CVE-2026-56289

Name of the Vulnerable Software and Affected Versions GNU patch (affected versions not specified)

Description Improper validation of hunk line offsets in unified-diff input allows a denial of service (DoS). A hunk is a single block of changes within a diff file. By supplying a specially crafted patch file with an extremely large line number, an attacker can force the application into an effectively infinite processing loop while it attempts to locate the requested position. This leads to excessive CPU consumption, making the utility unresponsive and requiring manual termination.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.