A corrective release of the Exim 4.98.2 mail server has been published, fixing a vulnerability (CVE-2025-30232) that could potentially allow privilege escalation. It is not specified whether the vulnerability is remotely exploitable.
The issue manifests starting from the Exim 4.96 release. Vulnerable versions were used in major distributions such as Debian 12, Ubuntu 24.04/24.10, openSUSE 15.6, Arch Linux, Fedora, and FreeBSD. RHEL and its derivatives are not affected as Exim is not included in their standard package repository (an update to the exim package has not yet been published in EPEL).
The vulnerability exists in the code with debug calls and is caused by accessing memory after it has been freed (use-after-free) in the pretrigger handler. The issue arose due to freeing memory for the debug output buffer (debug_pretrigger_buf) without setting the pointer to NULL, which is used to check for the buffer before accessing it.
Source: opennet.ru
