CVE-2026-89085
Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Parted: parted: heap-based buffer overflow via crafted fat32 filesystem image
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
CVE-2026-89085- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Weakness
- CWE-787
- Updated
- 2026-11-06
EUVDEUVD-2026-103202
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
EUVD-2026-103202- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-06
GitHub AdvisoriesGHSA-j946-9w8f-v6hg
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially...
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
GHSA-j946-9w8f-v6hg- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Weakness
- CWE-787
- Updated
- 2026-11-02
NVD
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
CVE-2026-89085- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Weakness
- CWE-787
- Updated
- 2026-11-06
OSVDEBIAN-CVE-2026-89085
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
DEBIAN-CVE-2026-89085- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-89085
A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.
- Record
UBUNTU-CVE-2026-89085- CVSS 3.1
- 6.6 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
Show 4 moreShow less
OSVMGASA-2026-0512 No score
Updated parted package fixes security vulnerabilities
A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption. A heap-based buffer overflow exists in libparted's file system resizing logic when handling FAT16 volumes. By convincing a user or administrator to resize a specially crafted FAT16 file system image with malformed directory metadata, an attacker can trigger an oversized read into a fixed-size memory buffer. This issue causes memory corruption, resulting in an application crash and a denial of service (DoS).
- Record
MGASA-2026-0512- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11924-1 No score
libparted-fs-resize0-3.8-1.1 on GA media
These are all security issues fixed in the libparted-fs-resize0-3.8-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11924-1- Updated
- 2026-11-02
OSVSUSE-SU-2026:5090-1 No score
Security update for parted
This update for parted fixes the following issues:
- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).
- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).
- Record
SUSE-SU-2026:5090-1- Updated
- 2026-11-04
OSVSUSE-SU-2026:5117-1 No score
Security update for parted
This update for parted fixes the following issues:
- CVE-2026-89085: heap-based buffer overflow via crafted FAT32 filesystem image (bsc#1286017).
- CVE-2026-89088: denial of service via heap buffer overflow during FAT16 resize (bsc#1286018).
- Record
SUSE-SU-2026:5117-1- Updated
- 2026-11-05
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
partedDebian:12 |
All versions, plus listed versions 3.5-33.6-13.6-23.6-33.6-3.1 Show 7 moreShow less3.6-3.1~exp13.6-43.6-53.6-5+hurd.13.6-63.7-13.8-2 |
None known |
partedDebian:13 |
All versions, plus listed versions 3.6-53.6-5+hurd.13.6-63.7-13.8-2 |
None known |
partedDebian:14 |
before 3.8-2, plus listed versions 3.6-53.6-5+hurd.13.6-63.7-1 |
3.8-2 |
partedMageia:10 From an advisory covering 2 CVEs |
before 3.6-2.1.mga10 | 3.6-2.1.mga10 |
partedSUSE:Linux Enterprise Server 12 SP5-LTSS From an advisory covering 2 CVEs |
before 3.1-37.29.1 | 3.1-37.29.1 |
partedSUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 From an advisory covering 2 CVEs |
before 3.1-37.29.1 | 3.1-37.29.1 |
partedSUSE:Linux Enterprise Micro 5.3 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Micro 5.4 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Micro 5.5 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Module for Basesystem 15 SP7 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
Show 19 moreShow less
| Package | Affected | Fixed |
|---|---|---|
partedSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP4-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP5-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server 15 SP6-LTSS From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP4 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP5 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedSUSE:Linux Enterprise Server for SAP Applications 15 SP6 From an advisory covering 2 CVEs |
before 3.2-150300.21.6.1 | 3.2-150300.21.6.1 |
partedUbuntu:14.04:LTS |
All versions, plus listed versions 2.3-16ubuntu12.3-16ubuntu22.3-16ubuntu32.3-172.3-182.3-192.3-19ubuntu12.3-19ubuntu1.14.04.1 |
None known |
partedUbuntu:16.04:LTS |
All versions, plus listed versions 3.2-7ubuntu13.2-123.2-133.2-143.2-14ubuntu13.2-153.2-15ubuntu0.1 |
None known |
partedUbuntu:18.04:LTS |
All versions, plus listed versions 3.2-183.2-203.2-20ubuntu0.13.2-20ubuntu0.2 |
None known |
partedUbuntu:20.04:LTS |
All versions, plus listed versions 3.2-263.3-13.3-33.3-43.3-4ubuntu0.20.04.1 |
None known |
partedUbuntu:22.04:LTS |
All versions, plus listed versions 3.4-13.4-1build13.4-23.4-2build1 |
None known |
partedUbuntu:24.04:LTS |
All versions, plus listed versions 3.6-33.6-3.1build23.6-4build1 |
None known |
partedUbuntu:26.10 |
All versions, plus listed versions 3.6-63.7-13.8-2 |
None known |
partedUbuntu:26.04:LTS |
All versions, plus listed versions 3.6-53.6-6 |
None known |
partedopenSUSE:Tumbleweed |
before 3.8-1.1 | 3.8-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | CVE List, EUVD, NVD | |
| affected, aliases, references | OSV | |
| affected, aliases, facts, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-89085 is a medium vulnerability (CVSS 6.6) in Red Hat Enterprise Linux 10, published September 29, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 10th percentile. Fixed in parted 3.8-2.
References
access.redhat.com/security/cve/CVE-2026-89085
bugzilla.redhat.com/show_bug.cgi?id=2466034
nvd.nist.gov/vuln/detail/CVE-2026-89085
github.com/advisories/GHSA-j946-9w8f-v6hg
security-tracker.debian.org/tracker/CVE-2026-89085
advisories.mageia.org/MGASA-2026-0512.html
Show 12 moreShow less
bugs.mageia.org/show_bug.cgi?id=36423
lists.fedoraproject.org/archives/list/[email protected]/message/2K3TJ47ZMRSILG3IESTHGOOFEBBL5HS4
lists.opensuse.org/archives/list/[email protected]/message/6UHEOPPKU525Y6OAUPMV2W65RVVSAQ4V
suse.com/support/update/announcement/2026/suse-su-20265090-1
bugzilla.suse.com/1286017
ubuntu.com/security/CVE-2026-89085
cve.org/CVERecord?id=CVE-2026-89085
alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html