CVE-2026-88842
LOWCVSS 3.3Description
A flaw was found in BusyBox dpkg. The write_status_file() function does not reset a field cursor between package stanzas. When two packages are removed in a single invocation and the first stanza is larger than the second, the second package stanza can be dropped from the status file, causing limited data corruption.
Timeline
Published:October 14th, 2026 11:17 AM
Last modified:October 15th, 2026 8:17 PM
CVSS Scoring
CVSS v3: 3.3 (LOW)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Weaknesses (CWE)
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute