openSUSE BusyBox Moderate Buffer Overflow Vulnerability Update 2026-3908

Find practical guidance for preventing, investigating, and responding to Linux security problems. Review Linux Privileges ×

This update for busybox fixes the following issues:

* CVE-2023-42366: heap buffer overflow in the `next_token` function of

`editors/awk.c` (bsc#1217586).

* CVE-2026-38752: stack buffer overflow in the `evaluate()` function of

`editors/awk.c` (bsc#1271544).

* CVE-2026-38753: use-after-free in the `awk_sub()` function of

`editors/awk.c` (bsc#1271545).

* CVE-2026-38754: heap buffer overflow in `ifsbreakup()` function of

`shell/ash.c` (bsc#1271547).

* CVE-2026-38755: heap buffer overflow in `evalcommand()` function of

`shell/ash.c` (bsc#1271548).

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like

YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

zypper in -t patch SUSE-2026-3908=1

* openSUSE Leap 15.4 (noarch)

* busybox-syslogd-1.35.0-150400.4.9.1

* busybox-procps-1.35.0-150400.4.9.1

* busybox-util-linux-1.35.0-150400.4.9.1

* busybox-misc-1.35.0-150400.4.9.1

* busybox-patch-1.35.0-150400.4.9.1

* busybox-xz-1.35.0-150400.4.9.1

* busybox-adduser-1.35.0-150400.4.9.1

* busybox-unzip-1.35.0-150400.4.9.1

* busybox-man-1.35.0-150400.4.9.1

* busybox-kmod-1.35.0-150400.4.9.1

* busybox-links-1.35.0-150400.4.9.1

* busybox-vi-1.35.0-150400.4.9.1

* busybox-psmisc-1.35.0-150400.4.9.1

* busybox-grep-1.35.0-150400.4.9.1

* busybox-dos2unix-1.35.0-150400.4.9.1

* busybox-gawk-1.35.0-150400.4.9.1

* busybox-findutils-1.35.0-150400.4.9.1

* busybox-tftp-1.35.0-150400.4.9.1

* busybox-which-1.35.0-150400.4.9.1

* busybox-iproute2-1.35.0-150400.4.9.1

* busybox-whois-1.35.0-150400.4.9.1

* busybox-ncurses-utils-1.35.0-150400.4.9.1

* busybox-sysvinit-tools-1.35.0-150400.4.9.1

* busybox-iputils-1.35.0-150400.4.9.1

* busybox-net-tools-1.35.0-150400.4.9.1

* busybox-bc-1.35.0-150400.4.9.1

*

*

*

*

*

*

*

*

*

*

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases