Skip to main content
VulnerabilityPublished Updated

mk_event_timeout_destroy · Fluent Bit: Heap-use-after-free

Affects fluent-bitSource GCVE Database

0
Severity
High

Rated by Threat Radar

Data as of 21 Oct 2026, 20:33 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzfluent-bitpkg:generic/fluent-bitOther threatsAffected
  • >=73bc3ec78451aa41757bf7a12366228b79527544
  • =tiger-2.0.9-dev-20230104
  • =v2.0.0
  • =v2.0.0-rc1
  • =v2.0.0-rc2
  • =v2.0.0-rc3
  • =v2.0.0pre
  • =v2.0.1
  • =v2.0.10
  • =v2.0.11
  • =v2.0.12
  • =v2.0.13
  • =v2.0.14
  • =v2.0.2
  • =v2.0.3
  • =v2.0.4
  • =v2.0.5
  • =v2.0.6
  • =v2.0.7
  • =v2.0.8
  • =v2.0.9
  • =v2.1.0
  • =v2.1.0-rc1
  • =v2.1.0-rc2
  • =v2.1.1
  • =v2.1.10
  • =v2.1.2
  • =v2.1.3
  • =v2.1.4
  • =v2.1.5
  • =v2.1.5-windows-artifact-fix
  • =v2.1.6
  • =v2.1.7
  • =v2.1.8
  • =v2.1.9
  • =vv.2.0.7
  • =v2.2.0
  • =v2.2.1
  • =v2.2.2
  • =v3.0.0
  • =v3.0.1
  • =v3.0.2
  • =v3.0.3
  • =v3.0.4
  • =v2.2.3
  • =v3.0.5
  • =v3.0.6
  • =v3.0.7
  • =v3.1.0
  • =v3.1.1
  • =v3.1.2
  • =v3.1.3
  • =v3.1.4
  • =v3.1.5
  • =v3.1.6
  • =v3.1.7
  • =v3.1.8
  • =v3.1.9
  • =v3.1.10
  • =v3.2.0
  • =v3.2.1
  • =v3.2.2
  • =v3.2.3
  • =v3.2.4
  • =v3.2.5
  • =v3.2.6
  • =v3.2.7
  • =v3.2.8
  • =v3.2.9
  • =v3.2.10
  • =v4.0.0
  • =v4.0.1
  • =v4.0.2
  • =v4.0.3
  • =v4.0.4
  • =v4.0.5
  • =v4.0.6
  • =v4.0.7
  • =v4.0.8
  • =v4.0.9
  • =v4.0.10
  • =v4.0.11
  • =v4.1.0
  • =v4.0.12
  • =v4.1.1
  • =v4.0.13
  • =v4.2.0
  • =v4.2.1
  • =v4.2.2
  • =v5.0.0-dev-20260228
  • =v5.0.0
  • =v5.0.1
  • =v5.0.2
  • =v5.0.3
  • =v5.0.4
  • =v5.0.5
  • =v5.0.6
  • =v5.0.7
  • =v5.0.8
  • =v5.0.9
  • =v5.1.0
  • =v5.1.1
  • =v5.1.2
  • =v5.1.3
  • =v5.1.4
  • =v5.1.5
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, consider limiting exposure of affected Fluent Bit instances and avoid untrusted input that might trigger this flaw.

Description

A heap-use-after-free vulnerability exists in Fluent Bit in the function mk_event_timeout_destroy. This issue involves a write operation on memory that has already been freed, which can cause instability or crashes in affected versions of Fluent Bit.

References

Community reviews

Loading reviews…