Ubuntu 26.04 GNU Core Utilities Critical DoS Issues USN-8697

Find practical guidance for preventing, investigating, and responding to Linux security problems. Find practical guidance for preventing, investigating, and responding to Linux security problems. _ Review Linux Privileges ×

Several security issues were fixed in GNU Core Utilities. Software Description: - coreutils: GNU core utilities Details: It was discovered that GNU Core Utilities sort had a heap buffer under-read in its begfield() function. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. (CVE-2025-5278) It was discovered that GNU Core Utilities uniq had an out-of-bounds read when the -w option was used with crafted multibyte input. A local attacker could possibly use this issue to cause GNU Core Utilities to crash, resulting in a denial of service, or obtain sensitive information. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-56391)

Several security issues were fixed in GNU Core Utilities.

Software Description:

- coreutils: GNU core utilities

It was discovered that GNU Core Utilities sort had a heap buffer under-read

in its begfield() function. A local attacker could possibly use this issue

to cause GNU Core Utilities to crash, resulting in a denial of service, or

obtain sensitive information. (CVE-2025-5278)

It was discovered that GNU Core Utilities uniq had an out-of-bounds read

when the -w option was used with crafted multibyte input. A local attacker

could possibly use this issue to cause GNU Core Utilities to crash,

resulting in a denial of service, or obtain sensitive information. This

issue only affected Ubuntu 26.04 LTS. (CVE-2026-56391)

The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS gnu-coreutils 9.7-3ubuntu2.1 Ubuntu 24.04 LTS coreutils 9.4-3ubuntu6.3 Ubuntu 22.04 LTS coreutils 8.32-4.1ubuntu1.4 In general, a standard system update will make all the necessary changes.

CVE-2025-5278, CVE-2026-56391

Ubuntu Security Notice USN-8697-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases