PatchTheCVEautomotive grade linux vulnerabilities and fixes
Recent CVEs affecting automotive grade linux, with upgrade or downgrade steps. 5 tracked.
Also searched as: automotivegradelinux.
automotive grade linux has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2026-05-01. Highest priority: CVE-2026-37531 (score 61/100).
- CVE-2026-37532 HIGH 7.1 UPGRADE AGL agl-service-can-low-level thru 17.1.12 contains a heap buffer over-read in the isotp-c library
- CVE-2026-37531 CRITICAL 9.8 UPGRADE AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a
- CVE-2026-37530 HIGH 7.5 UPGRADE AGL agl-service-can-low-level thru 17.1.12 contains a stack buffer overflow in the uds-c library
- CVE-2026-37526 HIGH 7.8 UPGRADE AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervis
- CVE-2026-37525 HIGH 7.8 UPGRADE AGL app-framework-binder (afb-daemon) through v19.90.0 contains a privilege escalation vulnerability in the su
FAQ
How do I fix automotive grade linux vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is automotive grade linux being exploited right now?
None of the tracked automotive grade linux CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which automotive grade linux CVE should I patch first?
CVE-2026-37531 currently ranks highest (61/100): AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a .