CVE-2026-88842

3.3 Faible

Publiée le 14/10/2026 à 13:17 · Modifiée le 15/10/2026 à 22:17 · En attente d'analyse NVD · Source : secalert@redhat.com

Description

A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.

Traduire en français

Produits concernés

Red Hat Hardened Images

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.3 Faible	secalert@redhat.com	`CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-125

Références

https://access.redhat.com/errata/RHSA-2026:81391
https://access.redhat.com/security/cve/CVE-2026-88842
https://bugzilla.redhat.com/show_bug.cgi?id=2531355

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories