busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

Linux Distros Unpatched Vulnerability : CVE-2026-88839

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of- bounds write of heap pointers. CVE-2026-88839 Note that...

SUSE CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

AZL-105125 CVE-2026-88839 affecting package busybox 1.36.1-27

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

DEBIAN-CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

UBUNTU-CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839 Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839 Busybox: busybox: passwd/group parser writes heap pointers out of bounds due to stale tokenize() endpoint

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

The BusyBox passwd/group utility contains a vulnerability in the tokenize() function where it references a stale endpoint pointer after trimming. This flaw leads to an out-of-bounds write of heap pointers. To mitigate this risk, ensure that /etc/group and /etc/passwd are writable only by root and...

EUVD-2026-85512

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

CVE-2026-88839

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers. Mitigation Ensure /etc/group and /etc/passwd are writable only by root and protected by mandatory access controls. Monitor these files for unauthorized modifications...

PT-2026-105033

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

PT-2026-97429

Name of the Vulnerable Software and Affected Versions BusyBox affected versions not specified Description The tokenize function in the passwd/group module references a stale endpoint pointer after a trimming operation. This leads to an out-of-bounds write of heap pointers, which occurs when the...

CVE-2026-88839: Out-of-bounds Write

BusyBox passwd/group tokenize references a stale endpoint pointer after trimming, causing an out-of-bounds write of heap pointers...

SuSE 11 / 11.1 Security Update : popt (SAT Patch Numbers 2647 / 2648)

This update fixes a security problem where RPM misses to clear the SUID/SGID bit of old files during package updates. CVE-2010-2059 Also the following bugs were fixed : - make 'rpmconfigcheck status' exit with 4 bnc592269 - do not use glibc for passwd/group lookups when --root is used bnc536256 -...