PT-2026-114317 · Red Hat · Red Hat Hardened Images
CVE-2026-88842
·
Published
2026-10-14
·
Updated
2026-10-14
CVSS v3.1
3.3
Low
| Vector | AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
A flaw was found in BusyBox dpkg. The write status file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Red Hat Hardened Images