Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-89085

Fixed in a distro release EPSS <1%CVSS 6.6

A flaw was found in parted. A heap-based buffer overflow can occur when processing a specially crafted FAT32 filesystem due to an integer calculation error during buffer allocation. A local attacker could exploit this by enticing a user or automated service to open a malicious filesystem image, resulting in an application crash leading to a Denial of Service (DoS) or potential memory corruption.

Published 2026-10-16 · CVE record · OSV

Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9

Distro releases

ReleasePackageFixed in
Debian 12partedno fix
Debian 13partedno fix
Debian 14parted3.8-2
Ubuntu 14.04 LTSpartedno fix
Ubuntu 16.04 LTSpartedno fix
Ubuntu 18.04 LTSpartedno fix
Ubuntu 20.04 LTSpartedno fix
Ubuntu 22.04 LTSpartedno fix
Ubuntu 24.04 LTSpartedno fix
Ubuntu 26.04 LTSpartedno fix
Ubuntu 26.10partedno fix
openSUSE Tumbleweedparted3.8-1.1