An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo number on 64-bit platforms, which is not practical).

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during     qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements     must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo     number on 64-bit platforms, which is not practical). (CVE-2026-40200)

Note that Nessus relies on the presence of the package as reported by the vendor.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - A security flaw has been discovered in musl libc up to 1.2.6. Affected is the function iconv of the file
    src/locale/iconv.c of the component GB18030 4-byte Decoder. Performing a manipulation results in
    inefficient algorithmic complexity. The attack must be initiated from a local position. To fix this issue,
    it is recommended to deploy a patch. (CVE-2026-6042)

  - An issue was discovered in musl libc 0.7.10 through 1.2.6. Stack-based memory corruption can occur during
    qsort of very large arrays, due to incorrectly implemented double-word primitives. The number of elements
    must exceed about seven million, i.e., the 32nd Leonardo number on 32-bit platforms (or the 64th Leonardo
    number on 64-bit platforms, which is not practical). (CVE-2026-40200)

ID	Name	Product	Family	Severity
307035	Linux Distros Unpatched Vulnerability : CVE-2026-40200	Nessus	Misc.	high
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440284	Alpine: multiple musl packages: security update to 1.2.5-r11	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Cloud Security	Alpine Linux Local Security Checks	medium
440282	Alpine: multiple musl packages: security update to 1.2.4_git20230717-r6	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	medium

Detections

Analytics

CVE-2026-40200

high

Tenable Plugins

high

medium

medium

medium

medium