CVE-2026-89088
Public on 2026-09-18
Modified on 2026-09-18
Description
heap buffer overflow in duplicate_legacy_root_dir
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
NOTE: https://alioth-lists.debian.net/pipermail/parted-devel/2026-September/006032.html
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| Amazon Linux 2 - Core | parted | 2026-10-12 | ALAS2-2026-3982 | Fixed |
| Amazon Linux 2023 | parted | 2026-10-12 | ALAS2023-2026-3189 | Fixed |
| Amazon Linux 2027 Preview | parted | 2026-10-12 | ALAS2027-2026-187 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| Amazon Linux | CVSSv3 | 7.1 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H |