CVE-2026-89088
Parted: parted: denial of service via heap buffer overflow during fat16 resize
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Parted: parted: denial of service via heap buffer overflow during fat16 resize
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
CVE-2026-89088- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-06
EUVDEUVD-2026-103203
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
EUVD-2026-103203- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-phmc-786q-m6fp
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system...
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
GHSA-phmc-786q-m6fp- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
CVE-2026-89088- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-787
- Updated
- 2026-11-06
OSVDEBIAN-CVE-2026-89088
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
DEBIAN-CVE-2026-89088- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2026-4171
parted security update
The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.
Security Fix(es):
heap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)
- Record
OESA-2026-4171- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVOESA-2026-4172
parted security update
The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.
Security Fix(es):
heap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)
- Record
OESA-2026-4172- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4173
parted security update
The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.
Security Fix(es):
heap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)
- Record
OESA-2026-4173- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-4174
parted security update
The GNU Parted program allows you to create, destroy, resize, move, and copy hard disk partitions. Parted can be used for creating space for new operating systems, reorganizing disk usage, and copying data to new hard disks.
Security Fix(es):
heap buffer overflow in duplicate_legacy_root_dir(CVE-2026-89088)
- Record
OESA-2026-4174- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-89088
A flaw was found in parted. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
UBUNTU-CVE-2026-89088- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVMGASA-2026-0512 No score
Updated parted package fixes security vulnerabilities
A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
MGASA-2026-0512- Updated
- 2026-11-02
OSVSUSE-SU-2026:5090-1 No score
Security update for parted
This update for parted fixes the following issues:
- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).
- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).
- Record
SUSE-SU-2026:5090-1- Updated
- 2026-11-04
OSVSUSE-SU-2026:5117-1 No score
Security update for parted
This update for parted fixes the following issues:
- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).
- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).
- Record
SUSE-SU-2026:5117-1- Updated
- 2026-11-05
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
partedDebian:12 |
All versions, plus listed versions 3.5-33.6-13.6-23.6-33.6-3.1 Show 7 moreShow less3.6-3.1~exp13.6-43.6-53.6-5+hurd.13.6-63.7-13.8-2 |
None known |
partedDebian:13 |
All versions, plus listed versions 3.6-53.6-5+hurd.13.6-63.7-13.8-2 |
None known |
partedDebian:14 |
before 3.8-2, plus listed versions 3.6-53.6-5+hurd.13.6-63.7-1 |
3.8-2 |
partedMageia:10 From an advisory covering 2 CVEs |
before 3.6-2.1.mga10 | 3.6-2.1.mga10 |
partedopenEuler:24.03-LTS-SP1 |
before 3.6-4.oe2403sp1 | 3.6-4.oe2403sp1 |
partedopenEuler:24.03-LTS-SP3 |
before 3.6-4.oe2403sp3 | 3.6-4.oe2403sp3 |
partedopenEuler:24.03-LTS-SP4 |
before 3.6-4.oe2403sp4 | 3.6-4.oe2403sp4 |
partedopenEuler:22.03-LTS-SP4 |
before 3.5-4.oe2203sp4 | 3.5-4.oe2203sp4 |
partedSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 3.1-37.29.1 | 3.1-37.29.1 |
partedSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 3.1-37.29.1 | 3.1-37.29.1 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
partedSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedUbuntu:14.04:LTS |
All versions, plus listed versions 2.3-16ubuntu12.3-16ubuntu22.3-16ubuntu32.3-172.3-182.3-192.3-19ubuntu12.3-19ubuntu1.14.04.1 |
None known |
partedUbuntu:16.04:LTS |
All versions, plus listed versions 3.2-7ubuntu13.2-123.2-133.2-143.2-14ubuntu13.2-153.2-15ubuntu0.1 |
None known |
partedUbuntu:18.04:LTS |
All versions, plus listed versions 3.2-183.2-203.2-20ubuntu0.13.2-20ubuntu0.2 |
None known |
partedUbuntu:20.04:LTS |
All versions, plus listed versions 3.2-263.3-13.3-33.3-43.3-4ubuntu0.20.04.1 |
None known |
partedUbuntu:22.04:LTS |
All versions, plus listed versions 3.4-13.4-1build13.4-23.4-2build1 |
None known |
partedUbuntu:24.04:LTS |
All versions, plus listed versions 3.6-33.6-3.1build23.6-4build1 |
None known |
partedUbuntu:26.10 |
All versions, plus listed versions 3.6-63.7-13.8-2 |
None known |
partedUbuntu:26.04:LTS |
All versions, plus listed versions 3.6-53.6-6 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | CVE List, EUVD, NVD | |
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-89088 is a medium vulnerability (CVSS 5.5) in Red Hat Enterprise Linux 10, published September 30, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.22%, the 12th percentile. Fixed in parted 3.8-2.
References
access.redhat.com/security/cve/CVE-2026-89088
bugzilla.redhat.com/show_bug.cgi?id=2462951
nvd.nist.gov/vuln/detail/CVE-2026-89088
github.com/advisories/GHSA-phmc-786q-m6fp
security-tracker.debian.org/tracker/CVE-2026-89088
advisories.mageia.org/MGASA-2026-0512.html
Show 16 moreShow less
bugs.mageia.org/show_bug.cgi?id=36423
lists.fedoraproject.org/archives/list/[email protected]/message/2K3TJ47ZMRSILG3IESTHGOOFEBBL5HS4
lists.opensuse.org/archives/list/[email protected]/message/6UHEOPPKU525Y6OAUPMV2W65RVVSAQ4V
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-4171
suse.com/support/update/announcement/2026/suse-su-20265090-1
bugzilla.suse.com/1286017
ubuntu.com/security/CVE-2026-89088
cve.org/CVERecord?id=CVE-2026-89088
alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html