Vulnerability-Lookup

SUSE-SU-2026:22905-1

Vulnerability from csaf_suse - Published: 2026-07-23 11:27 - Updated: 2026-09-16 20:07

Summary

Security update for patch

Severity

Low

Notes

Title of the patch: Security update for patch

Description of the patch: This update for patch fixes the following issues - CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037). - CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167). - CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).

Patchnames: SUSE-SLE-Micro-6.1-635

CVE-2021-45261

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64	—	Vendor Fix

Threats

Impact low

CVE-2026-56288

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products, the same list as for CVE-2021-45261

Threats

Impact moderate

CVE-2026-56289

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 4 products, the same list as for CVE-2021-45261

Threats

Impact moderate

References

17 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1194037	self
https://bugzilla.suse.com/1271166	self
https://bugzilla.suse.com/1271167	self
https://www.suse.com/security/cve/CVE-2021-45261/	self
https://www.suse.com/security/cve/CVE-2026-56288/	self
https://www.suse.com/security/cve/CVE-2026-56289/	self
https://www.suse.com/security/cve/CVE-2021-45261	external
https://bugzilla.suse.com/1194037	external
https://www.suse.com/security/cve/CVE-2026-56288	external
https://bugzilla.suse.com/1271166	external
https://bugzilla.suse.com/1271167	external
https://www.suse.com/security/cve/CVE-2026-56289	external
https://bugzilla.suse.com/1271166	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "low"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for patch",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for patch fixes the following issues\n\n- CVE-2021-45261: Invalid Pointer via another_hunk function (bsc#1194037).\n- CVE-2026-56288: crafted unified-diff patch file can cause null pointer derefence (bsc#1271167).\n- CVE-2026-56289: improper validation of hunk line offsets can lead to denial of service (bsc#1271166).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Micro-6.1-635",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22905-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2026:22905-1",
        "url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622905-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2026:22905-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027858.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1194037",
        "url": "https://bugzilla.suse.com/1194037"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271166",
        "url": "https://bugzilla.suse.com/1271166"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1271167",
        "url": "https://bugzilla.suse.com/1271167"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-45261 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-45261/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56288 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56288/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2026-56289 page",
        "url": "https://www.suse.com/security/cve/CVE-2026-56289/"
      }
    ],
    "title": "Security update for patch",
    "tracking": {
      "current_release_date": "2026-09-16T20:07:44Z",
      "generator": {
        "date": "2026-07-23T11:27:48Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2026:22905-1",
      "initial_release_date": "2026-07-23T11:27:48Z",
      "revision_history": [
        {
          "date": "2026-07-23T11:27:48Z",
          "number": "1",
          "summary": "Current version"
        },
        {
          "date": "2026-09-16T19:19:28Z",
          "number": "2",
          "summary": "unknown changes"
        },
        {
          "date": "2026-09-16T20:07:44Z",
          "number": "3",
          "summary": "unknown changes"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "patch-2.7.6-slfo.1.1_2.1.aarch64",
                "product": {
                  "name": "patch-2.7.6-slfo.1.1_2.1.aarch64",
                  "product_id": "patch-2.7.6-slfo.1.1_2.1.aarch64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:patch:2.7.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/patch@2.7.6-slfo.1.1_2.1?arch=aarch64\u0026upstream=patch-2.7.6-slfo.1.1_2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "patch-2.7.6-slfo.1.1_2.1.ppc64le",
                "product": {
                  "name": "patch-2.7.6-slfo.1.1_2.1.ppc64le",
                  "product_id": "patch-2.7.6-slfo.1.1_2.1.ppc64le",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:patch:2.7.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/patch@2.7.6-slfo.1.1_2.1?arch=ppc64le\u0026upstream=patch-2.7.6-slfo.1.1_2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "patch-2.7.6-slfo.1.1_2.1.s390x",
                "product": {
                  "name": "patch-2.7.6-slfo.1.1_2.1.s390x",
                  "product_id": "patch-2.7.6-slfo.1.1_2.1.s390x",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:patch:2.7.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/patch@2.7.6-slfo.1.1_2.1?arch=s390x\u0026upstream=patch-2.7.6-slfo.1.1_2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "patch-2.7.6-slfo.1.1_2.1.x86_64",
                "product": {
                  "name": "patch-2.7.6-slfo.1.1_2.1.x86_64",
                  "product_id": "patch-2.7.6-slfo.1.1_2.1.x86_64",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:a:gnu:patch:2.7.6:*:*:*:*:*:*:*",
                    "purl": "pkg:rpm/suse/patch@2.7.6-slfo.1.1_2.1?arch=x86_64\u0026upstream=patch-2.7.6-slfo.1.1_2.1.src.rpm"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Micro 6.1",
                "product": {
                  "name": "SUSE Linux Micro 6.1",
                  "product_id": "SUSE Linux Micro 6.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sl-micro:6.1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patch-2.7.6-slfo.1.1_2.1.aarch64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64"
        },
        "product_reference": "patch-2.7.6-slfo.1.1_2.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patch-2.7.6-slfo.1.1_2.1.ppc64le as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le"
        },
        "product_reference": "patch-2.7.6-slfo.1.1_2.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patch-2.7.6-slfo.1.1_2.1.s390x as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x"
        },
        "product_reference": "patch-2.7.6-slfo.1.1_2.1.s390x",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "patch-2.7.6-slfo.1.1_2.1.x86_64 as component of SUSE Linux Micro 6.1",
          "product_id": "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
        },
        "product_reference": "patch-2.7.6-slfo.1.1_2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Micro 6.1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-45261",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-45261"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-45261",
          "url": "https://www.suse.com/security/cve/CVE-2021-45261"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1194037 for CVE-2021-45261",
          "url": "https://bugzilla.suse.com/1194037"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-23T11:27:48Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-45261"
    },
    {
      "cve": "CVE-2026-56288",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56288"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing.\nAn attacker can trigger this condition with a malicious patch file, causing the utility to crash and resulting in a denial of service.\n\n\n\nThis issue has been fixed in the commit e6d6a4e021660679d7fc9150f981d4920f722313",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56288",
          "url": "https://www.suse.com/security/cve/CVE-2026-56288"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271166 for CVE-2026-56288",
          "url": "https://bugzilla.suse.com/1271166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271167 for CVE-2026-56288",
          "url": "https://bugzilla.suse.com/1271167"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-23T11:27:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56288"
    },
    {
      "cve": "CVE-2026-56289",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2026-56289"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position.\nThis results in excessive CPU consumption and prevents the process from completing.\nAn attacker can trigger this behavior by supplying a malicious patch file, causing the utility to become unresponsive and require manual termination.\n\n\n\nThis issue has been fixed in the commit faba04ef4f2b410257f76c1b9dc85e350929c4b9",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
          "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2026-56289",
          "url": "https://www.suse.com/security/cve/CVE-2026-56289"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1271166 for CVE-2026-56289",
          "url": "https://bugzilla.suse.com/1271166"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.aarch64",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.ppc64le",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.s390x",
            "SUSE Linux Micro 6.1:patch-2.7.6-slfo.1.1_2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-07-23T11:27:48Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2026-56289"
    }
  ]
}

CVE-2021-45261 (GCVE-0-2021-45261)

Vulnerability from cvelistv5 – Published: 2021-12-22 17:12 – Updated: 2024-08-04 04:39

Summary

An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

1 reference

URL	Tags
https://savannah.gnu.org/bugs/?61685	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T04:39:20.422Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://savannah.gnu.org/bugs/?61685"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-12-22T17:12:19.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://savannah.gnu.org/bugs/?61685"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-45261",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An Invalid Pointer vulnerability exists in GNU patch 2.7 via the another_hunk function, which causes a Denial of Service."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://savannah.gnu.org/bugs/?61685",
              "refsource": "MISC",
              "url": "https://savannah.gnu.org/bugs/?61685"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-45261",
    "datePublished": "2021-12-22T17:12:19.000Z",
    "dateReserved": "2021-12-20T00:00:00.000Z",
    "dateUpdated": "2024-08-04T04:39:20.422Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2026-56288 (GCVE-0-2026-56288)

Vulnerability from cvelistv5 – Published: 2026-07-09 09:29 – Updated: 2026-07-09 12:57 X_Open Source

Title

NULL Pointer Dereference in GNU patch

Summary

GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing. An attacker can trigger this condition with a malicious patch file, causing the utility to crash and resulting in a denial of service. This issue has been fixed in the commit e6d6a4e021660679d7fc9150f981d4920f722313

Severity

4.6 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-09 12:57 UTC

CWE

CWE-476 - NULL Pointer Dereference

Assigner

CERT-PL ENISA root

References

3 references

URL	Tags
https://cert.pl/en/posts/2026/07/CVE-2026-56288	third-party-advisory
https://cgit.git.savannah.gnu.org/cgit/patch.git/	product
https://cgit.git.savannah.gnu.org/cgit/patch.git/…	patch

Impacted products

1 product

Vendor	Product	Version
GNU	patch	Affected: 0 , ≤ 2.8.0 (semver)

Credits

Michał Majchrowicz (AFINE Team) Marcin Wyczechowski (AFINE Team)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56288",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T12:57:28.554596Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T12:57:48.785Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "patch",
          "repo": "https://cgit.git.savannah.gnu.org/cgit/patch.git/",
          "vendor": "GNU",
          "versions": [
            {
              "lessThanOrEqual": "2.8.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Micha\u0142 Majchrowicz (AFINE Team)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Marcin Wyczechowski (AFINE Team)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing.\u003cbr\u003eAn attacker can trigger this condition with a malicious patch file, causing the utility to crash and resulting in a denial of service.\u003cbr\u003e\u003cbr\u003e\u003cp\u003eThis issue has been fixed in the commit e6d6a4e021660679d7fc9150f981d4920f722313\u003c/p\u003e"
            }
          ],
          "value": "GNU patch is vulnerable to a NULL pointer dereference when processing a specially crafted unified-diff patch file. Improper handling of consecutive end-of-file newline markers can corrupt internal hunk (single block of changes in diff) data structures, causing the application to pass a NULL pointer to fwrite() during patch processing.\nAn attacker can trigger this condition with a malicious patch file, causing the utility to crash and resulting in a denial of service.\n\n\n\nThis issue has been fixed in the commit e6d6a4e021660679d7fc9150f981d4920f722313"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-476",
              "description": "CWE-476 NULL Pointer Dereference",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-09T09:29:07.947Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56288"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://cgit.git.savannah.gnu.org/cgit/patch.git/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://cgit.git.savannah.gnu.org/cgit/patch.git/commit/?id=e6d6a4e021660679d7fc9150f981d4920f722313"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "NULL Pointer Dereference in GNU patch",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-56288",
    "datePublished": "2026-07-09T09:29:07.947Z",
    "dateReserved": "2026-06-20T10:58:09.261Z",
    "dateUpdated": "2026-07-09T12:57:48.785Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56289 (GCVE-0-2026-56289)

Vulnerability from cvelistv5 – Published: 2026-07-09 09:29 – Updated: 2026-07-09 12:21 X_Open Source

Title

Loop with Unreachable Exit Condition in GNU patch

Summary

GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position. This results in excessive CPU consumption and prevents the process from completing. An attacker can trigger this behavior by supplying a malicious patch file, causing the utility to become unresponsive and require manual termination. This issue has been fixed in the commit faba04ef4f2b410257f76c1b9dc85e350929c4b9

Severity

4.6 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-09 12:20 UTC

CWE

CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Assigner

CERT-PL ENISA root

References

3 references

URL	Tags
https://cert.pl/en/posts/2026/07/CVE-2026-56288	third-party-advisory
https://cgit.git.savannah.gnu.org/cgit/patch.git/	product
https://cgit.git.savannah.gnu.org/cgit/patch.git/…	patch

Impacted products

1 product

Vendor	Product	Version
GNU	patch	Affected: 0 , ≤ 2.8.0 (semver)

Credits

Michał Majchrowicz (AFINE Team) Marcin Wyczechowski (AFINE Team)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-56289",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T12:20:43.274659Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T12:21:39.125Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "patch",
          "repo": "https://cgit.git.savannah.gnu.org/cgit/patch.git/",
          "vendor": "GNU",
          "versions": [
            {
              "lessThanOrEqual": "2.8.0",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Micha\u0142 Majchrowicz (AFINE Team)"
        },
        {
          "lang": "en",
          "type": "finder",
          "value": "Marcin Wyczechowski (AFINE Team)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position.\u003cbr\u003eThis results in excessive CPU consumption and prevents the process from completing.\u003cbr\u003eAn attacker can trigger this behavior by supplying a malicious patch file, causing the utility to become unresponsive and require manual termination.\u003cbr\u003e\u003cdiv\u003e\u003cbr\u003e\u003cp\u003eThis issue has been fixed in the commit faba04ef4f2b410257f76c1b9dc85e350929c4b9\u003c/p\u003e\u003c/div\u003e"
            }
          ],
          "value": "GNU patch is vulnerable to a denial of service (DoS) due to improper validation of hunk (single block of changes in diff) line offsets in unified-diff input. A specially crafted patch can specify an extremely large line number, causing the application to enter an effectively infinite processing loop while attempting to locate the requested position.\nThis results in excessive CPU consumption and prevents the process from completing.\nAn attacker can trigger this behavior by supplying a malicious patch file, causing the utility to become unresponsive and require manual termination.\n\n\n\nThis issue has been fixed in the commit faba04ef4f2b410257f76c1b9dc85e350929c4b9"
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "Automatable": "NOT_DEFINED",
            "Recovery": "NOT_DEFINED",
            "Safety": "NOT_DEFINED",
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "LOCAL",
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "exploitMaturity": "NOT_DEFINED",
            "privilegesRequired": "NONE",
            "providerUrgency": "NOT_DEFINED",
            "subAvailabilityImpact": "LOW",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "ACTIVE",
            "valueDensity": "NOT_DEFINED",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L",
            "version": "4.0",
            "vulnAvailabilityImpact": "LOW",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE",
            "vulnerabilityResponseEffort": "NOT_DEFINED"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835 Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-09T09:29:22.467Z",
        "orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
        "shortName": "CERT-PL"
      },
      "references": [
        {
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://cert.pl/en/posts/2026/07/CVE-2026-56288"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://cgit.git.savannah.gnu.org/cgit/patch.git/"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://cgit.git.savannah.gnu.org/cgit/patch.git/commit/?id=faba04ef4f2b410257f76c1b9dc85e350929c4b9"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "tags": [
        "x_open-source"
      ],
      "title": "Loop with Unreachable Exit Condition in GNU patch",
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6",
    "assignerShortName": "CERT-PL",
    "cveId": "CVE-2026-56289",
    "datePublished": "2026-07-09T09:29:22.467Z",
    "dateReserved": "2026-06-20T10:58:09.261Z",
    "dateUpdated": "2026-07-09T12:21:39.125Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

SUSE-SU-2026:22905-1

CVE-2021-45261 (GCVE-0-2021-45261)

CVE-2026-56288 (GCVE-0-2026-56288)

CVE-2026-56289 (GCVE-0-2026-56289)

Tags

Sightings

Nomenclature

Related by attack behaviour