Vulnerability-Lookup

OPENSUSE-SU-2026:11764-1

Vulnerability from csaf_opensuse - Published: 2026-09-12 00:00 - Updated: 2026-09-16 21:30

Summary

coreutils-9.11-5.1 on GA media

Severity

Moderate

Notes

Title of the patch: coreutils-9.11-5.1 on GA media

Description of the patch: These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed.

Patchnames: openSUSE-Tumbleweed-2026-11764

CVE-2026-56391

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Affected products

Recommended 12 products

Product	Version	Remediation
Unresolved product id: openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-9.11-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2026-56392

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Affected products

Recommended 12 products, the same list as for CVE-2026-56391

Threats

Impact moderate

References

9 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://www.suse.com/security/cve/CVE-2026-56391/	self
https://www.suse.com/security/cve/CVE-2026-56392/	self
https://www.suse.com/security/cve/CVE-2026-56391	external
https://bugzilla.suse.com/1272698	external
https://bugzilla.suse.com/1272699	external
https://www.suse.com/security/cve/CVE-2026-56392	external
https://bugzilla.suse.com/1272699	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "coreutils-9.11-5.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2026-11764",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11764-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56391 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56391/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56392 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56392/"
      }
    ],
    "title": "coreutils-9.11-5.1 on GA media",
    "tracking": {
      "current_release_date": "2026-09-16T21:30:55Z",
      "generator": {
        "date": "2026-09-12T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:11764-1",
      "initial_release_date": "2026-09-12T00:00:00Z",
      "revision_history": [
        {
          "date": "2026-09-12T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T20:28:17Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T21:30:55Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "coreutils-9.11-5.1.aarch64",
                "product": {
                  "name": "coreutils-9.11-5.1.aarch64",
                  "product_id": "coreutils-9.11-5.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils@9.11-5.1?arch=aarch64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-doc-9.11-5.1.aarch64",
                "product": {
                  "name": "coreutils-doc-9.11-5.1.aarch64",
                  "product_id": "coreutils-doc-9.11-5.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-doc@9.11-5.1?arch=aarch64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-lang-9.11-5.1.aarch64",
                "product": {
                  "name": "coreutils-lang-9.11-5.1.aarch64",
                  "product_id": "coreutils-lang-9.11-5.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-lang@9.11-5.1?arch=aarch64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "coreutils-9.11-5.1.ppc64le",
                "product": {
                  "name": "coreutils-9.11-5.1.ppc64le",
                  "product_id": "coreutils-9.11-5.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils@9.11-5.1?arch=ppc64le\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-doc-9.11-5.1.ppc64le",
                "product": {
                  "name": "coreutils-doc-9.11-5.1.ppc64le",
                  "product_id": "coreutils-doc-9.11-5.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-doc@9.11-5.1?arch=ppc64le\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-lang-9.11-5.1.ppc64le",
                "product": {
                  "name": "coreutils-lang-9.11-5.1.ppc64le",
                  "product_id": "coreutils-lang-9.11-5.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-lang@9.11-5.1?arch=ppc64le\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "coreutils-9.11-5.1.s390x",
                "product": {
                  "name": "coreutils-9.11-5.1.s390x",
                  "product_id": "coreutils-9.11-5.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils@9.11-5.1?arch=s390x\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-doc-9.11-5.1.s390x",
                "product": {
                  "name": "coreutils-doc-9.11-5.1.s390x",
                  "product_id": "coreutils-doc-9.11-5.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-doc@9.11-5.1?arch=s390x\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-lang-9.11-5.1.s390x",
                "product": {
                  "name": "coreutils-lang-9.11-5.1.s390x",
                  "product_id": "coreutils-lang-9.11-5.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-lang@9.11-5.1?arch=s390x\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "coreutils-9.11-5.1.x86_64",
                "product": {
                  "name": "coreutils-9.11-5.1.x86_64",
                  "product_id": "coreutils-9.11-5.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils@9.11-5.1?arch=x86_64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-doc-9.11-5.1.x86_64",
                "product": {
                  "name": "coreutils-doc-9.11-5.1.x86_64",
                  "product_id": "coreutils-doc-9.11-5.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-doc@9.11-5.1?arch=x86_64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "coreutils-lang-9.11-5.1.x86_64",
                "product": {
                  "name": "coreutils-lang-9.11-5.1.x86_64",
                  "product_id": "coreutils-lang-9.11-5.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:coreutils:9.11:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/coreutils-lang@9.11-5.1?arch=x86_64\u0026upstream=coreutils-9.11-5.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-9.11-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64"
        },
        "product_reference": "coreutils-9.11-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-9.11-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le"
        },
        "product_reference": "coreutils-9.11-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-9.11-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x"
        },
        "product_reference": "coreutils-9.11-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-9.11-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64"
        },
        "product_reference": "coreutils-9.11-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-doc-9.11-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64"
        },
        "product_reference": "coreutils-doc-9.11-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-doc-9.11-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le"
        },
        "product_reference": "coreutils-doc-9.11-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-doc-9.11-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x"
        },
        "product_reference": "coreutils-doc-9.11-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-doc-9.11-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64"
        },
        "product_reference": "coreutils-doc-9.11-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-lang-9.11-5.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64"
        },
        "product_reference": "coreutils-lang-9.11-5.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-lang-9.11-5.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le"
        },
        "product_reference": "coreutils-lang-9.11-5.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-lang-9.11-5.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x"
        },
        "product_reference": "coreutils-lang-9.11-5.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "coreutils-lang-9.11-5.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
        },
        "product_reference": "coreutils-lang-9.11-5.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-56391",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56391"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU coreutils uniq is vulnerable to an out-of-bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56391",
          "url": "https://www.suse.com/security/cve/CVE-2026-56391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272698 for CVE-2026-56391",
          "url": "https://bugzilla.suse.com/1272698"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272699 for CVE-2026-56391",
          "url": "https://bugzilla.suse.com/1272699"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56391"
    },
    {
      "cve": "CVE-2026-56392",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56392"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out-of-bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
          "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56392",
          "url": "https://www.suse.com/security/cve/CVE-2026-56392"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1272699 for CVE-2026-56392",
          "url": "https://bugzilla.suse.com/1272699"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:coreutils-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-doc-9.11-5.1.x86_64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.aarch64",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.ppc64le",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.s390x",
            "openSUSE Tumbleweed:coreutils-lang-9.11-5.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-09-12T00:00:00Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56392"
    }
  ]
}

CVE-2026-56391 (GCVE-0-2026-56391)

Vulnerability from cvelistv5 – Published: 2026-07-24 07:44 – Updated: 2026-07-24 12:31 X_Open Source

Title

Out‑of‑bounds Read in GNU coreutils

Summary

GNU coreutils uniq is vulnerable to an out‑of‑bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. This incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input. When running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure. This issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.

Severity

4.6 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-24 12:31 UTC

CWE

CWE-125 - Out-of-bounds Read

Assigner

CERT-PL ENISA root

References

3 references

URL	Tags
https://cert.pl/en/posts/2026/07/CVE-2026-56391	third-party-advisory
https://git.savannah.gnu.org/cgit/coreutils.git/	product
https://git.savannah.gnu.org/cgit/coreutils.git/c…	patch

Impacted products

1 product

Vendor	Product	Version
GNU	coreutils	Affected: 9.5 , ≤ 9.11 (custom)

Credits

Michał Majchrowicz (AFINE Team) Marcin Wyczechowski (AFINE Team)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56391",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-24T12:31:16.655541Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T12:31:34.245Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "uniq"
          ],
          "product": "coreutils",
          "vendor": "GNU",
          "versions": [
            {
              "lessThanOrEqual": "9.11",
              "status": "affected",
              "version": "9.5",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Micha\u0142 Majchrowicz (AFINE Team)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Marcin Wyczechowski (AFINE Team)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GNU coreutils \u003ci\u003euniq\u003c/i\u003e is vulnerable to an out\u2011of\u2011bounds read due to incorrect handling of multibyte input when the \u003ci\u003e-w (--check-chars)\u003c/i\u003e option is used. The \u003ci\u003efind_field()\u003c/i\u003e function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \u003cbr\u003eThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\u003cbr\u003e\u003cbr\u003eWhen running GNU coreutils \u003ci\u003euniq\u003c/i\u003e with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\u003cbr\u003e\u003cp\u003eThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371.\u003c/p\u003e"
            }
          ],
          "value": "GNU coreutils uniq is vulnerable to an out\u2011of\u2011bounds read due to incorrect handling of multibyte input when the -w (--check-chars) option is used. The find_field() function miscalculates the byte length of characters by repeatedly processing a fixed pointer instead of advancing through the input, resulting in an inflated length value. \nThis incorrect length is later used in a memcmp operation, causing reads beyond the allocated buffer when processing crafted multibyte input.\n\nWhen running GNU coreutils uniq with attacker-provided arguments, this behavior leads to a crash and potential adjacent heap memory exposure.\n\n\nThis issue has been fixed in the commit d64e35a8a4c0e4608321433e0d84d917e4e36371."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "LOW",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-125",
              "description": "CWE-125 Out-of-bounds Read",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-24T07:44:45.581Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=d64e35a8a4c0e4608321433e0d84d917e4e36371"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "Out\u2011of\u2011bounds Read in GNU coreutils",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-56391",
    "datePublished": "2026-07-24T07:44:45.581Z",
    "dateReserved": "2026-06-21T11:40:32.790Z",
    "dateUpdated": "2026-07-24T12:31:34.245Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56392 (GCVE-0-2026-56392)

Vulnerability from cvelistv5 – Published: 2026-07-24 07:44 – Updated: 2026-07-24 12:32 X_Open Source

Title

Heap-based Buffer Overflow in GNU coreutils

Summary

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Severity

1.8 (Low)


                        
                          CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-24 12:32 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

CERT-PL ENISA root

References

3 references

URL	Tags
https://cert.pl/en/posts/2026/07/CVE-2026-56391	third-party-advisory
https://git.savannah.gnu.org/cgit/coreutils.git/	product
https://git.savannah.gnu.org/cgit/coreutils.git/c…	patch

Impacted products

1 product

Vendor	Product	Version
GNU	coreutils	Affected: 0 , ≤ 9.11 (custom)

Credits

Michał Majchrowicz (AFINE Team) Marcin Wyczechowski (AFINE Team)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56392",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-24T12:32:03.340535Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-24T12:32:14.074Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "modules": [
            "unexpand"
          ],
          "product": "coreutils",
          "vendor": "GNU",
          "versions": [
            {
              "lessThanOrEqual": "9.11",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Micha\u0142 Majchrowicz (AFINE Team)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Marcin Wyczechowski (AFINE Team)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GNU coreutils \u003ci\u003eunexpand\u003c/i\u003e is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (\u003ci\u003e-t\u003c/i\u003e) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\u003cbr\u003eWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out\u2011of\u2011bounds heap write.\u003cbr\u003e\u003cbr\u003eWhen running GNU coreutils \u003ci\u003eunexpand\u003c/i\u003e with attacker-provided large tab stop (\u003ci\u003e-t\u003c/i\u003e) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\u003cbr\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003eThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d\u003c/p\u003e\u003cp\u003e\u003c/p\u003e\u003cp\u003e\u003c/p\u003e"
            }
          ],
          "value": "GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer.\nWhen processing crafted input, subsequent writes exceed the allocated memory, leading to an out\u2011of\u2011bounds heap write.\n\nWhen running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.\n\n\n\n\n\n\n\n\n\n\nThis issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "PRESENT",
            "attackVector": "LOCAL",
            "baseScore": 1.8,
            "baseSeverity": "LOW",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "LOW",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "CWE-122 Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-24T07:44:54.885Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56391"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "Heap-based Buffer Overflow in GNU coreutils",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-56392",
    "datePublished": "2026-07-24T07:44:54.885Z",
    "dateReserved": "2026-06-21T11:40:32.790Z",
    "dateUpdated": "2026-07-24T12:32:14.074Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

OPENSUSE-SU-2026:11764-1

CVE-2026-56391 (GCVE-0-2026-56391)

CVE-2026-56392 (GCVE-0-2026-56392)

Tags

Sightings

Nomenclature

Related by attack behaviour