CVE-2026-126831

cpio: Schwachstelle ermöglicht Denial of Service

Open Source cpio

A flaw was found in cpio. A local user can cause a Denial of Service (DoS) by triggering a stack-based buffer overflow when creating archives in tar or ustar formats. When archiving files owned by users or groups with names exceeding 32 characters, cpio copies these names into fixed-size memory without verifying their length. This unbounded copy corrupts stack memory and causes the application to crash.

7. Nov 2026

Ausgewertete Quellen

• Red Hat
  https://access.redhat.com/security/cve/CVE-2026-126831
• Red Hat
  https://bugzilla.redhat.com/show_bug.cgi?id=2571893
• CERT-Bund
  WID-SEC-2026-4551
• NVD
  CVE-2026-126831