CLEANSTART-2026-JG03690 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function...

CLEANSTART-2026-XI12669 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

CLEANSTART-2026-KI43881 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...

CLEANSTART-2026-MO22180 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function...

CLEANSTART-2026-CH13035 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...

CLEANSTART-2026-II91762 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the hashinit function...

CLEANSTART-2026-GL89384 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function...

CLEANSTART-2026-DV87095 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the nextinputfile function...

CLEANSTART-2026-GC33240 use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function

Security vulnerability affects the busybox package. A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvari function...

CLSA-2026-1792760111 Fix CVE(s): CVE-2021-42380

SECURITY UPDATE: awk: use-after-realloc in evaluate when a $N field reference reallocates Fields while another operand still points into it - debian/patches/CVE-2021-42380.patch: Read L values before evaluating R, cap fsrealloc size, and rebase L.v when Fields moved during evaluation of R -...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvars function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox’s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handlespecial function...

Astra Linux – Vulnerability in busybox

A use-after-free in Busybox 1.35-x’s awk applet leads to denial of service and potentially code execution when processing a crafted awk pattern in the copyvar function...

Astra Linux – vulnerability in busybox

A use-after-free in Busybox’s awk applet can lead to denial of service and potentially code execution when processing a specially crafted awk pattern within the evaluate function...

Astra Linux – vulnerability in busybox

A use-after-free in Busybox’s awk applet can lead to denial of service and potentially code execution when processing a specially crafted awk pattern within the getvari function...

Astra Linux – vulnerability in busybox

A use-after-free in Busybox’s awk applet can lead to denial of service and potentially code execution when processing a specially crafted awk pattern within the nvalloc function...

SUSE-SU-2026:24154-1 Security update for busybox

This update for busybox fixes the following issues: - CVE-2023-42366: heap-buffer-overflow in the nexttoken function bsc1217586. - CVE-2026-38752: Denial of Service via crafted AWK script bsc1271544. - CVE-2026-38753: use-after-free in awksub bsc1271545. - CVE-2026-38754: heap overflow in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2022-000279)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000279 advisory. A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function...

Malicious code in link-user-awk-bundle-throw (npm)

Source: amazon-inspector 13af1c15269c3456ca5cec6d14a4862505a34f1cf9fcfb6c89f3e739db65abe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in kappa-awk-deploy-simulate-encrypt (npm)

Source: amazon-inspector 72ecfbadfec940172b0dbe19e5b6c4d4e3e2ddfd4b92f95aa5c3cdb00e3126e4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...