https://curl.se/docs/CVE-2026-9080.html Introduced with: https://github.com/curl/curl/commit/cfc657a48dbafb4194676d4c9d841388b3a22210 (curl-8_13_0) Fixed by: https://github.com/curl/curl/commit/5ab34cba42e4ee4282fe8bab43f311d51b9bf9bd (rc-8_21_0-1, curl-8_21_0)