CVE-2026-126831

A stack-based buffer overflow exists in cpio within the write_out_tar_header() function. The vulnerability occurs when creating archives in tar or ustar formats if the files are owned by users or groups with names exceeding 32 characters. Because the application fails to verify the length of thes...

CVE-2026-126831 Cpio: cpio: stack-based buffer overflow in write_out_tar_header() with long usernames/groupnames

A flaw was found in cpio. A local user can cause a Denial of Service DoS by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory...