Multiple Vulnerabilities in Fedora 44 Affecting Coreutils and ABRT

On August 3, 2026, Fedora released updates addressing critical vulnerabilities in two packages: ABRT and Coreutils. The ABRT tool had multiple issues, including content injection and race conditions, linked to CVEs 2026-54228, 2026-54229, 2026-54230, and 2026-54231, all published on June 13, 2026. These vulnerabilities could allow local attackers to exploit system resources and escalate privileges. Additionally, Coreutils was updated to fix a denial of service vulnerability (CVE-2026-56391) related to out-of-bounds reads, published on July 24, 2026. Users are advised to audit Linux privileges and apply the updates immediately to mitigate risks. The vulnerabilities could lead to significant system compromise if not addressed promptly.

Key Points: • Fedora 44 ABRT vulnerabilities allow local privilege escalation and content injection. • Coreutils has a denial of service vulnerability that can be exploited with multibyte input. • Immediate updates are recommended to mitigate risks associated with these vulnerabilities.