Moderate Security Vulnerability in coreutils: Denial of Service and Information Disclosure
Summary
RLSA-2026:67886: Moderate: coreutils security update. Affects coreutils versions < 0:9.5-8.el10_2.1. Fixed in 0:9.5-8.el10_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The coreutils package contains the GNU Core Utilities, which are essential tools for file manipulation, text processing, and system management in Unix-like operating systems. It combines functionalities from previously separate packages like GNU fileutils, sh-utils, and textutils. This package is widely used in various Linux distributions, including Rocky Linux, and is critical for system operations. However, recent vulnerabilities have been identified that could potentially compromise system stability and data integrity.
Vulnerability Detail
The coreutils package has two significant vulnerabilities. The first, identified as CVE-2026-56391, allows for a Denial of Service and information disclosure through an out-of-bounds read when processing multibyte input in the 'uniq' command. The second vulnerability, CVE-2026-56392, enables a Denial of Service via crafted tab stop values in the 'unexpand' command. These vulnerabilities can lead to system crashes and unauthorized data exposure, posing a risk to system security and reliability.
How To Fix
Minimum fixed version
0:9.5-8.el10_2.1
This is the first release that contains the fix.
sudo dnf update coreutilsTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the 'uniq' and 'unexpand' commands with multibyte input or crafted tab stop values until the package is updated. This can help mitigate the risk of triggering the vulnerabilities.
Conclusion
The coreutils package has been identified with moderate vulnerabilities that could lead to Denial of Service and information disclosure. It is crucial to update the package to the latest version to mitigate these risks. Users are encouraged to monitor their systems and utilize tools like Vulert for real-time vulnerability alerts.
See every vulnerability recorded for coreutils →
FAQ
Coreutils is a package that provides essential utilities for file manipulation, text processing, and system management in Unix-like operating systems.
The vulnerabilities include a Denial of Service and information disclosure through out-of-bounds reads in 'uniq' and Denial of Service via crafted tab stop values in 'unexpand'.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
The CVSS score for these vulnerabilities is 6.1, indicating a moderate level of severity.
You can update coreutils by running 'sudo yum update coreutils' in your terminal to ensure you have the latest patched version.
References
Related vulnerabilities
Recent vulnerabilities recorded for coreutils.
