Every CVE Search/ Get API key

CVE-2026-56392

Heap-based Buffer Overflow in GNU coreutils

1.8 LowFix available

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
None
User interaction
Active

What an attacker can affect

Confidentiality
None
Integrity
Low
Availability
Low

Exploit likelihood

0.19%Unchanged since Jul 24, 2026
90%50%10%1%

What each source reports

CVE List Score used 1.8

Heap-based Buffer Overflow in GNU coreutils

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
CVE-2026-56392
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-122
Updated
2026-11-02
EUVDEUVD-2026-48525 1.8

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
EUVD-2026-48525
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-g24f-m2hx-pfgx 1.8

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow...

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
GHSA-g24f-m2hx-pfgx
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
NVD 1.8

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
CVE-2026-56392
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Weakness
CWE-122
Updated
2026-11-02
OSV 1.8

Heap-based Buffer Overflow in GNU coreutils

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
CVE-2026-56392
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Weakness
CWE-122
Updated
2026-11-02
OSVDEBIAN-CVE-2026-56392 6.1

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
DEBIAN-CVE-2026-56392
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Updated
2026-11-02
Show 18 moreShow less
OSVJLSEC-2026-1196 1.8

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow...

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
JLSEC-2026-1196
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-02
OSVOESA-2026-3388 1.8

coreutils security update

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d(CVE-2026-56392)

Record
OESA-2026-3388
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3389 1.8

coreutils security update

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d(CVE-2026-56392)

Record
OESA-2026-3389
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3390 1.8

coreutils security update

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d(CVE-2026-56392)

Record
OESA-2026-3390
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3391 1.8

coreutils security update

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d(CVE-2026-56392)

Record
OESA-2026-3391
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVOESA-2026-3416 1.8

coreutils security update

These are the GNU core utilities. This package is the combination of the old GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write.

When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout.

This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d(CVE-2026-56392)

Record
OESA-2026-3416
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVRHBA-2026:47115 4.4

Red Hat Bug Fix Advisory: coreutils bug fix and enhancement update

Record
RHBA-2026:47115
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:40724 4.4

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Record
RHSA-2026:40724
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:66403 4.4

Red Hat Security Advisory: coreutils security update

Record
RHSA-2026:66403
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVRHSA-2026:67886 6.1

Red Hat Security Advisory: coreutils security update

Record
RHSA-2026:67886
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:66403 4.4

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

  • coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE-2026-56392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:66403
CVSS 3.1
4.4 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Updated
2026-11-02
OSVRLSA-2026:67886 6.1

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

  • coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input (CVE-2026-56391)

  • coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE-2026-56392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67886
CVSS 3.1
6.1 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-56392 1.8

GNU coreutils unexpand is vulnerable to a heap-based buffer overflow due to an integer overflow during buffer allocation when processing large tab stop (-t) values. The multiplication used to calculate the allocation size can wrap around, resulting in an undersized buffer. When processing crafted input, subsequent writes exceed the allocated memory, leading to an out‑of‑bounds heap write. When running GNU coreutils unexpand with attacker-provided large tab stop (-t) arguments, this behavior leads to a crash and potentially achieve a heap write primitive depending on memory layout. This issue has been fixed in the commit b60a159fdc5bfcf9988d3a4cb6f53abe8ad5d35d

Record
UBUNTU-CVE-2026-56392
CVSS 4.0
1.8 LowCVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Updated
2026-11-02
OSVALSA-2026:66403 No score

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

  • coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE-2026-56392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:66403
Updated
2026-11-02
OSVALSA-2026:67886 No score

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages.

Security Fix(es):

  • coreutils: GNU coreutils uniq: Denial of Service and information disclosure via out-of-bounds read with multibyte input (CVE-2026-56391)
  • coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values (CVE-2026-56392)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67886
Updated
2026-11-02
OSVCLSA-2026-1788177078 No score

coreutils: Fix of CVE-2026-56392

  • CVE-2026-56392: fix heap buffer overflow in unexpand caused by an integer overflow when allocating the pending-blank buffer for large -t values (backport of upstream b60a159f and follow-up 4ade9cf7)
Record
CLSA-2026-1788177078
Updated
2026-11-02
OSVCLSA-2026-1788268556 No score

coreutils: Fix of CVE-2026-56392

  • CVE-2026-56392: fix heap buffer overflow in unexpand caused by an integer overflow when allocating the pending-blank buffer for large -t values (backport of upstream b60a159f and follow-up 4ade9cf7)
Record
CLSA-2026-1788268556
Updated
2026-11-02
OSVopenSUSE-SU-2026:11764-1 No score

coreutils-9.11-5.1 on GA media

These are all security issues fixed in the coreutils-9.11-5.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:11764-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
coreutils
AlmaLinux:9
 before 8.32-41.el9_8.1
8.32-41.el9_8.1
coreutils-common
AlmaLinux:9
 before 8.32-41.el9_8.1
8.32-41.el9_8.1
coreutils-single
AlmaLinux:9
 before 8.32-41.el9_8.1
8.32-41.el9_8.1
coreutils
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.5-8.el10_2.1
9.5-8.el10_2.1
coreutils-common
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.5-8.el10_2.1
9.5-8.el10_2.1
coreutils-single
AlmaLinux:10
From an advisory covering 2 CVEs
 before 9.5-8.el10_2.1
9.5-8.el10_2.1
coreutils
TuxCare:AlmaLinux:9.6
 before 8.32-39.el9.tuxcare.els2
8.32-39.el9.tuxcare.els2
coreutils-common
TuxCare:AlmaLinux:9.6
 before 8.32-39.el9.tuxcare.els2
8.32-39.el9.tuxcare.els2
coreutils-single
TuxCare:AlmaLinux:9.6
 before 8.32-39.el9.tuxcare.els2
8.32-39.el9.tuxcare.els2
coreutils
TuxCare:AlmaLinux:9.2
 before 8.32-34.el9.tuxcare.els2
8.32-34.el9.tuxcare.els2
Show 33 moreShow less
Affected packages
PackageAffectedFixed
coreutils-common
TuxCare:AlmaLinux:9.2
 before 8.32-34.el9.tuxcare.els2
8.32-34.el9.tuxcare.els2
coreutils-single
TuxCare:AlmaLinux:9.2
 before 8.32-34.el9.tuxcare.els2
8.32-34.el9.tuxcare.els2
coreutils
Debian:12
 All versions, plus listed versions
9.1-19.10-19.4-19.4-29.4-3
Show 7 moreShow less
9.4-3.19.5-19.6-19.6-29.7-19.7-29.7-3
 None known
coreutils
Debian:13
 All versions, plus listed versions
9.10-19.7-3
 None known
coreutils
Debian:14
 All versions, plus listed versions
9.10-19.7-3
 None known
coreutils_jll
Julia
 All versions None known
coreutils
openEuler:20.03-LTS-SP4
 before 8.32-18.oe2003sp4
8.32-18.oe2003sp4
coreutils
openEuler:22.03-LTS-SP4
 before 9.0-27.oe2203sp4
9.0-27.oe2203sp4
coreutils
openEuler:24.03-LTS-SP1
 before 9.4-23.oe2403sp1
9.4-23.oe2403sp1
coreutils
openEuler:24.03-LTS-SP3
 before 9.4-23.oe2403sp3
9.4-23.oe2403sp3
coreutils
openEuler:24.03-LTS-SP4
 before 9.4-23.oe2403sp4
9.4-23.oe2403sp4
coreutils
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils-common
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils-single
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils-single-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:8.30-20.el8_10
0:8.30-20.el8_10
coreutils
Red Hat:hummingbird:1
 before 0:9.11-5.hum1
0:9.11-5.hum1
coreutils-common
Red Hat:hummingbird:1
 before 0:9.11-5.hum1
0:9.11-5.hum1
coreutils-single
Red Hat:hummingbird:1
 before 0:9.11-5.hum1
0:9.11-5.hum1
coreutils
Red Hat:enterprise_linux:9::baseos
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils-debugsource
Red Hat:enterprise_linux:9::baseos
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils-single
Red Hat:enterprise_linux:9::baseos
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils-single-debuginfo
Red Hat:enterprise_linux:9::baseos
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils-debugsource
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils-single
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils-single-debuginfo
Red Hat:enterprise_linux:10.2
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils
Rocky Linux:9
 before 0:8.32-41.el9_8.1
0:8.32-41.el9_8.1
coreutils
Rocky Linux:10
From an advisory covering 2 CVEs
 before 0:9.5-8.el10_2.1
0:9.5-8.el10_2.1
coreutils
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 9.11-5.1
9.11-5.1

History

History
RecordedChangedSources
affected, facts
affected
affected, aliases, products, published, referencesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-56392 is a low vulnerability (CVSS 1.8) in Gnu Coreutils, published July 24, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.19%, the 8th percentile. Fixed in coreutils 8.32-41.el9_8.1.

References

Show 36 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open